Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/3865e3e4-79cf-3ade-bad8-68e41b12c038.roa
File: 3865e3e4-79cf-3ade-bad8-68e41b12c038.roa (raw, json)
Hash identifier: 9mcN0ocHk5onx/VVWHMPXTiz4/OpPhsqce3vTHzrrTY=
Subject key identifier: B8:BD:5E:91:84:AD:DA:7C:6A:76:73:BE:DB:CA:BF:56:1C:22:FF:F2
Certificate issuer: /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial: 010D0C9F432858457F07112A6D96C4B0E1790D80
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/3865e3e4-79cf-3ade-bad8-68e41b12c038.roa
Signing time: Wed 10 Apr 2024 05:47:58 +0000
ROA not before: Wed 10 Apr 2024 05:47:58 +0000
ROA not after: Tue 09 Jul 2024 05:47:58 +0000
asID: 47614
IP address blocks: 130.51.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 16:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:7f:07:11:2a:6d:96:c4:b0:e1:79:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Validity
Not Before: Apr 10 05:47:58 2024 GMT
Not After : Jul 9 05:47:58 2024 GMT
Subject: CN=f9205aaf-bcbe-4920-a183-63fac08266e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:63:a3:79:9c:a1:ec:5d:bb:18:31:2d:a3:
0b:da:01:98:12:08:b5:43:07:d0:af:d5:34:37:f2:
84:fa:04:84:be:ae:82:e8:ed:24:b9:d2:83:7c:ef:
21:35:84:76:62:ac:9c:2d:7e:15:b7:bc:28:8d:7d:
79:8a:e6:ee:39:44:23:79:67:15:fc:63:6f:c1:5f:
1e:38:06:dd:f9:ec:ab:5d:1e:dc:64:5c:c9:2d:75:
5c:cb:97:ed:77:0b:69:c4:68:ce:74:74:a2:bb:64:
f7:e4:79:b6:db:62:08:24:b8:31:21:7c:58:f7:0e:
6d:07:67:d4:e7:b4:7c:59:ef:e3:26:96:3e:64:e2:
0e:ff:dc:fe:08:6f:46:ba:a2:36:e1:f3:82:ec:4a:
dd:73:3d:17:82:7a:4c:be:69:b4:e8:42:e1:cf:48:
18:d7:cd:9e:50:97:79:43:39:92:ec:b9:c8:79:60:
31:cb:be:d5:c6:40:ac:f6:71:41:31:29:3e:ef:db:
8d:e7:1d:d0:27:6b:d5:5e:a7:de:9f:d4:1f:45:87:
41:98:31:92:72:7d:d0:63:ba:48:40:c5:b2:06:1f:
ca:99:c8:09:56:15:05:3d:59:ca:1c:d4:87:1c:65:
32:d2:6f:20:69:a0:4c:b5:36:be:ad:22:57:f3:b0:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BD:5E:91:84:AD:DA:7C:6A:76:73:BE:DB:CA:BF:56:1C:22:FF:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/3865e3e4-79cf-3ade-bad8-68e41b12c038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
X509v3 Authority Key Identifier:
keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:87:01:4a:47:b8:a8:3c:fc:c0:ba:d7:e1:d8:9f:77:93:ce:
a9:1f:b4:7c:25:63:44:f0:f1:a0:32:48:1b:d0:f5:68:fd:09:
de:a4:43:ee:18:c4:0f:e2:84:ca:5f:94:0a:28:8d:a0:bd:a5:
75:33:19:e6:82:00:13:c0:27:8b:ff:53:f2:5b:23:b6:95:37:
c2:43:d0:59:75:68:57:d9:a5:17:35:98:37:a5:37:9b:04:28:
19:34:c0:7a:3e:8d:54:9f:f6:85:2c:d1:21:41:65:e4:b6:5d:
05:38:78:69:f4:61:79:94:e4:59:ee:8d:a2:9f:46:b1:d3:c8:
0c:02:35:06:16:cb:db:a8:a5:90:bb:5a:62:60:d5:8b:86:ae:
42:8d:b1:ec:e9:d2:a2:05:31:24:f7:88:21:00:9f:84:27:b5:
fc:5b:21:9a:54:23:39:37:73:de:3c:ff:8c:02:09:07:18:9e:
df:5f:2a:5a:76:04:34:4b:36:21:ef:6b:58:51:3e:c5:ef:b3:
81:17:28:a6:51:0c:f2:3c:34:f4:b1:a7:ef:84:90:99:e6:40:
70:01:6a:6f:23:69:5c:8f:61:5e:b6:96:12:ec:29:61:72:81:
c3:47:00:6e:c4:c6:64:a0:a9:d6:a2:3c:5d:06:ea:f9:a5:c1:
f4:21:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:27:23 2024 by rpki-client on console-fra.rpki-client.org