Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/4d76ed2f-7152-3f2a-bceb-b30e7bbc0ec5.roa
File: 4d76ed2f-7152-3f2a-bceb-b30e7bbc0ec5.roa (raw, json)
Hash identifier: ATnDUwxpOCQTdrCllxpSjX8v94Pb+27mM/Ga5z3VO58=
Subject key identifier: 6F:71:01:3D:E6:B1:E9:67:56:BE:15:CA:76:C2:24:F5:A5:BA:C3:9D
Certificate issuer: /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Certificate serial: 010D0C9F4328584179D23C451FEB54C31ED702C0
Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/4d76ed2f-7152-3f2a-bceb-b30e7bbc0ec5.roa
Signing time: Fri 07 Apr 2023 13:45:35 +0000
ROA not before: Fri 07 Apr 2023 13:45:35 +0000
ROA not after: Thu 10 Jul 2025 04:00:00 +0000
asID: 21700
IP address blocks: 206.168.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 13:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:79:d2:3c:45:1f:eb:54:c3:1e:d7:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Validity
Not Before: Apr 7 13:45:35 2023 GMT
Not After : Jul 10 04:00:00 2025 GMT
Subject: CN=02f5e109-6743-4ce3-82bc-625bc0a30f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:79:cd:e3:ea:83:85:0e:c9:82:84:c4:16:
7d:b3:e8:4d:c6:fb:df:b8:78:ea:c3:12:0f:5f:1c:
03:6b:c4:fa:dc:2a:85:6b:a8:e9:28:26:9b:41:8e:
f1:02:40:2e:25:cf:28:ba:47:72:94:49:eb:73:d3:
03:89:a7:69:5d:4b:ae:2c:6b:5f:27:f8:78:4c:97:
1a:b5:22:f6:f4:5f:85:55:9e:5a:c8:69:be:ea:0e:
13:37:04:86:39:9b:df:a2:44:e1:5f:ea:cd:fb:d3:
99:13:d2:f3:93:25:7d:9a:4c:19:84:32:88:e2:7d:
ca:6e:a3:a5:57:46:ee:27:b4:74:71:6d:a9:95:5f:
b3:c4:f1:67:a6:27:1b:8a:ad:a6:06:4e:82:81:17:
86:d7:bf:a3:59:94:55:f6:a2:35:01:4a:8e:ca:82:
d1:be:b0:f1:1e:42:67:f3:50:18:f2:63:59:81:a7:
f7:fe:b1:42:39:94:2d:a4:c8:40:8d:19:fc:14:45:
5b:58:aa:a9:51:c5:d7:03:78:e7:6b:f2:2b:80:75:
41:62:29:95:37:bb:b2:6e:2e:9b:b5:bb:e6:24:81:
cf:8f:11:ab:be:f1:57:68:c9:6b:e2:6a:dc:c8:ad:
d5:b8:49:84:04:7a:3a:c5:df:d2:8a:cf:b6:2b:3a:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:01:3D:E6:B1:E9:67:56:BE:15:CA:76:C2:24:F5:A5:BA:C3:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/4d76ed2f-7152-3f2a-bceb-b30e7bbc0ec5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl
X509v3 Authority Key Identifier:
keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:8c:23:fd:d0:36:aa:85:33:34:55:b7:70:8f:b1:63:dc:ac:
a8:87:56:ae:94:e4:6d:80:58:2f:fc:25:2f:03:4b:05:53:fc:
51:69:76:81:71:c1:52:60:0f:be:73:94:77:5b:53:85:d0:c7:
3c:77:2c:53:1a:08:19:43:1a:24:62:4f:91:c5:80:30:b2:a0:
f3:a8:a7:9b:43:13:57:45:76:f2:9a:6f:50:3f:44:42:e7:fa:
db:cf:e6:05:f6:fd:4b:00:b8:0d:b7:6a:21:d9:ce:05:6c:7b:
86:8a:85:bc:e7:0c:fd:eb:50:48:9b:d2:24:83:17:b0:f6:b6:
a7:bc:5c:f4:09:99:3c:77:3b:e8:f2:69:18:4b:5f:55:6c:2b:
dd:07:a6:86:e4:eb:6d:83:bc:21:22:ae:55:87:92:5c:95:80:
35:eb:45:6a:92:06:f6:1b:1f:fc:15:26:84:69:d7:61:9d:2f:
b7:dd:55:af:8e:c8:1d:38:cf:35:41:70:25:06:d9:e2:1b:dc:
28:16:a5:ad:ba:31:c7:97:b5:ed:28:ea:80:e1:a7:04:b2:8e:
8c:a2:95:8e:50:8b:e4:bf:87:d9:ca:39:98:d3:61:d9:84:9a:
5a:80:77:4a:f7:2a:77:58:a1:b2:8c:99:ab:af:0e:a3:42:7e:
7c:43:b2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org