Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/fd91ae25-383a-3710-834b-09fd16e80859.roa
File: fd91ae25-383a-3710-834b-09fd16e80859.roa (raw, json)
Hash identifier: OZO4nZ/rOYagkbKAt/ShTF3ph8nXkIwvbKi8YI4z11o=
Subject key identifier: 7E:C2:EC:EC:E1:0E:D6:77:1D:EA:F8:73:F7:47:D9:3E:81:03:AA:CA
Certificate issuer: /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
Certificate serial: 010D0C9F43285844474ED923C7FF7BEA23142000
Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/fd91ae25-383a-3710-834b-09fd16e80859.roa
Signing time: Wed 20 Dec 2023 14:00:21 +0000
ROA not before: Wed 20 Dec 2023 14:00:21 +0000
ROA not after: Tue 19 Mar 2024 13:00:21 +0000
asID: 33501
IP address blocks: 72.250.184.0/21 maxlen: 21
72.250.176.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 23 Feb 2024 23:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:47:4e:d9:23:c7:ff:7b:ea:23:14:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
Validity
Not Before: Dec 20 14:00:21 2023 GMT
Not After : Mar 19 13:00:21 2024 GMT
Subject: CN=53e43a50-1b6d-4f85-8e03-09a655328d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ba:45:6c:e5:a6:d1:68:25:f2:a8:dc:af:ab:
6e:fd:fc:da:3b:81:65:12:c6:1c:9f:70:2f:45:33:
41:51:c1:b5:c1:7e:1c:88:1f:e1:83:f1:50:ac:ee:
27:32:ff:5f:91:e7:53:c7:16:54:50:df:1a:30:9b:
5c:af:db:30:32:5b:a7:fb:74:69:67:2e:0e:1d:86:
6e:73:4b:3c:0f:b3:94:fa:ba:b2:6f:87:62:74:c0:
6f:e3:66:54:71:18:da:06:1f:68:13:a0:03:ba:ae:
b5:59:25:07:94:f1:7c:fc:34:ed:cb:24:94:83:8b:
81:d2:b2:f5:15:c2:13:e8:65:67:83:7b:40:b8:46:
c3:86:26:2e:b4:8d:3b:c5:22:9e:91:fb:37:a9:b3:
c3:e9:77:05:23:a5:40:3a:d3:c5:8a:46:df:7f:6d:
02:13:7b:21:40:8c:f1:4e:06:59:37:0c:e2:4a:f2:
37:9c:5f:8b:b7:d0:ac:0b:fd:e8:77:cf:0d:dd:7f:
e3:85:6a:e7:4b:f3:93:5a:14:fd:c8:b4:17:63:e6:
5a:ea:8e:07:9a:c9:c1:71:3c:b6:80:6d:64:65:95:
b6:2b:7a:92:e1:49:e5:24:04:41:dc:7e:c6:c9:ae:
9b:d3:e6:37:21:b8:17:bc:21:80:b2:7a:4d:14:79:
33:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C2:EC:EC:E1:0E:D6:77:1D:EA:F8:73:F7:47:D9:3E:81:03:AA:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/fd91ae25-383a-3710-834b-09fd16e80859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl
X509v3 Authority Key Identifier:
keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
sbgp-ipAddrBlock: critical
IPv4:
72.250.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:f3:03:9d:1f:63:c3:d4:b7:58:16:7c:07:c8:4a:a1:db:99:
67:34:60:2b:02:22:39:8f:75:d8:bd:9b:9a:5f:18:b4:4b:d6:
1e:9b:f9:e6:b5:9a:1f:75:89:2c:6c:87:c0:d7:c0:67:a5:a3:
c0:0d:59:21:e5:d2:bd:99:48:24:3f:03:75:19:8b:da:92:c6:
ed:5a:c5:85:f7:ef:c9:ee:8a:3e:4c:dd:18:7a:41:5d:a6:40:
fb:b3:f9:ab:b2:79:13:3d:5c:fd:a8:f3:ad:f8:a9:5e:42:d2:
77:2e:d9:dc:fe:9b:a0:61:8d:ef:e0:bb:9d:a9:df:b5:1f:c7:
0d:b9:57:ce:31:13:cb:60:36:45:e5:86:96:f8:0f:cd:b1:47:
9d:a9:3b:f4:47:09:fb:73:b7:9b:ff:31:68:95:60:c3:64:8e:
9b:cb:4f:10:ea:01:d2:b8:20:5b:c1:90:38:dc:5d:96:64:ff:
f8:2c:93:c9:ca:f9:c2:98:2f:32:e0:47:60:4e:9c:c3:1c:9f:
56:28:f5:13:c9:e2:57:68:73:44:fd:c4:e4:ee:ec:0d:b2:38:
78:9b:cb:6d:4f:53:5a:75:c3:79:5c:99:60:a7:da:40:17:56:
5a:ff:ff:e0:b6:92:35:cb:f5:54:c0:2a:74:9f:18:36:1f:77:
f1:d2:bb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 04:07:01 2024 by rpki-client on console-ams.rpki-client.org