Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/32caed9c-221d-3d47-b346-6509dad639e3.roa
File: 32caed9c-221d-3d47-b346-6509dad639e3.roa (raw, json)
Hash identifier: 7muc+cdX7qpbLGY74ob9DA6FX1gazoSsbF+oG282MpE=
Subject key identifier: 64:33:02:FB:63:7E:CD:F6:37:C7:3F:22:9B:94:A6:8D:ED:FE:12:B7
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F432858428052706D33EDFF8624FAC200
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/32caed9c-221d-3d47-b346-6509dad639e3.roa
Signing time: Mon 10 Jul 2023 14:34:50 +0000
ROA not before: Mon 10 Jul 2023 14:34:50 +0000
ROA not after: Sun 08 Oct 2023 14:34:50 +0000
asID: 11810
IP address blocks: 204.194.222.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:80:52:70:6d:33:ed:ff:86:24:fa:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Jul 10 14:34:50 2023 GMT
Not After : Oct 8 14:34:50 2023 GMT
Subject: CN=38204ce3-7af5-4083-9aed-33ee0544f857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:71:8f:29:a5:ba:8c:9d:6e:36:7f:6e:ae:
7a:d5:23:24:ac:5f:6d:f0:a9:ea:67:3f:04:08:67:
a3:19:48:91:22:d6:50:d8:58:90:de:68:d8:ff:e6:
f8:00:b7:08:95:20:21:db:cf:ee:1f:3b:db:32:b5:
2a:09:91:5d:ee:91:d4:8b:de:f1:c1:1d:de:39:ee:
6d:5b:d5:45:d8:da:8b:0b:a5:79:01:76:d1:37:cb:
b8:a9:2b:33:63:0e:d9:c8:a6:02:2d:e2:9c:bd:71:
b5:bf:fc:a7:d9:e9:e6:de:b9:10:ce:58:d2:b3:b3:
ab:28:a4:3e:a7:1b:b3:69:9e:75:d2:a2:c7:9a:67:
f0:01:f5:1f:99:1b:d7:0b:43:fc:1c:cd:2b:bb:0a:
57:a5:9d:9e:85:c2:10:33:ec:44:b3:14:35:9d:e7:
0b:46:dd:68:53:2d:d1:e0:da:a3:c5:c8:ef:7c:0e:
3d:0a:09:9f:58:75:ed:f9:8e:01:b5:79:f0:ca:30:
24:53:85:04:cb:fc:c0:eb:12:a2:88:99:69:4b:7e:
c6:2b:48:61:70:b6:e1:e3:6b:5f:22:7c:6a:57:41:
90:b7:00:aa:98:3e:3d:4a:13:e7:95:e7:2a:cb:a6:
2a:33:5e:c4:ac:c9:92:37:0d:3d:7f:b9:fc:27:54:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:02:FB:63:7E:CD:F6:37:C7:3F:22:9B:94:A6:8D:ED:FE:12:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/32caed9c-221d-3d47-b346-6509dad639e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
204.194.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:cb:9d:7d:ec:5a:23:14:1c:a6:cf:3c:88:98:c5:f8:26:08:
5c:3c:65:6d:40:b8:20:ee:90:c6:e4:4d:91:48:88:ea:70:d9:
2d:4a:96:7f:95:bc:8f:c5:20:e3:d3:1a:89:d6:39:d0:9d:69:
24:ad:e0:ff:dd:71:dc:4c:52:24:6a:86:a9:6b:ab:5b:0d:28:
cc:45:c0:d7:93:11:5e:be:a1:b4:bb:94:c3:41:24:6d:4d:90:
12:bb:fb:19:71:c6:ac:de:2d:14:5f:c7:60:34:56:6f:0a:82:
e3:39:98:c8:4c:b5:93:04:81:20:56:51:5d:71:b0:ef:77:25:
2a:ca:b3:a1:84:3d:a5:ef:ef:9c:a6:24:0b:ae:ab:5b:7d:92:
72:0f:c3:1b:f3:3c:73:7a:b9:5f:1a:99:2e:bf:c1:f9:b1:bc:
47:72:9f:60:64:3b:df:60:4e:49:bf:a8:f2:fb:f4:67:54:03:
2a:f5:a8:f8:ec:ba:d2:71:0a:8a:08:6c:1b:45:51:f4:6c:9d:
17:cd:e2:91:cc:2a:e5:b5:ea:3d:17:93:db:d5:14:d3:e4:33:
c1:e2:2f:f9:62:5e:b9:0b:7c:6c:a9:ad:01:8b:b7:c2:c0:c6:
3b:cd:12:41:17:5d:32:9e:d8:52:29:4c:0d:ee:bd:40:22:cf:
59:0f:af:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 29 15:50:28 2023 by rpki-client on console-ams.rpki-client.org