Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/f3835adf-d9b4-3863-bed5-ba478fd633dd.roa
File: f3835adf-d9b4-3863-bed5-ba478fd633dd.roa (raw, json)
Hash identifier: ZXeNdrCJh/WpjnJAzbvuMzZdOV1ayimFK5FXCGOL944=
Subject key identifier: 57:B5:E3:B9:51:45:89:BF:D1:09:54:01:83:3C:92:E7:89:A2:5D:75
Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial: 010D0C9F432858455402BABB44C327DA5F4D6B00
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/f3835adf-d9b4-3863-bed5-ba478fd633dd.roa
Signing time: Mon 25 Mar 2024 19:59:29 +0000
ROA not before: Mon 25 Mar 2024 19:59:29 +0000
ROA not after: Sun 23 Jun 2024 19:59:29 +0000
asID: 63902
IP address blocks: 65.181.180.0/22 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 16:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:54:02:ba:bb:44:c3:27:da:5f:4d:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Validity
Not Before: Mar 25 19:59:29 2024 GMT
Not After : Jun 23 19:59:29 2024 GMT
Subject: CN=961c5f54-db15-40a7-b7a7-e1a9f98c099d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:d3:31:e7:c8:f9:c1:4a:43:54:75:dd:05:
20:ec:0b:aa:6d:1b:ab:41:ee:8f:0b:b8:d9:71:33:
fa:80:e2:a4:11:98:93:a3:d2:e5:a1:45:a3:89:6d:
09:e3:ef:8e:9d:ca:bd:93:86:31:b4:c6:dd:af:d9:
7b:ad:2d:ff:0b:b2:cc:c3:6b:c3:d5:bd:94:42:f7:
e0:ab:56:62:3d:37:dc:40:8f:67:ec:60:57:ce:4c:
ee:e4:b4:d0:da:ea:d4:c9:f1:83:c9:c9:21:7c:5f:
a1:b7:3d:78:95:50:1f:d2:78:57:41:c3:19:cd:27:
ad:48:76:dd:09:6e:6a:bc:45:e1:37:21:86:a6:ca:
fc:7e:cb:87:de:59:3e:ec:18:a7:2e:24:78:ed:3d:
4e:34:14:46:fc:1e:36:c5:23:18:4c:aa:66:a3:58:
f0:ba:90:1b:f9:e4:84:38:31:62:84:3b:64:f0:ff:
91:e8:30:f1:a1:3c:55:e1:56:15:e0:d5:2f:c9:0c:
09:da:8c:c8:ec:dd:c1:e1:75:90:a6:cb:7a:e0:88:
16:4f:82:48:ed:d0:23:71:0e:eb:c6:00:ec:61:22:
9a:8c:23:4d:67:be:1a:1d:d6:7e:df:f0:02:88:ba:
6c:47:34:25:e3:bd:60:80:e1:9e:a6:c7:e8:0e:f5:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:E3:B9:51:45:89:BF:D1:09:54:01:83:3C:92:E7:89:A2:5D:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/f3835adf-d9b4-3863-bed5-ba478fd633dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
X509v3 Authority Key Identifier:
keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
sbgp-ipAddrBlock: critical
IPv4:
65.181.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:6d:4b:25:ec:a2:55:90:77:a7:1c:bf:22:6e:90:b4:4c:49:
6e:a1:51:7b:bd:b7:f9:e7:45:ed:12:df:23:9b:c3:ff:81:29:
31:2b:3b:a6:31:e4:de:71:00:73:96:6e:0d:b1:b2:6e:16:06:
17:dd:c2:26:64:a1:d3:e0:dc:d9:c9:49:bd:10:08:df:dc:a2:
f8:e2:98:dd:98:49:44:6a:d4:02:60:5e:a8:d0:ff:44:d3:08:
57:8b:78:71:99:55:05:34:9e:b7:6c:58:72:81:ab:4b:58:06:
9d:d1:a1:7e:c9:86:f5:ef:9b:a2:33:2a:94:e5:a5:14:d2:3a:
92:40:32:37:0f:61:58:99:7a:6e:29:35:ec:c6:d8:05:aa:25:
af:63:6b:a1:04:f1:a4:0f:19:ac:47:06:7c:4a:6b:ea:7b:1b:
51:36:53:7a:8c:dd:8f:bb:de:a4:5d:e0:55:1f:1a:85:3b:95:
2c:de:b5:8c:6b:04:ec:93:85:20:fd:7f:3a:a8:9c:1e:da:9f:
55:04:24:e1:99:f5:fd:6c:74:ea:f6:61:e6:b9:f2:ad:f8:c2:
be:54:7e:2b:1b:63:44:37:6b:d9:3d:15:34:26:96:f8:e6:96:
a2:aa:e7:a3:e0:b3:68:bd:fe:22:7e:eb:03:9f:db:b8:c0:a0:
85:3d:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 18:55:18 2024 by rpki-client on console-fra.rpki-client.org