Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/533b2f29-f6f0-3b80-8853-1eb2cd826b4e.roa
File: 533b2f29-f6f0-3b80-8853-1eb2cd826b4e.roa (raw, json)
Hash identifier: kdBgzG1s/qoRp/Pn+N6lPaHabechRqX1bh6MshPm7AY=
Subject key identifier: C1:39:A7:91:E9:5C:F9:82:98:11:1B:4A:D1:8B:DE:4D:7D:85:5A:26
Certificate issuer: /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Certificate serial: 010D0C9F432858442672ED2A2D34105678837F80
Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/533b2f29-f6f0-3b80-8853-1eb2cd826b4e.roa
Signing time: Fri 08 Dec 2023 19:31:25 +0000
ROA not before: Fri 08 Dec 2023 19:31:25 +0000
ROA not after: Thu 07 Mar 2024 19:31:25 +0000
asID: 13438
IP address blocks: 104.232.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:26:72:ed:2a:2d:34:10:56:78:83:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Validity
Not Before: Dec 8 19:31:25 2023 GMT
Not After : Mar 7 19:31:25 2024 GMT
Subject: CN=0b090715-a469-4969-b854-55bc3d44376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:6b:55:98:e8:b5:36:c6:dc:82:23:44:86:
8d:01:8c:39:99:93:bf:90:a9:bc:f3:de:a9:f8:a9:
c8:e2:68:b0:a0:b8:8d:32:87:af:4d:a5:1b:45:27:
b0:62:a7:41:2e:76:fa:f6:f8:18:c8:51:3c:5f:e7:
8d:5a:4d:ba:2c:48:6c:9c:ea:e7:34:36:0c:cc:83:
9b:0a:ae:40:29:33:ce:1f:5d:fc:2a:69:f9:da:42:
63:55:bb:0d:1b:7a:35:65:ca:5d:a1:08:81:78:ac:
5a:a3:48:8b:f7:0f:b5:e1:96:88:27:bf:7d:48:8f:
07:fc:f3:7e:f8:79:7d:f3:86:81:ec:89:9f:ac:08:
7e:6a:8e:6b:e7:b3:fd:d9:62:f8:bf:b5:eb:33:f9:
7c:7a:7b:56:3d:1d:c0:93:09:d9:4a:a1:0d:c9:52:
ce:be:ed:de:95:34:96:35:53:0d:c7:d1:3c:32:95:
ba:30:87:dc:18:20:82:a9:46:60:53:ea:53:46:9e:
93:c0:b9:f4:7b:f6:64:4c:2f:dc:d2:4b:59:9b:dd:
08:8e:9b:16:39:cf:5e:19:24:f6:33:de:b7:1c:2a:
8b:78:41:78:72:31:a6:dd:09:6f:24:b5:84:13:cb:
be:d6:df:24:da:fc:04:19:97:11:13:b6:18:85:5c:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:39:A7:91:E9:5C:F9:82:98:11:1B:4A:D1:8B:DE:4D:7D:85:5A:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/533b2f29-f6f0-3b80-8853-1eb2cd826b4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl
X509v3 Authority Key Identifier:
keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:78:83:60:f8:af:5e:01:fe:7b:96:d3:51:4e:ed:dc:42:2a:
d1:8e:42:bc:10:40:ad:ad:ae:5e:2e:e1:e2:59:ee:f7:fa:6a:
89:38:41:6a:0a:d8:85:8a:1a:52:34:ee:02:7f:52:9f:cd:fd:
a0:50:e4:e3:98:28:ec:bf:b5:5e:07:81:6c:3e:3c:c3:15:9b:
d0:ef:1c:ef:0a:c7:6f:1b:f7:b1:f0:7f:33:05:a6:e0:7f:07:
c3:3b:70:bb:7a:b7:88:af:f2:f3:c4:28:90:12:52:c0:0a:ad:
fd:b0:04:9a:5f:cf:0f:85:09:44:b6:60:d5:8a:03:a3:0f:e8:
ed:01:97:11:f7:d0:82:be:aa:5a:b6:0e:d4:ce:bd:4b:70:c5:
3a:86:38:a4:6f:5b:6d:1c:42:30:69:41:be:6a:c4:fc:65:15:
ce:d1:33:cd:f6:56:9a:e2:01:5d:a0:93:9c:eb:c2:e7:26:58:
7f:a4:eb:c5:1a:81:77:62:a3:dd:92:7a:24:c8:bc:d8:4f:16:
4f:1e:2f:ce:cd:ae:1d:59:73:9c:04:c5:e0:22:a7:c8:10:49:
ad:92:08:00:f9:63:47:b2:5c:c7:1b:c0:fd:19:fc:72:2d:69:
24:56:a2:80:16:68:20:7d:f7:69:2b:d7:d0:31:12:51:b2:e7:
82:90:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 9 04:09:33 2023 by rpki-client on console-ams.rpki-client.org