Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/b5e1204a-f93b-3954-a860-9eec3be5d18d.roa
File: b5e1204a-f93b-3954-a860-9eec3be5d18d.roa (raw, json)
Hash identifier: I7kc5OfXSdngMlQFnJWqNxCr/sf8d6qg1IY3R0c/3ZM=
Subject key identifier: 42:1B:C5:8A:BC:B9:1E:17:C8:A4:65:CD:84:20:15:6C:EC:78:58:97
Certificate issuer: /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial: 010D0C9F432858457A48780569E9BF22A212BC80
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/b5e1204a-f93b-3954-a860-9eec3be5d18d.roa
Signing time: Mon 08 Apr 2024 13:00:34 +0000
ROA not before: Mon 08 Apr 2024 13:00:34 +0000
ROA not after: Sun 07 Jul 2024 13:00:34 +0000
asID: 151352
IP address blocks: 207.174.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 08:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:7a:48:78:05:69:e9:bf:22:a2:12:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Validity
Not Before: Apr 8 13:00:34 2024 GMT
Not After : Jul 7 13:00:34 2024 GMT
Subject: CN=d18e9efb-bf01-4146-ae62-c85fb7f0ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f3:94:df:41:fc:5b:91:30:c1:5c:36:ac:99:
4a:a0:35:e3:a5:8c:f9:e9:30:c8:c4:91:2d:41:02:
5c:8a:e8:4d:8d:b6:0d:86:c3:86:84:66:9b:f4:0b:
4e:b5:7f:3d:75:f6:67:36:6d:f0:0b:87:fa:5a:e4:
09:b1:b9:23:7b:8f:8b:4b:11:af:0f:5a:7e:28:f7:
ce:fe:7f:8e:e2:20:d9:0c:fc:e2:5e:79:11:7b:3c:
23:e6:d4:16:f7:3e:72:40:56:8f:18:9a:7a:76:22:
7a:a7:75:8e:a2:80:8a:8a:7d:72:7c:ea:9a:7d:55:
50:14:3b:8f:f8:1b:e5:2d:5d:88:09:9b:d5:a3:09:
ef:96:9e:70:29:47:7b:dc:7d:ff:4e:e8:93:d5:b5:
cd:4f:1a:09:9a:c9:db:2e:cc:cb:12:7f:7a:fb:f7:
d0:0f:51:81:6c:44:21:ae:1b:ed:21:07:b8:09:42:
aa:4b:fa:a5:72:12:78:f4:43:52:43:6a:29:cf:d0:
a8:b2:04:09:29:49:97:db:56:ef:ad:22:53:39:de:
a3:47:37:07:f5:77:ea:dc:77:30:ef:00:85:90:85:
7a:b0:25:83:af:99:8b:30:fe:69:24:98:d5:dd:c7:
58:b9:27:b9:19:1f:5a:2c:79:20:b4:7b:0d:13:20:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:C5:8A:BC:B9:1E:17:C8:A4:65:CD:84:20:15:6C:EC:78:58:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/b5e1204a-f93b-3954-a860-9eec3be5d18d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
X509v3 Authority Key Identifier:
keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:30:d6:0e:c2:c9:91:02:71:ae:c5:dd:60:33:74:87:63:62:
e6:46:7c:3f:78:09:c1:ee:2b:67:b6:23:24:d8:3a:9b:b5:d5:
de:5a:54:62:69:32:19:c8:0b:7c:5b:5a:6c:44:b7:f8:e3:80:
39:a5:a5:c0:ae:4b:3e:53:40:93:4f:84:fa:54:9f:5a:7a:64:
54:a6:12:cd:4a:72:28:2c:4b:17:85:3d:7f:26:d6:72:2b:93:
2a:27:a2:2f:d5:25:5c:a3:4e:ce:98:0e:c8:b7:cc:c6:58:c6:
23:0f:74:b0:0e:ef:1e:ee:83:f8:d7:d2:5b:24:e4:d2:2c:ad:
d1:f7:58:85:7a:5d:73:a6:a6:4c:f4:08:a6:bc:f4:cc:31:72:
7c:d9:4d:c2:a7:4e:54:f9:12:c4:1a:d0:2e:70:92:8e:69:7d:
92:90:7b:79:bd:57:49:59:16:ad:c6:c6:4a:85:c4:84:45:95:
16:30:72:14:11:e5:2d:38:42:d4:f3:24:7e:d9:28:a5:55:34:
51:eb:dd:a8:00:82:d2:17:cd:de:7c:3b:f1:a9:ee:9c:55:c0:
82:87:e7:c0:1d:7a:69:9b:e2:d2:95:33:93:07:7c:62:8d:d2:
a8:a1:35:84:81:7c:ff:0f:1f:1d:f2:14:c1:f0:41:70:34:76:
2b:98:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:06:49 2024 by rpki-client on console-fra.rpki-client.org