Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ae8295bf-3c38-3bba-9921-e637da9d8817.roa
File: ae8295bf-3c38-3bba-9921-e637da9d8817.roa (raw, json)
Hash identifier: vCl4A9FYSZRc3ED9/XsiWhcZw1Z2ytSTZj5JqFhqEvc=
Subject key identifier: D7:13:D9:A5:64:5A:2C:29:EA:C1:58:ED:6F:3D:7D:FF:AE:11:5B:48
Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial: 010D0C9F432858432DE8A128772F9410DA69D580
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ae8295bf-3c38-3bba-9921-e637da9d8817.roa
Signing time: Sun 10 Sep 2023 18:52:18 +0000
ROA not before: Sun 10 Sep 2023 18:52:18 +0000
ROA not after: Sat 09 Dec 2023 19:52:18 +0000
asID: 834
IP address blocks: 173.195.224.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:2d:e8:a1:28:77:2f:94:10:da:69:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
Validity
Not Before: Sep 10 18:52:18 2023 GMT
Not After : Dec 9 19:52:18 2023 GMT
Subject: CN=f45ee855-ccf4-45d5-866a-df87e6630833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:81:50:04:d7:23:8a:99:77:7f:6e:b5:4e:
a4:76:0f:1b:70:24:c6:e0:af:ad:49:b8:ad:79:7b:
63:f9:13:8e:18:ed:1a:cc:21:7c:db:50:f8:6c:37:
79:3e:c4:ce:32:b9:7d:e2:1e:82:e5:f8:72:02:69:
8f:f0:37:75:47:fa:54:88:e7:20:f5:94:0d:a4:02:
4d:b5:37:2b:21:5d:1c:03:7d:ca:00:44:a4:67:79:
a1:56:4e:32:18:78:a3:a6:e7:2d:9c:7e:1f:f7:52:
ea:e1:33:90:20:25:35:87:b6:a4:93:6b:b6:5b:67:
9f:f4:2f:45:ba:a4:2d:55:09:24:bd:ff:27:ba:db:
17:d3:23:25:5e:18:b3:4c:49:99:3d:f7:f3:55:9a:
78:bb:5a:c9:58:48:97:02:c9:be:ce:98:f2:9d:25:
4d:98:08:dd:60:c3:4c:9b:68:03:70:f5:66:63:4a:
50:53:9b:54:47:df:05:98:c3:e9:46:77:fa:79:79:
42:04:5e:41:a1:57:0b:b6:49:b6:ca:85:86:bf:14:
5e:8c:4d:e9:3d:5e:06:aa:64:b9:68:8a:e3:46:01:
8c:c5:97:1d:1c:c0:01:ea:45:8b:77:db:95:f8:78:
63:5d:d2:75:ef:77:f6:8c:b2:78:f4:4d:43:0d:e1:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:13:D9:A5:64:5A:2C:29:EA:C1:58:ED:6F:3D:7D:FF:AE:11:5B:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/ae8295bf-3c38-3bba-9921-e637da9d8817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
X509v3 Authority Key Identifier:
keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:e5:16:f7:bb:82:6e:62:67:fd:28:f4:30:56:68:c6:ff:d8:
ce:4d:67:1a:6f:00:ac:a1:c3:33:22:67:be:73:07:03:88:98:
8b:ac:69:7e:71:f9:19:1a:c3:59:3a:63:0a:0c:f8:1b:97:0e:
f7:5b:31:56:a7:2e:af:2b:2a:90:f8:d8:1e:67:89:c9:d2:1a:
21:7a:1a:e9:c1:3b:1f:24:20:91:bc:9c:80:d2:ba:2f:04:af:
e8:62:26:73:e0:c4:0f:65:77:80:fc:7e:65:9e:95:b6:44:91:
c2:61:92:f9:84:b3:51:7e:16:6b:fd:70:d1:e0:d1:97:18:72:
50:e8:dd:ef:0f:2b:30:6e:03:a9:6b:e6:b1:b3:77:c9:30:35:
5e:0b:7f:c9:d2:cc:35:fe:dd:38:86:1b:53:f6:d3:17:b9:bb:
cf:6a:c2:87:a5:48:4f:be:8e:b2:70:4b:ea:a9:c0:98:72:49:
1a:41:eb:a1:cf:14:9b:73:c8:ac:e0:4d:4f:93:ff:c7:ae:1c:
a1:6a:8b:55:a1:71:f9:ee:44:f4:37:ae:ea:f9:98:e7:7e:da:
59:d4:02:73:b1:52:9d:1c:33:48:56:20:9c:fe:3b:30:54:43:
c3:dc:9b:f0:00:d9:84:66:12:ea:59:f9:1b:3a:9f:be:42:41:
27:f0:74:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 21:13:52 2023 by rpki-client on console-ams.rpki-client.org