Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/12755a41-c456-3042-9705-92a0b38f3dbf.roa
File: 12755a41-c456-3042-9705-92a0b38f3dbf.roa (raw, json)
Hash identifier: 19Tew2IrpFtYiruKcDSiDS+l8qTqswIuFpcTd97PXrA=
Subject key identifier: BD:9B:C7:8A:78:BC:5F:E5:47:2B:83:6C:7A:67:7F:12:57:DA:49:1B
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F43285844150E8E822864AF27E0D539A0
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/12755a41-c456-3042-9705-92a0b38f3dbf.roa
Signing time: Sat 02 Dec 2023 14:00:21 +0000
ROA not before: Sat 02 Dec 2023 14:00:21 +0000
ROA not after: Fri 01 Mar 2024 14:00:21 +0000
asID: 396055
IP address blocks: 104.238.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:15:0e:8e:82:28:64:af:27:e0:d5:39:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Dec 2 14:00:21 2023 GMT
Not After : Mar 1 14:00:21 2024 GMT
Subject: CN=0300fb3a-b3cb-42a1-b95e-350fa85aec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:0c:6e:3d:cb:0c:0c:c6:bd:5d:e6:ed:04:
ec:93:47:32:2b:b7:76:ba:28:65:1b:a2:40:e8:99:
4b:5d:a2:1b:8f:16:fd:28:5f:6e:8e:75:eb:d8:9f:
8d:a4:c9:e0:e7:7d:0f:47:c6:16:b2:74:21:43:6d:
bf:84:d4:d8:0b:bc:d4:64:2a:21:ea:ad:d0:e0:fe:
d2:91:d9:04:da:9e:3e:33:1a:da:3b:4b:57:13:81:
fb:42:6c:13:86:de:de:16:0d:c2:3c:18:90:e2:84:
f1:c3:3e:59:45:a5:34:b4:a0:65:4c:e0:cf:7a:ac:
87:f5:ce:30:f4:95:41:5f:79:40:7e:78:13:11:b4:
5d:13:8d:88:76:41:37:ea:ba:a7:e3:7f:a8:33:2d:
6a:79:79:fc:f1:c1:ec:d6:5f:45:c9:f6:04:f3:6d:
85:f8:e9:83:77:27:78:d0:3e:a7:c0:63:23:0d:6a:
cb:e4:be:11:39:7f:35:16:cf:75:16:9f:f0:3e:ad:
24:60:2d:40:67:3a:a9:a6:fb:8a:af:39:6a:25:cb:
aa:63:43:a2:d1:05:41:37:7b:e1:0f:fc:6e:54:10:
1c:9b:55:aa:67:c5:a4:6d:2b:a9:b4:60:95:c6:18:
90:0f:1b:91:67:f2:7e:ff:3b:0c:97:d6:07:b5:00:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9B:C7:8A:78:BC:5F:E5:47:2B:83:6C:7A:67:7F:12:57:DA:49:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/12755a41-c456-3042-9705-92a0b38f3dbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:20:8a:d0:91:09:64:40:d0:95:c2:f8:a1:2c:0a:aa:29:13:
92:17:8d:d9:cc:cf:bc:03:5f:0c:c8:ca:79:18:32:ec:bd:5d:
cf:40:41:97:d7:4a:f0:12:ed:da:79:c5:e4:28:5e:2a:2a:47:
ac:c9:9b:d1:62:a4:75:e3:d9:a6:e5:37:29:d7:49:08:af:c4:
72:d4:e1:fa:cf:03:4f:56:71:09:ec:b9:50:85:9e:f4:a9:3b:
84:be:59:09:00:8a:61:37:47:d6:9b:3a:47:3b:9f:5b:4d:d5:
7f:eb:88:f4:78:16:4d:12:ac:9a:5d:61:22:14:60:5d:6d:a7:
6c:be:0f:c0:35:c6:3e:70:6e:c5:8c:07:d8:6f:ed:a2:24:a6:
61:dc:be:3f:ff:62:98:a5:c6:0e:c3:ce:1f:a5:a9:96:48:ce:
7c:73:13:95:e4:de:8d:1f:ea:e5:c9:8e:1d:f1:e7:42:70:bb:
a1:ae:8c:04:79:1f:d3:77:9c:e6:94:cd:b3:99:47:90:f6:bc:
76:20:ab:d8:1c:ea:14:84:de:f5:17:b2:cd:04:46:21:ee:e3:
3b:3d:81:07:d2:b3:d7:cc:55:a1:31:14:d6:12:9c:b1:66:c6:
ef:38:3e:6d:f5:6d:58:6e:48:c1:25:c7:2c:06:ca:63:48:bc:
b1:e3:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 20 17:14:05 2023 by rpki-client on console-fra.rpki-client.org