Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/098ebb84-e6e0-393a-a315-0e7931b6c158.roa
File: 098ebb84-e6e0-393a-a315-0e7931b6c158.roa (raw, json)
Hash identifier: K9KOY8eIlfIvnk9pIpxCdr9P5eGzCPOOZnkmI9joglk=
Subject key identifier: 2A:88:5A:D4:15:E0:4E:6E:24:BE:0B:15:A8:37:4C:2B:F9:2D:BE:33
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DC8BEAE10F5100F21D27DC970
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/098ebb84-e6e0-393a-a315-0e7931b6c158.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Fri 02 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 71.241.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:be:ae:10:f5:10:0f:21:d2:7d:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : May 2 04:00:00 2025 GMT
Subject: CN=14a6f9d8-708a-4894-8cee-9e8fa6abcfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:03:44:1a:8b:21:57:6d:84:02:8a:c2:ff:
1b:9d:0f:c7:1f:f3:ca:d8:29:a3:f8:76:bb:10:cf:
8b:59:43:ff:ae:c2:e7:76:f4:4c:0d:65:b2:65:0f:
0b:95:35:e9:2a:94:e6:5c:9b:bd:74:da:7f:9f:4c:
50:5b:0d:45:83:d4:c2:a1:f7:f2:05:fa:4e:73:14:
1f:23:78:93:e4:1c:a9:36:7b:cd:ba:d2:cd:dd:c3:
1c:da:f3:89:a9:cd:65:88:c4:4f:bf:9d:6f:17:ad:
0a:4f:25:bb:e4:a2:eb:5c:aa:81:b6:ec:cf:0f:c7:
57:9b:ed:05:37:e4:b5:06:b6:b6:a6:77:c2:fa:36:
dc:99:bc:78:01:6b:85:82:90:70:a4:58:0d:fb:01:
b9:0a:32:09:73:8e:86:25:42:67:4b:82:1f:ab:15:
c0:15:41:0d:d1:99:dd:87:e6:3b:1c:88:63:9c:a4:
3c:be:26:73:d6:23:5f:1d:3d:69:9a:38:77:05:ee:
57:0a:51:de:89:20:4d:ad:1d:55:9c:49:6c:4e:9e:
c7:40:50:73:64:de:3c:6f:48:87:aa:f3:0f:af:dc:
b3:81:e2:55:90:f3:ba:79:19:8c:20:4d:9e:a7:28:
f8:ff:19:9d:29:0d:05:61:77:c1:5e:97:e9:9b:53:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:88:5A:D4:15:E0:4E:6E:24:BE:0B:15:A8:37:4C:2B:F9:2D:BE:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/098ebb84-e6e0-393a-a315-0e7931b6c158.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.241.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:09:43:01:c1:4b:1d:3e:91:81:3a:5a:f4:a9:86:f8:35:64:
45:c8:65:03:cb:4a:e9:c9:88:ba:ce:bd:ab:0d:8b:d1:6e:09:
5a:6c:72:6a:a8:b0:87:03:88:88:ef:e7:6a:84:c9:10:35:7a:
fd:3b:24:2b:7a:c3:60:28:a1:6d:12:ed:b6:9a:56:ef:38:55:
37:e1:8b:d0:9d:37:e4:64:4b:83:15:29:c3:e7:0c:c6:fc:8b:
f1:a0:12:7d:bd:91:d1:db:bd:92:d0:2c:d3:9a:95:1f:1f:15:
f0:35:39:66:c9:e8:d7:51:0a:ea:34:9a:b2:59:c1:7a:a4:24:
b2:b0:b1:5a:6c:f8:6f:15:6d:99:9b:66:f0:f0:3d:c2:3b:37:
ec:ac:2c:17:e4:07:3a:d8:01:34:3e:55:18:da:fe:d0:22:c4:
52:ca:07:96:b2:b3:af:8c:ce:b9:28:51:fd:e2:0a:1c:2c:6e:
af:74:74:61:36:19:bd:20:bc:2d:6a:85:73:2a:e0:4d:76:b3:
31:4a:10:d5:c4:33:46:9d:a3:e0:53:6b:db:dd:44:60:65:9b:
fe:e9:5d:91:99:b4:f8:9f:79:ad:ef:62:7b:e6:0f:1a:5f:8f:
1c:01:1f:ee:03:98:c2:02:c0:8f:82:0e:84:c4:4a:a2:0a:30:
72:e6:9e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:25 2024 by rpki-client on console-ams.rpki-client.org