Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3f8b2a7c-bea6-3f2f-9074-4ac7bb0ff81d.roa
File: 3f8b2a7c-bea6-3f2f-9074-4ac7bb0ff81d.roa (raw, json)
Hash identifier: ad8oDnm3fAcGbBl1chJIph7paEeCIdnfNUVPiaxDgLI=
Subject key identifier: 99:9A:22:EA:BB:D1:76:3A:70:53:A8:2A:80:95:12:A0:65:1E:88:00
Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial: 010D0C9F43285844D2E523994427462EA3AE5280
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3f8b2a7c-bea6-3f2f-9074-4ac7bb0ff81d.roa
Signing time: Thu 08 Feb 2024 14:00:33 +0000
ROA not before: Thu 08 Feb 2024 14:00:33 +0000
ROA not after: Wed 08 May 2024 13:00:33 +0000
asID: 6079
IP address blocks: 64.40.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 14:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d2:e5:23:99:44:27:46:2e:a3:ae:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Validity
Not Before: Feb 8 14:00:33 2024 GMT
Not After : May 8 13:00:33 2024 GMT
Subject: CN=03834ea2-66d1-4341-8486-271afc6f6ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:69:9a:3f:72:c2:a8:c3:e1:4c:31:24:1b:
66:f1:69:9a:f1:d4:83:22:32:d3:21:fa:a4:c0:27:
37:36:5f:9e:45:2c:e9:41:24:99:b4:95:9d:2b:37:
f9:d9:b5:9c:a3:85:ab:58:c8:a5:3e:f0:73:25:b5:
4e:70:9c:3b:b4:8a:f8:04:df:8d:f3:47:22:ff:4e:
7b:12:98:23:75:d1:42:aa:32:d4:03:10:c0:5b:3e:
06:d2:f4:16:8c:f4:47:bb:7f:ce:6d:28:08:ca:77:
fd:b1:51:d7:82:0d:0a:2a:4f:19:ea:3c:8a:01:07:
34:db:ee:12:6b:39:11:7e:0c:b6:8c:40:f7:d7:73:
3a:fc:be:52:0c:a0:88:2c:f0:56:f9:81:a5:a9:09:
0a:8e:1b:4d:77:ca:05:aa:8b:a2:32:0c:d3:66:31:
6d:7c:9a:6e:5f:2b:c7:1e:1c:86:e2:15:1d:fe:42:
bd:85:4a:f9:be:2e:d8:d0:0f:fd:8f:31:7c:ea:1a:
cc:85:4e:5d:cc:bd:c0:ea:00:22:42:eb:d8:a3:d0:
52:73:6d:56:ca:c4:37:ad:3a:88:62:6f:e2:8d:c1:
c8:05:0e:69:de:32:1c:28:f9:6c:11:34:01:c8:be:
9f:5d:32:13:6c:d7:d0:0b:30:d7:25:92:54:eb:be:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:22:EA:BB:D1:76:3A:70:53:A8:2A:80:95:12:A0:65:1E:88:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/3f8b2a7c-bea6-3f2f-9074-4ac7bb0ff81d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
X509v3 Authority Key Identifier:
keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.40.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:e8:8c:fe:bb:37:29:a2:07:58:04:42:8a:15:e1:c0:22:87:
78:2a:c1:80:3d:81:60:fc:81:4e:0d:3a:68:df:c3:da:b5:30:
6f:ea:e1:3e:cb:ce:67:21:59:bd:1a:59:0c:d9:f1:e4:5f:b7:
e9:66:9a:b4:ec:ee:cf:65:26:3d:d2:5f:43:ad:fe:78:67:90:
97:43:50:96:14:eb:6f:6c:89:12:03:93:1a:3c:63:94:13:b9:
67:07:25:15:1d:b0:5d:eb:85:66:d0:06:72:ac:2e:94:5a:e3:
78:04:6b:78:ca:11:70:2a:3b:cb:f6:40:ab:dd:83:b1:31:bf:
fe:09:82:25:6c:01:52:00:ac:9c:eb:d4:0d:67:6b:2a:15:ee:
7d:6a:13:ba:1a:eb:fc:97:48:aa:5e:74:cf:2a:9a:f2:12:62:
f2:6a:79:d1:3a:f0:32:66:c4:7c:3f:f3:52:4c:cd:db:42:93:
17:41:87:25:1b:20:ba:b8:b3:86:ce:2f:92:ee:8b:47:55:81:
a2:e4:e0:74:a2:f5:3a:97:e4:0c:f9:84:b4:07:28:b8:46:21:
98:ba:74:d8:36:cf:d8:0c:95:4a:62:05:a7:4d:03:1d:4b:cc:
c1:66:88:b0:b7:de:05:39:c5:df:ee:8d:e8:6f:61:44:15:a7:
c3:08:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 17 16:01:27 2024 by rpki-client on console-ams.rpki-client.org