Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7f5fca7a-26d1-31c1-a047-ceda9c369d84.roa
File: 7f5fca7a-26d1-31c1-a047-ceda9c369d84.roa (raw, json)
Hash identifier: vw+TGnp+3sSbZPTlbKFeWKo/LGRglfv8jmDhO0sVaDk=
Subject key identifier: 24:B8:58:4F:07:34:67:8C:BC:BA:A2:DD:D1:0C:3E:2F:76:A7:53:D9
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F43285847D1CE5EEE74BEDF28763FDD00
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7f5fca7a-26d1-31c1-a047-ceda9c369d84.roa
Signing time: Sat 09 Nov 2024 06:59:42 +0000
ROA not before: Sat 09 Nov 2024 06:59:42 +0000
ROA not after: Fri 07 Feb 2025 06:59:42 +0000
asID: 1004
IP address blocks: 209.112.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 19:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d1:ce:5e:ee:74:be:df:28:76:3f:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Nov 9 06:59:42 2024 GMT
Not After : Feb 7 06:59:42 2025 GMT
Subject: CN=da51663b-5f82-4cdd-bcb6-dab7e55dbacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:04:90:b7:d8:d4:1c:5e:b7:5c:db:cc:65:
0b:40:19:ed:e2:a2:b1:f0:53:6e:3a:25:58:f6:0e:
40:d1:89:80:4d:53:49:37:85:ae:d8:dc:f8:ad:2b:
3f:06:8c:56:61:ad:cf:d1:6c:9b:aa:49:af:52:61:
0f:01:d8:0a:3b:d6:db:c2:be:25:09:d0:2f:5a:72:
2f:54:d4:91:77:6c:c5:cb:f8:1b:fb:6a:4f:d2:64:
6e:0f:90:cd:2b:f5:97:34:db:6c:d9:fc:04:1f:d4:
c6:db:da:f0:5d:33:d4:0e:79:be:f6:1c:83:6e:44:
f9:13:52:f8:23:f8:91:08:81:a0:53:26:de:89:c6:
9a:59:ce:3d:32:6c:b6:ac:df:bd:2d:de:45:9a:b3:
2f:f4:40:04:b0:bb:42:57:f7:06:27:a7:97:04:be:
81:61:5f:07:dc:d0:c0:ca:8f:2d:cb:24:ba:30:d2:
fc:56:a8:ea:6d:ee:2f:0d:fb:4a:a0:cc:f6:6a:f7:
3a:d8:6e:a8:93:34:fb:ad:66:35:b4:1b:b1:b9:6c:
8d:9d:88:79:8f:86:e5:73:46:6f:f3:61:89:58:fa:
f3:33:2b:1a:c6:03:dd:8c:fd:0d:66:a8:c6:f5:22:
f0:ff:db:bc:94:a0:85:62:a9:9a:aa:4e:8d:1d:47:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:58:4F:07:34:67:8C:BC:BA:A2:DD:D1:0C:3E:2F:76:A7:53:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7f5fca7a-26d1-31c1-a047-ceda9c369d84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:42:56:d0:f6:97:37:e9:b8:af:ce:97:fc:0f:b6:12:4b:8e:
27:7e:19:9c:ca:6d:45:1b:75:1f:55:df:9f:40:a1:22:e4:96:
ac:67:22:a5:24:01:75:3f:79:e4:ba:0f:07:3a:07:29:12:75:
d4:5f:90:47:12:1d:e3:23:7c:e7:18:7d:e4:77:94:80:ac:82:
d8:14:c6:70:ee:8e:ef:df:de:27:0b:13:36:44:19:db:b9:f4:
41:f3:4f:49:40:5a:d0:72:70:ca:37:c5:20:5c:4e:53:c7:ca:
da:9f:68:91:53:de:f9:8a:d6:de:d9:9d:99:02:7b:47:16:c4:
e1:46:c3:fc:1b:b7:97:e5:bc:72:16:db:5e:86:dd:fb:d1:1f:
5c:d0:3f:c6:9b:16:de:ad:ae:f0:6b:76:7a:64:d4:51:b6:f2:
ae:b4:fa:81:16:b5:13:ff:04:3d:57:27:ea:1e:32:64:56:1c:
dd:6e:cf:b5:36:65:77:7e:35:a2:c4:33:c6:2b:fc:f3:e9:95:
a2:e8:96:fc:6b:98:e2:76:71:e4:fd:b4:e8:f6:3a:bd:f9:99:
d3:b6:23:47:22:1d:f8:d1:af:2e:cc:7f:88:13:f5:83:0f:74:
db:46:3a:3b:b4:7b:cb:69:57:2a:47:7f:70:8e:4e:df:d6:8f:
59:0d:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 22:35:44 2024 by rpki-client on console-ams.rpki-client.org