Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c7bd9a87-a8fa-3a0d-8336-9db4f83d2c6b.roa
File: c7bd9a87-a8fa-3a0d-8336-9db4f83d2c6b.roa (raw, json)
Hash identifier: Yqa/s0faODYlJ/+CZnD4O4w7AR8gnvAte81CHUScfZ0=
Subject key identifier: 6D:F3:FD:08:A9:BC:DC:3C:81:9B:32:FE:99:5F:6A:86:E2:9F:67:0E
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F43285845D39E61E545A8C4567B7980C0
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c7bd9a87-a8fa-3a0d-8336-9db4f83d2c6b.roa
Signing time: Fri 10 May 2024 13:00:36 +0000
ROA not before: Fri 10 May 2024 13:00:36 +0000
ROA not after: Thu 08 Aug 2024 13:00:36 +0000
asID: 54203
IP address blocks: 209.234.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 22:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:d3:9e:61:e5:45:a8:c4:56:7b:79:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: May 10 13:00:36 2024 GMT
Not After : Aug 8 13:00:36 2024 GMT
Subject: CN=7c26f844-c86b-4cc9-907c-3672057631fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:9c:6f:ee:30:ec:ae:22:4b:36:0a:51:8c:
6b:a4:cf:b0:95:5d:89:cd:34:12:3b:33:29:76:cd:
ff:b2:c6:c6:c1:71:21:b2:04:4c:bf:22:94:ac:67:
c9:d3:25:4a:1b:81:96:5e:30:6b:84:60:1b:56:3d:
28:ec:ba:26:c6:6f:ec:17:30:73:5a:d0:55:b9:79:
70:a3:8c:2f:35:8a:fe:d4:15:38:c7:d0:6e:1a:c9:
60:32:b3:32:1c:ce:a5:4c:d0:13:72:43:ac:83:2b:
8c:1e:68:01:dc:1c:a7:64:60:3c:c0:a4:9e:d0:60:
67:f9:23:1a:24:58:61:19:ea:93:36:9d:98:68:61:
6a:79:e9:03:11:ce:26:81:76:8b:77:ba:88:bf:7b:
64:45:b6:c0:28:73:76:2f:73:3e:d1:dd:d0:e6:a5:
9a:bc:c3:97:f6:fd:ab:4d:55:94:87:d3:1d:e7:ac:
a5:b7:29:44:12:0d:9e:be:9c:b0:49:42:09:69:3c:
0f:fe:85:45:f9:46:8b:74:91:c5:57:6c:6c:f9:50:
e1:86:59:30:b8:a8:73:56:bd:0f:59:f8:9b:53:63:
ad:e3:0e:77:48:01:e0:ff:55:a3:c7:de:f7:03:1b:
a2:04:b0:1c:fd:fc:4f:7a:75:9d:7e:59:8a:38:22:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F3:FD:08:A9:BC:DC:3C:81:9B:32:FE:99:5F:6A:86:E2:9F:67:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c7bd9a87-a8fa-3a0d-8336-9db4f83d2c6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.234.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:05:90:d1:39:93:23:6b:77:b6:fd:a8:20:d3:ae:8a:b1:08:
2d:0f:c2:d9:73:c8:eb:d0:cf:39:c3:94:8c:4c:49:f7:f7:8f:
ec:f4:fc:12:cc:91:f3:73:2b:81:dc:f7:e8:68:3e:b0:d5:9d:
3b:51:19:da:c5:19:c8:c2:85:22:3c:34:5c:5e:18:9d:0f:51:
5a:88:89:ef:d1:f5:6f:18:c7:65:2b:4c:d9:9c:7c:b5:09:51:
b5:aa:9a:5d:23:2c:32:79:e7:b2:cd:0d:e9:d9:ff:b4:c2:f7:
1e:46:45:56:51:b3:16:ef:a9:b1:98:52:c3:fa:2c:f7:c3:38:
bf:ad:e0:f3:41:2c:98:cc:91:64:f3:3e:c9:31:e9:3b:8d:9e:
c4:8c:77:9e:7e:d6:78:fe:65:be:1f:4d:87:bd:88:c2:f4:cd:
4c:a7:04:93:aa:d4:c1:cb:95:c4:44:25:b6:f3:db:f9:26:b0:
6a:ce:09:8b:38:84:46:eb:c1:a2:0e:d1:74:91:e8:19:7d:a8:
1b:34:35:5b:32:73:42:c1:8d:7b:0a:7b:e7:a2:31:ac:63:3b:
8a:61:f4:e0:59:00:24:b5:8a:8a:12:35:1b:62:4d:90:0b:9a:
0b:80:2a:56:98:2f:4a:3f:bf:50:08:4d:39:51:a6:e7:02:13:
ed:51:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 00:02:56 2024 by rpki-client on console-ams.rpki-client.org