Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/f8572113-2a28-300c-9fce-5ed3037a4a27.roa
File: f8572113-2a28-300c-9fce-5ed3037a4a27.roa (raw, json)
Hash identifier: YccX51alAQu6K1PPjEJEp5CNZaTi+H3wDRPNEcGtRcg=
Subject key identifier: C8:C8:37:F9:8E:AE:A9:D3:E6:C7:E9:D5:11:96:13:EB:B2:14:4A:DC
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F43285846B2F515E4E7F95721F5BB1EE0
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/f8572113-2a28-300c-9fce-5ed3037a4a27.roa
Signing time: Mon 29 Jul 2024 13:00:38 +0000
ROA not before: Mon 29 Jul 2024 13:00:38 +0000
ROA not after: Sun 27 Oct 2024 13:00:38 +0000
asID: 54203
IP address blocks: 205.185.222.0/24 maxlen: 24
209.107.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 13:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b2:f5:15:e4:e7:f9:57:21:f5:bb:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Jul 29 13:00:38 2024 GMT
Not After : Oct 27 13:00:38 2024 GMT
Subject: CN=9f371eb4-0477-4c31-be39-4049dcf872f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:b8:d8:9d:0c:72:d6:57:19:0a:d4:ac:40:
7e:98:7f:f4:7a:41:09:b0:a1:34:6f:0e:f8:d8:b7:
97:78:24:79:ee:36:ca:b4:6a:dd:27:f2:c4:fa:ae:
30:d4:a9:5d:df:85:ae:e7:b7:09:f0:25:26:ea:55:
80:bc:ca:d7:58:6b:58:fb:16:23:a1:dd:a2:fe:cc:
e3:92:3a:f5:28:53:7d:f3:5d:68:df:96:1b:de:3c:
3b:fe:2a:f6:b4:83:d9:70:3b:7c:18:94:3b:f7:83:
50:ec:fe:88:5b:42:f0:2f:a1:e7:b4:fc:4a:52:37:
51:98:e6:6b:a9:9c:d7:5b:ae:11:80:46:83:26:4d:
e7:8f:a2:4b:4f:f6:08:32:a0:42:4f:93:4c:78:38:
43:0e:5a:a8:e1:d5:d0:62:8e:0c:b6:15:f5:f5:88:
12:82:e0:50:2b:35:8f:ae:1a:1d:40:d9:8e:79:99:
e2:54:b7:4e:aa:17:88:3e:fd:ca:36:1c:db:90:eb:
36:9e:3c:a5:da:59:46:6b:ed:b9:bc:a0:ae:2c:0d:
3f:a7:0a:fa:06:33:6b:34:ab:80:d2:97:d3:85:b4:
92:da:26:49:95:b3:82:44:ab:e6:a3:15:ae:d8:e5:
b0:07:80:75:e4:59:01:6d:a1:ab:1b:00:2a:86:d8:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:37:F9:8E:AE:A9:D3:E6:C7:E9:D5:11:96:13:EB:B2:14:4A:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/f8572113-2a28-300c-9fce-5ed3037a4a27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
205.185.222.0/24
209.107.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:ae:e6:82:0b:ee:b0:3c:38:a5:92:50:a4:87:92:46:cc:57:
e0:ac:23:21:0c:54:f1:2b:83:7d:5f:67:0a:04:66:b3:16:40:
b0:63:6c:bb:02:17:3c:a9:25:66:89:5f:64:40:50:62:51:1c:
fa:2c:60:79:b9:b8:64:7c:fa:50:c7:90:61:2d:13:d7:67:f7:
72:cb:ab:32:86:c1:38:a3:f6:44:ca:83:51:b1:34:13:1c:2d:
8a:89:f1:56:73:ce:9a:e8:04:8b:08:2b:8d:b9:8b:ef:4c:bc:
99:26:70:4d:29:83:1e:7f:62:2a:d4:7e:16:5c:09:10:c8:98:
ba:24:e1:e6:17:70:b0:dc:c5:4c:8e:5b:f2:00:6a:bb:dc:a0:
db:88:7b:67:83:ee:a9:65:ec:6a:23:25:4d:90:e6:0c:30:49:
ff:79:ee:b5:8b:9c:45:d4:1c:08:5a:4b:0c:8f:bc:74:b3:9d:
a7:5a:0d:01:b7:07:58:19:50:03:4f:75:61:51:35:c7:31:42:
3f:e9:e9:c9:03:92:22:9d:52:6d:66:13:aa:4a:0f:68:2d:f9:
d3:c8:8a:c1:59:d5:0d:94:fd:5d:0f:02:ca:44:b5:b9:f1:d0:
29:37:92:73:d5:96:1b:ef:e7:10:64:7f:31:c0:89:fb:72:55:
5a:2a:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 17:33:28 2024 by rpki-client on console-ams.rpki-client.org