Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/1ea079cf-1bad-3083-8374-722a1d442540.roa
File: 1ea079cf-1bad-3083-8374-722a1d442540.roa (raw, json)
Hash identifier: tHJSKzjZuTHRP+uNI6zZbx03wRiH2LTE/+hWKY/0Gqw=
Subject key identifier: F7:5C:4B:A0:F2:1C:EA:53:00:83:98:14:D3:52:9B:F8:E2:1F:0D:CC
Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial: 010D0C9F43285844ED6AA32FF553D6B3B9CFBC00
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/1ea079cf-1bad-3083-8374-722a1d442540.roa
Signing time: Sun 18 Feb 2024 02:00:25 +0000
ROA not before: Sun 18 Feb 2024 02:00:25 +0000
ROA not after: Sat 18 May 2024 01:00:25 +0000
asID: 3800
IP address blocks: 45.59.64.0/21 maxlen: 24
199.180.248.0/22 maxlen: 24
199.180.252.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 22:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ed:6a:a3:2f:f5:53:d6:b3:b9:cf:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Validity
Not Before: Feb 18 02:00:25 2024 GMT
Not After : May 18 01:00:25 2024 GMT
Subject: CN=565bd317-e00c-4d0b-bb92-3d2e4ba7811f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:7d:e1:fd:9a:c8:6e:4c:bc:63:ab:dc:92:
42:fd:83:23:67:76:cf:b5:62:15:65:39:37:80:c8:
73:1e:e1:4a:21:37:bb:56:4b:e4:93:2d:f7:37:f1:
3d:6c:a9:51:60:fc:66:63:ac:06:04:36:19:1f:53:
5f:89:4c:b1:24:b5:ba:de:19:7a:75:f3:e7:b2:9f:
d4:b8:e8:e5:bb:fe:d4:02:00:d5:3d:41:4f:c9:70:
19:76:4d:6b:e5:17:f8:54:82:1f:6b:2a:62:20:96:
1a:55:83:05:dd:4e:d9:84:b2:83:51:06:e8:39:8f:
4b:23:4e:0a:b5:2c:d9:c9:95:09:8a:51:31:3c:5a:
bd:24:e8:86:46:4a:ae:a9:ab:61:a5:94:0b:2d:a7:
c9:8b:b2:9f:64:12:3f:c4:4d:47:9b:4c:7f:a5:56:
56:b9:b8:66:4f:30:fc:88:71:11:85:67:8d:5c:75:
54:7e:ca:71:1d:4a:3b:b5:a6:1e:3e:16:ee:cd:a8:
b9:2b:59:e1:ab:93:19:34:50:a2:f7:89:db:c7:72:
ff:d4:a3:14:ba:52:23:03:de:56:bb:db:ae:b6:ce:
19:fb:11:51:38:44:eb:9f:ee:88:2b:ac:15:40:05:
27:62:3b:13:b9:e5:2b:f8:dd:a0:f3:80:ed:07:b1:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5C:4B:A0:F2:1C:EA:53:00:83:98:14:D3:52:9B:F8:E2:1F:0D:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/1ea079cf-1bad-3083-8374-722a1d442540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
X509v3 Authority Key Identifier:
keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.64.0/21
199.180.248.0-199.180.253.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:d9:99:65:5f:aa:9b:12:10:f5:d3:7c:6f:5b:e3:48:e2:32:
35:fb:f9:2e:f6:b9:c3:57:ae:1e:33:35:cd:20:83:29:ad:fa:
41:1e:3e:f4:2a:4f:37:01:9a:85:a3:a4:a8:25:3e:10:52:4d:
95:1a:1a:ca:24:28:82:93:06:e8:56:f6:c7:1d:d9:cd:3b:6b:
e6:fb:37:26:d3:4b:d4:e7:1d:f5:e0:b0:80:58:1d:15:8f:9c:
2a:83:65:be:42:6a:76:5b:3b:22:c4:55:84:6b:66:8f:ca:d6:
92:e3:13:27:02:8a:65:fa:58:f1:b4:c3:eb:b8:84:ce:80:fc:
63:79:66:14:cf:cd:4d:ea:ce:58:a9:e4:3d:d3:cd:34:2b:ed:
9d:f4:d6:27:e4:ce:bc:23:b5:42:ba:da:65:9c:10:20:4c:2a:
96:28:65:c8:de:15:4a:35:ff:da:22:4c:f4:4d:b2:3c:ca:1a:
2d:30:1b:97:87:d0:2f:84:6e:4c:3e:74:84:92:fe:8b:7e:38:
87:15:51:df:a0:dd:c6:4c:78:ad:b5:6a:1a:83:ea:88:4d:49:
89:79:c6:91:fd:8c:66:04:a4:75:8f:24:03:42:48:d6:5d:83:
7b:08:5d:a9:d1:f5:89:53:18:29:45:1f:80:0f:34:9d:39:f0:
8e:54:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 22:58:34 2024 by rpki-client on console-ams.rpki-client.org