Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ca24f5ca-f1c6-3fc1-9ab6-c667192fb9af.roa
File: ca24f5ca-f1c6-3fc1-9ab6-c667192fb9af.roa (raw, json)
Hash identifier: WS18s0pmoYkCcNQ56vAB7GrdZTqiErI5DgH7fmP6dKA=
Subject key identifier: D9:47:65:E4:2A:D4:76:EB:D2:97:6A:28:CC:6D:20:C1:83:53:A8:4E
Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial: 010D0C9F432858454DD88B4E8CAAFA2A5CE2DD00
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ca24f5ca-f1c6-3fc1-9ab6-c667192fb9af.roa
Signing time: Sat 23 Mar 2024 14:59:38 +0000
ROA not before: Sat 23 Mar 2024 14:59:38 +0000
ROA not after: Fri 21 Jun 2024 14:59:38 +0000
asID: 834
IP address blocks: 45.62.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 08:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:4d:d8:8b:4e:8c:aa:fa:2a:5c:e2:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Validity
Not Before: Mar 23 14:59:38 2024 GMT
Not After : Jun 21 14:59:38 2024 GMT
Subject: CN=ad0e01a8-a97f-44f5-a86e-381db2f17e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:60:6a:55:81:c6:81:57:c7:c3:48:8d:aa:
ce:55:e5:ae:96:e6:a1:ee:40:70:d4:05:5d:a4:a6:
c9:db:24:27:b4:6f:23:39:cd:4f:2c:31:5a:e6:f1:
11:32:2c:aa:4f:10:49:fc:01:2d:df:99:cd:7a:fc:
91:fd:2e:2d:d1:fc:36:e5:1f:a7:86:19:61:97:bc:
7b:d0:dc:c3:d8:ea:1f:ec:78:b1:84:f1:89:e6:bd:
7d:35:fc:89:87:66:a8:70:b8:fe:ed:fc:ad:40:3d:
27:e4:47:4f:7a:5a:64:eb:c1:ef:a6:59:3c:24:7e:
a6:f4:c4:38:c6:23:f6:70:58:76:81:a1:29:b5:90:
e2:4d:46:dd:f4:92:16:28:41:19:2f:56:59:a3:4b:
d7:ca:20:d4:41:6d:2d:bd:7b:a1:44:f1:ca:0e:79:
40:fd:c2:4f:8c:d7:ed:6c:9f:c6:f5:8b:fb:4f:f9:
2c:f7:7c:d4:51:13:59:fb:5c:46:d7:3c:98:8f:3f:
83:c6:94:05:24:84:65:87:39:db:3a:b1:6f:a6:7d:
2f:31:83:72:13:99:7f:a7:20:7d:4c:7c:d1:4f:21:
ca:60:a0:f3:74:d3:02:d3:fb:a3:42:3d:40:10:6d:
7d:af:62:a8:2e:5b:84:cc:c4:91:4e:77:05:39:f5:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:65:E4:2A:D4:76:EB:D2:97:6A:28:CC:6D:20:C1:83:53:A8:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/ca24f5ca-f1c6-3fc1-9ab6-c667192fb9af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
X509v3 Authority Key Identifier:
keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.62.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:3b:19:51:a7:6c:22:21:ba:e2:40:0b:c2:77:1a:ec:cf:06:
11:2f:81:1b:7b:ce:c9:df:c7:54:ec:63:6d:4a:f1:c3:3d:31:
4a:23:7f:ff:73:fd:e4:c9:f9:b0:cb:37:49:ef:ee:b8:96:d8:
66:b9:93:3d:40:4a:f7:be:94:2e:97:fe:4c:5f:e3:60:b9:4d:
d6:59:eb:ca:c9:3a:60:73:8e:ef:b0:08:ed:36:0b:cd:b3:08:
e5:6d:f5:e8:a6:60:d7:fa:8f:01:be:66:07:ee:32:78:db:1f:
aa:f6:17:97:a2:82:e2:79:54:e4:c9:e4:da:07:be:ae:7e:f5:
97:e1:79:97:12:d4:8d:3b:db:f3:33:8a:9e:8c:7b:71:2e:09:
5b:f3:10:2a:28:2b:09:82:8a:07:48:fa:50:3b:ec:57:1d:b3:
39:54:2f:f8:c4:5b:81:ff:46:cc:0b:62:43:df:44:b2:b4:05:
df:ed:57:06:c4:55:a4:90:23:52:51:cc:ac:69:af:e8:5f:3c:
36:da:70:17:fb:08:de:ab:45:29:54:10:1e:17:53:00:b1:f0:
ba:96:cd:56:1e:87:18:96:58:86:9d:d4:a4:39:71:67:3a:98:
84:05:38:62:e7:a7:dd:d7:1e:f9:ec:82:dd:d0:7b:41:69:4d:
3c:33:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 12:24:09 2024 by rpki-client on console-ams.rpki-client.org