Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/cf349344-a253-3254-b1cc-b79fe15d9113.roa
File: cf349344-a253-3254-b1cc-b79fe15d9113.roa (raw, json)
Hash identifier: 09kzSFpHGfNvGOEPfe6EoFb5FvFXlDY0+uadOBflk8k=
Subject key identifier: F9:BC:43:74:CF:34:7E:2C:5B:08:F5:89:2D:36:88:0C:AA:1C:8C:BC
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F43285846D289B25FBB465C69DFF30880
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/cf349344-a253-3254-b1cc-b79fe15d9113.roa
Signing time: Fri 09 Aug 2024 20:30:12 +0000
ROA not before: Fri 09 Aug 2024 20:30:12 +0000
ROA not after: Thu 07 Nov 2024 21:30:12 +0000
asID: 8987
IP address blocks: 192.64.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 17:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:d2:89:b2:5f:bb:46:5c:69:df:f3:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Aug 9 20:30:12 2024 GMT
Not After : Nov 7 21:30:12 2024 GMT
Subject: CN=9e8629f7-94a6-4724-bc37-c510ea6bb537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:7e:0c:01:04:0d:56:92:e8:b9:65:33:84:
af:c8:4b:6b:a6:1d:39:26:50:2d:37:18:54:c5:8d:
5e:df:d4:de:80:fe:ed:08:79:7d:cb:58:57:d9:a6:
b4:1d:7e:cd:1b:b6:5e:60:29:8a:42:1b:f2:c3:60:
94:1e:10:8e:d3:80:e4:97:e1:73:2a:04:62:b0:e5:
23:25:97:2b:fa:6f:37:2a:d3:9d:88:9f:85:b9:84:
41:b2:d8:a8:83:6e:74:1e:7e:ba:4b:43:bf:16:21:
fe:17:a4:22:99:6c:17:22:8e:f8:26:f3:f5:17:ef:
ed:76:0c:06:74:f2:f2:4e:87:0f:e1:8e:a4:6c:21:
58:63:ae:17:c2:b9:e4:f9:9d:0b:8d:49:3d:8c:03:
d3:f1:db:11:4c:74:bc:94:c4:14:cc:cf:5f:c9:a1:
b4:93:c3:37:ca:a6:b2:25:7a:c3:43:c2:90:e8:76:
ff:f6:a1:d1:fb:53:98:71:8f:6e:57:26:d5:4d:c6:
58:16:51:07:d7:67:22:a1:e7:46:18:89:d1:aa:61:
b9:57:19:72:97:04:0d:35:e9:45:1b:f5:43:15:70:
a6:7b:d9:3c:6f:77:fb:f9:61:94:a1:46:1c:cf:15:
8e:31:55:44:31:11:f3:5b:c8:6e:a0:62:79:68:f0:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:43:74:CF:34:7E:2C:5B:08:F5:89:2D:36:88:0C:AA:1C:8C:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/cf349344-a253-3254-b1cc-b79fe15d9113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:29:db:98:9d:a6:4f:90:c1:9f:cd:a8:44:cc:2a:ad:cc:c5:
38:3d:e3:95:83:7a:e3:c4:c0:64:f6:9a:42:14:34:e0:d5:fd:
f4:5c:23:83:43:62:9d:7e:53:a8:84:4f:12:98:6e:52:0d:68:
1e:95:3d:74:8e:d8:b7:74:a9:aa:e3:7d:a0:2b:a7:56:14:6e:
f6:9b:09:1c:53:a4:23:70:a4:29:ab:a6:52:3f:64:13:d5:4d:
85:0f:d9:45:b9:8f:f2:8d:ec:9c:6f:42:6b:21:4a:c6:9c:af:
60:78:65:11:75:79:12:89:5b:79:c8:2e:0a:18:89:b3:6d:4f:
c1:c5:be:1e:58:c5:e2:a6:f2:4b:d2:96:d5:3c:c6:05:82:3c:
e3:a0:2c:8f:2e:ef:30:b5:c9:76:3a:62:47:96:87:8a:b8:1f:
88:56:38:4d:ce:73:1d:e8:7a:47:bc:61:03:b9:22:aa:11:b7:
4d:94:d9:08:08:99:8b:a6:08:72:19:f2:08:8c:af:0f:c2:f2:
7d:65:b4:8f:e6:7a:f8:0a:ae:36:39:36:a5:fb:ec:6e:14:d2:
c4:d2:5c:63:6e:f8:3a:7f:93:48:8c:a5:f8:49:28:07:3b:dc:
b7:15:fb:0b:c1:40:c1:b3:56:5c:8e:cb:51:55:34:eb:19:f9:
7a:31:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 21:52:54 2024 by rpki-client on console-ams.rpki-client.org