Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/572d156a-5013-3780-a30e-2ab145ef63ce.roa
File: 572d156a-5013-3780-a30e-2ab145ef63ce.roa (raw, json)
Hash identifier: NiaS91mcTUdhTn3zRrvRP+j0LMT1QeqR3Bpb8/IBjDA=
Subject key identifier: 24:3E:FC:BB:52:6C:B2:B1:0A:17:6B:CB:FE:7E:B7:CA:24:9B:32:A3
Certificate issuer: /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial: 010D0C9F43285844474EE06E3A6E7581C755D740
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/572d156a-5013-3780-a30e-2ab145ef63ce.roa
Signing time: Wed 20 Dec 2023 14:00:21 +0000
ROA not before: Wed 20 Dec 2023 14:00:21 +0000
ROA not after: Tue 19 Mar 2024 13:00:21 +0000
asID: 21743
IP address blocks: 64.84.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:47:4e:e0:6e:3a:6e:75:81:c7:55:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
Validity
Not Before: Dec 20 14:00:21 2023 GMT
Not After : Mar 19 13:00:21 2024 GMT
Subject: CN=c2cdf2a9-f7b8-476e-b273-46b6852e4a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:10:e3:aa:ae:06:94:04:65:ae:d4:32:78:
51:cc:fd:70:d1:8b:20:82:30:76:15:c2:4a:84:5a:
a5:50:33:1f:f6:a8:24:fc:9e:79:eb:c8:49:9c:19:
a1:09:08:e9:3b:9e:57:83:bc:d9:6f:b2:89:58:4e:
c8:2d:ab:61:53:c6:62:b4:f5:08:67:39:6e:ef:62:
47:e8:70:b2:fc:0b:db:d1:be:e3:44:2b:66:aa:d3:
b2:dd:80:95:8e:c4:b7:f8:36:9d:c8:bf:78:84:07:
f4:05:d0:8b:fe:af:17:f0:1a:b1:b8:b6:f3:6a:d0:
f9:c7:85:ae:42:99:2b:92:2d:f7:52:12:c9:a2:38:
da:3e:0b:05:83:8f:7e:bb:6f:32:75:e1:e4:f7:7b:
6a:be:79:8e:5e:a3:73:85:dc:0d:94:a3:0d:32:ea:
a3:c5:53:3a:4e:57:9c:17:b9:3a:84:92:17:5f:a4:
ff:4d:a1:b6:00:88:36:bd:e0:f5:8b:34:cc:65:db:
63:66:dd:11:be:62:c0:90:9d:e6:2b:b6:54:5f:34:
1c:63:13:19:8a:85:8a:22:fd:ed:32:2f:82:33:f6:
b8:fc:93:7d:94:f0:0a:d6:b8:97:db:e1:e7:70:54:
76:78:ee:75:92:06:26:77:2d:d9:96:aa:1b:27:14:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:FC:BB:52:6C:B2:B1:0A:17:6B:CB:FE:7E:B7:CA:24:9B:32:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/572d156a-5013-3780-a30e-2ab145ef63ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl
X509v3 Authority Key Identifier:
keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.84.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:e8:d5:db:43:d6:c4:ec:1b:98:02:0a:82:25:c5:22:03:0e:
2a:c1:61:18:e0:29:54:1a:c2:77:3a:bd:df:49:e1:0d:89:f2:
b4:e7:54:6b:e9:2f:a3:bb:55:e9:d2:6f:95:9c:9e:b4:cc:b0:
e7:48:4f:09:eb:2a:4f:4a:8d:d2:9b:4a:e0:21:78:5c:d4:4e:
72:82:91:22:5d:29:99:15:68:af:df:26:1e:8e:66:5b:2f:89:
6b:54:ce:cf:d4:6f:a7:8c:09:5b:47:43:da:22:81:1c:a1:69:
91:04:fb:fa:22:78:78:97:00:48:31:39:66:00:a3:f6:96:87:
4c:28:4b:0a:54:7b:25:cf:c2:ba:94:58:b6:24:d2:e0:55:68:
e6:55:fd:61:46:58:7d:5a:da:89:d8:4a:20:60:de:aa:13:c6:
07:b5:79:99:57:bd:66:48:a5:d9:ef:81:22:10:54:fa:af:00:
80:8c:73:22:cd:d2:cb:1e:8c:e4:b8:7d:15:4c:f8:b3:cc:20:
ad:ed:68:7a:7f:12:32:c4:02:c7:95:a0:eb:01:ba:df:05:bd:
7a:41:26:d0:6a:c8:5d:4d:5e:b5:90:de:55:4a:b5:59:25:4a:
27:4a:1b:9c:c1:93:76:e5:be:1f:32:db:96:74:fc:1a:5b:6b:
3c:ab:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:16 2024 by rpki-client on console-ams.rpki-client.org