Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/b7e9573d-8667-3c91-8180-c1f5183f5b68.roa
File: b7e9573d-8667-3c91-8180-c1f5183f5b68.roa (raw, json)
Hash identifier: BF6u6357BQ4SIDJLxyaeQOHGFq+XG0VfVqIFJ0UZ3VE=
Subject key identifier: 20:3A:F0:8D:E0:8A:B2:B7:DC:70:40:7A:0D:36:4D:8F:F3:FE:7D:D7
Certificate issuer: /CN=76c188c9-4fff-4233-9a69-35e66734774b
Certificate serial: 010D0C9F4328584469FD5AD3E13CE3B48CC48180
Authority key identifier: DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/b7e9573d-8667-3c91-8180-c1f5183f5b68.roa
Signing time: Tue 02 Jan 2024 00:09:30 +0000
ROA not before: Tue 02 Jan 2024 00:09:30 +0000
ROA not after: Sun 31 Mar 2024 23:09:30 +0000
asID: 834
IP address blocks: 64.84.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:69:fd:5a:d3:e1:3c:e3:b4:8c:c4:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c188c9-4fff-4233-9a69-35e66734774b
Validity
Not Before: Jan 2 00:09:30 2024 GMT
Not After : Mar 31 23:09:30 2024 GMT
Subject: CN=605dc96f-a74f-4676-bce6-25943a49059d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:4e:20:ee:a6:5c:02:bc:8c:11:4a:70:26:
ad:bf:b1:36:d1:a8:e5:76:45:8d:19:b1:7b:32:d5:
54:a3:e6:12:52:1b:5f:8a:30:a7:5d:09:0c:c8:18:
84:4e:b0:f0:5b:b5:71:af:7e:c8:2b:70:c2:cd:7a:
2a:ec:50:2c:f8:74:ef:1d:e2:6c:4a:eb:5b:65:0e:
ee:c5:e5:93:ed:c9:8a:0d:c8:2b:f6:f7:3a:b5:6b:
ba:be:a3:99:27:a2:d9:6b:a9:a4:b8:58:c0:97:a4:
74:37:d1:4c:ca:7f:d6:07:6d:69:85:cb:f5:c8:9d:
95:c4:ca:25:c0:bc:94:31:e8:12:cb:55:02:66:3c:
8b:e6:4f:76:76:bb:d4:3b:3c:11:f7:b2:f1:be:b4:
3e:36:a1:48:92:52:4c:46:61:59:f7:ce:6f:25:8c:
85:03:2e:9d:88:ce:9c:ca:e1:ca:8f:b6:2a:7b:8d:
0a:ba:c5:37:63:29:d3:02:02:c0:e1:2f:01:bb:4f:
cf:4a:e3:78:0a:9c:22:82:d2:b7:a9:41:bd:96:22:
15:d7:de:00:61:65:bd:23:7a:35:fa:cd:f9:39:57:
9a:3a:40:4b:2d:e2:38:b2:19:f0:05:dd:f0:37:2e:
b6:f7:b7:e6:73:4d:4f:4c:eb:22:fc:a1:09:82:4b:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3A:F0:8D:E0:8A:B2:B7:DC:70:40:7A:0D:36:4D:8F:F3:FE:7D:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/b7e9573d-8667-3c91-8180-c1f5183f5b68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b/76c188c9-4fff-4233-9a69-35e66734774b.crl
X509v3 Authority Key Identifier:
keyid:DB:E2:A6:A5:78:53:F7:12:E3:1F:31:52:0A:C5:41:BB:1C:3E:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/76c188c9-4fff-4233-9a69-35e66734774b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.84.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:14:e2:f9:95:b2:d9:65:81:b4:cc:7d:80:f4:ba:eb:06:ff:
e1:b4:b8:bf:35:c0:05:2a:7c:8f:81:8f:29:8d:a4:b3:e0:34:
9a:55:26:5b:9f:4d:d3:f4:26:ee:95:c7:56:d2:d5:97:f7:ab:
03:4a:73:57:85:79:cb:8e:fe:5f:f2:5d:47:18:59:9a:0b:df:
09:8d:17:70:c7:25:5f:fa:76:c3:5f:5a:f5:7c:2b:66:f1:75:
93:a7:40:21:57:22:83:c3:08:07:c4:7d:24:3f:5c:57:d5:ac:
24:b3:54:42:d4:20:ad:98:47:3f:65:f4:a9:3c:64:d9:ef:83:
12:d1:03:b8:be:c9:41:db:eb:ff:e9:1b:1c:d2:f3:06:fd:b9:
95:f0:ed:2b:ed:9c:48:00:e3:2b:12:79:d4:3d:10:5e:e6:32:
ed:6d:60:dc:ce:82:71:e9:e1:bd:08:ba:e6:9b:83:2c:54:91:
5c:9d:1f:2c:5f:7e:0b:4a:47:15:c4:5c:b2:25:b0:27:ea:cb:
eb:fb:92:8d:ec:54:e8:24:67:ce:9e:78:91:a5:62:05:64:b4:
6d:30:e3:7e:e4:0f:94:35:db:f1:ce:3f:06:58:e9:6d:0b:de:
84:70:77:a3:36:43:df:15:c5:d3:3a:88:ad:da:8e:80:52:ad:
3e:4b:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org