Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/15d99698-c0d1-3bd5-b7f0-5f44501a2953.roa
File: 15d99698-c0d1-3bd5-b7f0-5f44501a2953.roa (raw, json)
Hash identifier: 49GsE2FXS0m6/NU2JzwQg92MG1CglIuBKlbB/468AbA=
Subject key identifier: 9A:20:9C:7B:E3:77:CB:C0:26:3E:37:39:0F:5F:F4:59:52:35:62:C3
Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial: 010D0C9F432858406368C5A541B48A0941673D40
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/15d99698-c0d1-3bd5-b7f0-5f44501a2953.roa
Signing time: Wed 31 Aug 2022 15:33:15 +0000
ROA not before: Wed 31 Aug 2022 15:33:15 +0000
ROA not after: Tue 03 Dec 2024 05:00:00 +0000
asID: 204843
IP address blocks: 199.7.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Feb 2023 17:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:63:68:c5:a5:41:b4:8a:09:41:67:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Validity
Not Before: Aug 31 15:33:15 2022 GMT
Not After : Dec 3 05:00:00 2024 GMT
Subject: CN=3b14235c-a3d8-4d55-893e-83feb71ff203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:66:fd:60:e6:14:23:00:00:f7:35:5f:8f:
cb:77:44:f6:f6:31:cc:01:77:8d:5a:34:64:e6:d6:
99:a1:c8:b8:fc:ab:a2:1b:70:ad:53:cf:34:c0:c3:
5d:94:88:d5:0c:b7:36:1e:b0:1c:d2:5d:eb:6d:49:
3f:4e:d7:fa:13:45:48:c8:6c:fa:67:d1:53:88:ec:
46:ad:f0:7d:ef:6f:4f:1d:03:cb:9b:6c:83:c1:a4:
06:13:cc:50:d1:17:2d:d8:b4:b2:65:fc:5a:41:85:
a0:75:2f:69:fc:5b:cf:12:31:a5:fa:9c:58:0c:18:
31:9c:07:b7:95:e4:3e:08:e8:01:40:10:20:68:4d:
d7:00:9f:06:8c:d6:83:f4:b8:d9:f6:06:dd:de:05:
20:61:31:34:6b:fb:1b:28:09:55:78:a0:b8:21:a3:
bf:94:0d:c7:29:1a:c9:67:6b:5a:b1:5a:01:19:7e:
be:65:c5:89:d1:ba:9d:e3:10:da:bd:15:ec:01:0b:
8e:b3:e5:48:5d:64:18:2a:5b:65:b8:8c:d3:b2:b5:
75:a2:bf:ce:f7:11:56:8a:1e:9e:b8:8f:88:14:f0:
db:f6:52:76:cd:6f:72:dc:e6:b9:ee:c9:e0:0d:b5:
de:07:34:91:df:8f:10:ca:e6:b5:72:25:22:8f:b8:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:20:9C:7B:E3:77:CB:C0:26:3E:37:39:0F:5F:F4:59:52:35:62:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/15d99698-c0d1-3bd5-b7f0-5f44501a2953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
X509v3 Authority Key Identifier:
keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:1c:1c:05:c5:49:50:e0:56:28:9c:fe:5a:c2:3f:e9:bf:9c:
ee:f1:74:4a:ad:7e:18:7a:8a:f7:54:94:09:44:0d:da:54:70:
7d:ee:1f:74:9a:34:22:92:fb:31:a1:a8:05:bf:c6:c9:bc:fe:
88:82:3d:db:8e:98:fa:2b:70:4e:60:3c:c4:5f:6b:ca:85:71:
8e:da:dd:57:17:03:ef:f9:10:de:ae:ab:83:f5:4a:4c:74:7c:
f2:c7:bf:6c:6b:90:07:2d:3d:91:cf:cb:c3:cf:75:3f:59:ea:
b4:6d:14:b3:47:ef:07:cf:3f:63:8e:9e:0c:37:88:05:e4:a5:
ff:58:db:b5:08:84:5a:18:cf:94:93:75:75:d8:ab:18:57:bb:
2d:99:04:98:dd:99:d0:7d:06:39:51:5a:75:1e:13:de:91:27:
ba:1c:0d:e9:c7:d0:35:a8:79:c5:93:17:23:7e:71:d1:3c:84:
28:80:67:9c:ce:71:ac:3b:28:3e:6b:2b:c7:a8:7d:43:99:67:
ce:a9:f0:b3:c5:7f:18:b4:29:47:a1:9a:ee:1c:68:41:82:1d:
78:d9:77:95:a3:ee:56:e4:bf:e2:66:9a:9a:c6:00:44:e5:66:
cd:42:2c:a2:2f:e0:d5:e9:43:93:6f:c6:5f:31:32:97:98:a3:
c2:c1:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:06 2024 by rpki-client on console-ams.rpki-client.org