Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/23700fdd-5902-3dd1-9303-134bf3812c99.roa
File: 23700fdd-5902-3dd1-9303-134bf3812c99.roa (raw, json)
Hash identifier: YX9Vc9t3PsnpGY0AEFW/LplfPL2nCz5o/j2GZvNQAC4=
Subject key identifier: FA:35:21:A7:D7:2E:BE:80:FC:C2:9D:F2:F4:97:3A:BD:D8:64:16:EB
Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial: 010D0C9F43285846C71ECF1DAD55181589AAD400
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/23700fdd-5902-3dd1-9303-134bf3812c99.roa
Signing time: Mon 05 Aug 2024 18:20:57 +0000
ROA not before: Mon 05 Aug 2024 18:20:57 +0000
ROA not after: Sun 03 Nov 2024 19:20:57 +0000
asID: 212238
IP address blocks: 199.7.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 16:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:1e:cf:1d:ad:55:18:15:89:aa:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Validity
Not Before: Aug 5 18:20:57 2024 GMT
Not After : Nov 3 19:20:57 2024 GMT
Subject: CN=fc7f4b99-67f3-4abb-921c-7474c8a47410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:eb:29:a9:06:28:3c:95:81:b4:e6:7b:ff:06:
e3:5c:8a:4b:d4:52:3d:4a:03:75:6f:73:07:6e:7c:
d0:18:59:65:d3:46:89:d8:eb:95:a0:d9:1c:8d:f8:
59:43:ac:ab:83:02:b9:dd:12:ef:78:7c:fb:d6:b7:
02:17:bc:80:dd:6e:ed:03:24:1d:ee:0e:14:a8:da:
b1:a1:a2:a8:5c:b0:24:6e:5b:8c:a3:9c:c2:be:4f:
fe:02:29:6c:fd:4e:31:08:25:2d:47:65:ed:c6:04:
e0:b1:7e:0b:12:03:ec:d0:ed:74:cf:7e:74:1c:b1:
44:d5:90:da:bf:02:df:e5:2f:5b:7c:75:f9:f9:66:
9c:bb:13:ba:6a:d8:72:d5:2c:bb:d5:a4:84:c8:9e:
9b:f1:20:89:5e:2d:cd:f8:98:87:5b:aa:ec:16:66:
b6:8e:ec:8c:3b:be:13:52:f9:a8:ef:d5:5a:6d:23:
4b:fa:f7:6c:64:87:b1:92:aa:78:49:f2:61:29:11:
ed:fb:e5:d2:11:67:41:d0:75:44:73:68:8d:85:6c:
dd:f8:db:61:87:c3:32:bf:9a:7b:f3:fc:97:e4:b3:
3b:1f:9c:63:60:6b:02:f3:8d:4a:d6:8d:8a:21:99:
3a:c2:e8:8b:d1:6e:06:2c:e2:d5:12:ad:99:36:fe:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:35:21:A7:D7:2E:BE:80:FC:C2:9D:F2:F4:97:3A:BD:D8:64:16:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/23700fdd-5902-3dd1-9303-134bf3812c99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
X509v3 Authority Key Identifier:
keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c4:9b:3d:72:32:82:16:3d:24:07:07:3f:7c:c7:c6:ff:49:
ff:8f:ea:0a:a7:9b:7a:5d:00:49:fe:61:58:1a:25:9e:c6:14:
91:f4:98:15:2e:9c:3e:45:e3:34:fc:07:1d:42:18:2a:a6:f7:
2c:ef:51:84:f3:ee:17:41:5d:68:3e:dc:9e:e1:35:8e:af:d9:
80:a2:16:bd:5d:bb:8c:d3:bc:9b:ba:59:95:4f:b7:f8:fa:8e:
8a:1b:f5:ee:fe:a0:18:a4:19:44:bd:0b:71:62:cd:cc:05:48:
08:19:c2:a3:9f:85:ed:2e:10:34:10:83:0c:10:29:1f:ea:9c:
78:aa:dd:82:c2:b2:65:4a:1f:ef:c3:cd:d7:83:39:c1:6b:79:
ff:c4:7f:a5:3e:d2:f6:a2:a3:32:7b:c8:b8:9b:20:7a:4f:13:
4b:0a:6c:e9:b0:1e:1d:35:c3:1a:ac:cd:75:cd:01:43:81:66:
87:54:ef:9b:71:d0:08:1c:9a:f9:4a:f0:60:d4:cd:4c:bb:ba:
9f:1b:e5:0d:f9:67:4f:c0:53:eb:d8:40:32:9a:17:a9:84:9d:
8c:55:bc:56:27:60:e0:2c:4c:ab:bd:38:ab:e7:1b:40:96:4a:
93:26:46:f1:e3:0b:11:d1:22:c8:ef:f6:1f:fd:7e:a4:45:3e:
bb:3f:73:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 18:38:45 2024 by rpki-client on console-ams.rpki-client.org