Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/c8b55830-32e5-3fdb-883f-41f10618b543.roa
File: c8b55830-32e5-3fdb-883f-41f10618b543.roa (raw, json)
Hash identifier: T1XCIxEardpru7wrLDxRDizzCbY77OgG4Lezx+FpDno=
Subject key identifier: 2C:B7:11:5E:93:26:34:5E:BE:66:C9:84:F6:8A:A4:60:4F:05:39:49
Certificate issuer: /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial: 010D0C9F4328584663F292410CCB252044D05024
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/c8b55830-32e5-3fdb-883f-41f10618b543.roa
Signing time: Mon 01 Jul 2024 05:46:47 +0000
ROA not before: Mon 01 Jul 2024 05:46:47 +0000
ROA not after: Sun 29 Sep 2024 05:46:47 +0000
asID: 834
IP address blocks: 199.7.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 16:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:63:f2:92:41:0c:cb:25:20:44:d0:50:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Validity
Not Before: Jul 1 05:46:47 2024 GMT
Not After : Sep 29 05:46:47 2024 GMT
Subject: CN=f3b2456f-3456-4a99-b5a1-3c76d27de598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:62:5c:9f:7e:d0:40:d9:93:ec:0c:b4:e0:
0b:ee:36:bc:8b:d4:04:de:f0:3f:49:ce:af:c7:cb:
cc:be:59:d3:df:80:d0:a7:15:fb:7e:ae:96:38:12:
6d:ba:d9:83:f7:a0:68:e2:7c:c5:dc:c5:b4:04:97:
3b:aa:19:f7:8c:c0:02:fd:74:03:ea:20:1c:a9:cc:
3c:31:ee:72:2c:7f:e8:67:8d:b3:da:4b:fd:5b:80:
57:fa:4d:c5:95:86:8a:c7:97:1c:d0:93:05:7b:d4:
bf:8e:ef:70:35:a9:42:cb:e0:59:da:da:c9:24:c3:
eb:42:bf:e6:66:00:4a:84:a1:a0:95:9c:cd:a4:0b:
86:58:ca:6d:31:eb:32:1d:40:35:53:67:40:f2:24:
fd:6a:46:42:4b:9d:8b:37:2f:ef:4f:f3:47:3e:13:
02:d8:ac:98:76:ea:00:28:39:d0:a8:21:49:4c:35:
76:ff:27:d1:c3:f4:e3:55:af:d9:67:3e:ed:95:96:
df:e8:94:c6:9b:c9:70:de:f3:3a:8d:f4:a4:a8:a2:
10:e5:8f:53:c2:3b:c5:7e:8e:31:33:44:11:02:4a:
0a:28:e3:00:6c:35:d1:25:5b:bf:0a:98:9e:f4:9d:
8d:e9:d1:f9:cc:c9:8a:ab:4a:74:12:50:c4:00:a4:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:11:5E:93:26:34:5E:BE:66:C9:84:F6:8A:A4:60:4F:05:39:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/c8b55830-32e5-3fdb-883f-41f10618b543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl
X509v3 Authority Key Identifier:
keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:41:d0:ec:f7:ae:56:c9:52:b9:e1:89:a8:25:14:c1:52:16:
80:10:f5:3d:41:1a:57:a3:7d:05:3d:3f:35:e7:cf:c7:4c:1d:
b4:43:3d:1c:25:b8:5e:97:f4:fc:c1:e4:5d:9c:77:77:f6:05:
a0:02:27:17:b4:0a:49:b8:85:71:14:e8:88:15:d0:dd:d5:0c:
af:ae:ad:53:ea:b9:c9:79:f7:79:03:6f:c3:a0:7b:81:46:02:
9e:c5:b2:fd:1f:c3:56:92:db:da:1c:6f:7a:e0:c3:52:de:89:
7a:3a:cd:eb:00:aa:fc:98:a2:19:e2:24:97:8c:ff:59:cf:eb:
07:b9:6d:f8:d9:94:25:88:75:f6:78:5f:8a:66:cf:b8:10:a1:
d5:61:a9:e9:1a:4b:a5:96:0d:52:bd:d2:13:09:c0:05:8d:15:
1c:71:32:ef:be:0c:1e:4c:b7:e2:6b:f7:fa:f7:58:2f:35:ac:
12:dd:bc:eb:a1:37:71:43:fa:37:67:2b:ad:17:19:40:0f:68:
3b:b3:d1:8b:5c:c7:c1:08:09:ab:16:84:59:ec:be:5d:a7:c0:
bf:d8:95:6d:5a:d1:ae:e8:44:4c:f8:32:c7:5c:c8:cf:bd:8f:
f4:18:b4:2d:d3:f8:0e:5e:8c:32:8d:78:4f:58:c5:0d:a8:19:
60:c7:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 18:52:32 2024 by rpki-client on console-ams.rpki-client.org