Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/94639b6f-cb5a-31b3-a504-67608ba7cce4.roa
File: 94639b6f-cb5a-31b3-a504-67608ba7cce4.roa (raw, json)
Hash identifier: fwG4SwocClnQ6BeIaGJyZ6ScWfT4GDTadRWBc1NCzGE=
Subject key identifier: 6C:73:3C:D1:DC:D2:2F:54:F5:33:44:D4:B0:56:61:CB:80:0D:92:DA
Certificate issuer: /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial: 010D0C9F432858448089E1D4EE614ACFDE318480
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/94639b6f-cb5a-31b3-a504-67608ba7cce4.roa
Signing time: Wed 10 Jan 2024 02:00:24 +0000
ROA not before: Wed 10 Jan 2024 02:00:24 +0000
ROA not after: Tue 09 Apr 2024 01:00:24 +0000
asID: 834
IP address blocks: 72.14.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 03:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:80:89:e1:d4:ee:61:4a:cf:de:31:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Validity
Not Before: Jan 10 02:00:24 2024 GMT
Not After : Apr 9 01:00:24 2024 GMT
Subject: CN=7a7d1bb8-6180-49f1-b174-c3340ad30ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:ab:5f:fc:c2:dd:d6:22:2c:27:5d:20:80:
a9:a7:24:ea:42:00:1c:c0:3b:8b:ca:b5:dd:73:0f:
71:ed:d8:54:fe:ef:a6:85:61:25:fe:1a:bf:ef:96:
e7:d8:5b:88:d8:f8:e6:dc:79:ae:65:d5:a3:c5:8a:
71:cd:a8:c1:85:bf:f1:f0:a4:03:33:48:89:35:40:
97:72:6a:e4:a5:f2:60:3a:59:5b:af:19:47:9a:c3:
4f:db:62:19:e8:af:42:6d:f0:1c:53:3a:c7:e5:58:
ee:c8:32:76:79:8b:57:f1:3d:91:a8:8a:3e:90:7d:
bd:d4:dd:d7:97:b5:55:cc:74:9b:b1:0e:47:fd:34:
e0:e8:a7:94:e7:43:c7:95:6a:f4:45:bb:52:dd:0b:
ef:40:02:0c:ff:ff:f4:9c:1b:0f:6e:4c:79:8b:e1:
3c:34:8b:a7:e3:7e:52:84:39:b2:28:2a:7c:a7:fa:
ef:61:9b:64:d0:d1:0f:aa:8d:6d:db:ec:bc:70:3f:
44:bd:50:4f:83:ae:78:b9:34:0c:d5:d5:ed:ab:d3:
63:46:b6:58:c0:2b:97:15:be:2e:22:b3:e0:95:5b:
96:92:e5:67:fd:e1:88:e7:da:31:f9:ff:80:f8:12:
d2:db:27:5e:1c:5e:01:d5:e7:b9:6e:8f:c2:01:10:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:3C:D1:DC:D2:2F:54:F5:33:44:D4:B0:56:61:CB:80:0D:92:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/94639b6f-cb5a-31b3-a504-67608ba7cce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl
X509v3 Authority Key Identifier:
keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:8a:7a:8d:9e:80:81:ea:67:8a:19:f9:61:b8:4d:33:79:dc:
c6:62:cc:6b:b5:ef:f9:c5:15:29:ee:ca:04:41:83:7b:c1:2f:
c7:59:66:d2:bc:4a:80:52:df:f3:68:18:5c:27:db:7c:3c:86:
05:de:6e:dc:24:c2:f0:c4:c2:7d:93:fb:0e:01:60:33:3a:e3:
60:3e:8a:ec:ba:9d:40:19:3b:95:7d:48:05:da:ba:89:9a:aa:
84:95:f8:6c:49:9a:54:3b:1e:81:cb:85:26:04:6c:d5:3f:c5:
37:d5:b6:28:ab:c2:03:02:2a:92:14:1d:28:98:2a:67:40:1b:
eb:8b:e9:8a:a1:c0:e8:7a:ac:c0:1b:48:46:d5:97:38:c3:d3:
fd:17:03:dc:30:ad:93:30:02:7b:35:10:77:a8:75:94:1c:82:
bc:e9:29:61:31:fe:82:52:aa:d4:04:17:b1:cf:5f:54:5d:10:
5b:d6:f1:5e:75:8f:0c:25:9a:49:5c:e1:0a:ac:8f:1b:da:34:
fe:9f:7b:44:0c:e2:29:5c:9a:83:d3:76:c1:2a:32:01:cc:ee:
0f:fe:ac:72:6c:81:e2:96:a7:3e:38:f9:7e:df:b0:44:b3:a9:
63:71:53:79:4b:40:48:85:48:0d:74:ce:58:c3:6e:56:17:1f:
12:5d:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 06:01:33 2024 by rpki-client on console-fra.rpki-client.org