Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/e0e0f46b-a04d-39e3-b852-5ac206edd16d.roa
File: e0e0f46b-a04d-39e3-b852-5ac206edd16d.roa (raw, json)
Hash identifier: YChwSSYnjmt/oRkSqEgEJlOhD6RvFPN2vUZz4cyHh0I=
Subject key identifier: 72:AF:CF:0B:E9:70:DB:AA:32:2D:10:59:6A:93:24:F1:5A:C3:12:3C
Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial: 010D0C9F4328584793F30FEBBBC5A13AC24EC560
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/e0e0f46b-a04d-39e3-b852-5ac206edd16d.roa
Signing time: Fri 18 Oct 2024 03:13:31 +0000
ROA not before: Fri 18 Oct 2024 03:13:31 +0000
ROA not after: Thu 16 Jan 2025 04:13:31 +0000
asID: 46962
IP address blocks: 23.133.120.0/24 maxlen: 24
64.93.68.0/22 maxlen: 24
66.118.224.0/22 maxlen: 24
104.255.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 18:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:93:f3:0f:eb:bb:c5:a1:3a:c2:4e:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
Validity
Not Before: Oct 18 03:13:31 2024 GMT
Not After : Jan 16 04:13:31 2025 GMT
Subject: CN=3f3c8ee2-eb64-47cd-bd18-0091a8ef86ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:54:f1:8f:dd:66:94:0b:21:6c:7d:2e:26:
6c:73:ae:10:dd:15:3c:bd:78:ec:c6:6b:99:0b:f5:
32:e0:e5:29:89:7e:e7:15:a1:b4:15:d4:4f:61:1c:
23:62:27:da:fc:af:80:44:32:c4:4b:7a:ff:1c:7c:
05:23:a0:00:8c:30:2b:cd:cc:43:6f:b4:ea:5b:59:
fd:c3:1e:24:d1:77:c3:b2:82:a5:85:ed:7a:5d:cb:
5a:6f:a6:16:d3:bd:e9:a9:f4:ca:19:bb:0c:d3:b1:
7e:2f:4b:35:7e:88:5b:4c:56:ba:20:d7:2a:29:46:
2c:89:15:0d:43:fc:a3:1f:92:dc:e0:5f:ff:a7:0c:
93:1d:a1:bf:e0:4c:16:18:b9:9d:71:c0:b8:a9:ec:
4d:1c:61:7c:22:d7:e5:b8:4f:0d:ca:b4:34:df:4b:
11:ea:02:4f:a8:fb:d6:85:69:ed:17:88:a5:0d:09:
43:f7:64:0c:26:7b:bc:8b:7e:c9:90:da:5f:8a:9d:
6f:b7:55:7f:94:1f:b8:a4:bb:c1:d4:ef:c7:c2:00:
c6:02:49:83:0b:6d:05:23:06:05:54:a1:12:76:36:
0f:08:ef:d1:ea:97:bf:48:3e:e8:53:1e:f3:f9:e4:
81:02:29:b4:65:4e:c4:d7:d0:bb:21:de:c1:7e:0c:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:CF:0B:E9:70:DB:AA:32:2D:10:59:6A:93:24:F1:5A:C3:12:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/e0e0f46b-a04d-39e3-b852-5ac206edd16d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
X509v3 Authority Key Identifier:
keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.120.0/24
64.93.68.0/22
66.118.224.0/22
104.255.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:6a:0b:04:dc:cd:60:37:f1:de:7a:42:09:f1:b1:f3:9f:2c:
eb:77:3d:7a:42:d8:50:88:1c:66:ee:24:0e:b5:ba:6a:76:c8:
9c:e7:92:4e:71:59:f9:cc:07:db:b4:aa:18:f5:fe:3e:71:7d:
a2:7c:31:c0:22:68:c2:26:18:32:bf:02:a6:72:a2:ed:3f:25:
41:62:3e:de:60:96:78:c9:ba:a1:d4:f1:12:64:b2:7e:d0:6c:
3f:08:5f:ce:12:14:65:12:c4:1f:a2:a6:78:b8:b4:34:70:94:
e0:69:84:eb:79:1d:33:fd:31:71:ce:a0:6d:25:e9:f0:c4:14:
1e:d7:82:df:55:c1:14:ed:c1:49:85:e6:8e:e7:6a:47:14:5d:
8f:65:50:7b:b2:0e:21:78:a2:52:18:54:c7:63:34:89:4e:e3:
e2:57:a2:6d:25:b0:26:08:72:0d:c0:92:e1:ee:b4:c0:83:92:
5d:62:a5:3e:cb:b9:1d:67:48:8e:ce:a0:ba:71:c4:5d:f6:41:
6c:8f:55:32:e5:3c:1b:b7:7c:af:2a:34:39:65:87:cd:1c:98:
6c:61:52:aa:1b:48:40:99:26:9e:8c:d7:b7:5f:e5:8d:2f:14:
5e:cb:51:b7:ac:10:ae:85:6d:54:da:06:9f:5a:c1:88:d0:85:
cd:29:51:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 21:04:50 2024 by rpki-client on console-fra.rpki-client.org