Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/05660c04-9477-371e-9b06-e454ad79a3f4.roa
File: 05660c04-9477-371e-9b06-e454ad79a3f4.roa (raw, json)
Hash identifier: lnxQNHNxfEDppkF0h1cH91BOAZVvzJh9ps/NnhMXsNA=
Subject key identifier: B7:C3:C7:D1:C5:C3:7E:33:AA:41:9B:45:BE:9C:4F:E0:21:A9:5F:19
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F432858471775B608629D5AE7F5055D80
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/05660c04-9477-371e-9b06-e454ad79a3f4.roa
Signing time: Tue 03 Sep 2024 13:00:42 +0000
ROA not before: Tue 03 Sep 2024 13:00:42 +0000
ROA not after: Mon 02 Dec 2024 14:00:42 +0000
asID: 35758
IP address blocks: 64.79.232.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 18 Sep 2024 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:17:75:b6:08:62:9d:5a:e7:f5:05:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Sep 3 13:00:42 2024 GMT
Not After : Dec 2 14:00:42 2024 GMT
Subject: CN=678f2a7b-2d22-4386-8efd-97605b62b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:26:4e:5e:39:10:fd:c0:9d:4f:9c:0b:46:
32:e7:4e:90:9f:85:0d:d5:39:f1:9d:db:8f:7f:93:
83:39:d6:77:ec:8f:93:50:5e:07:5e:db:4a:6b:02:
4b:20:38:d3:33:c8:74:86:bd:c1:53:54:83:e0:4b:
f3:aa:3a:26:ce:95:f0:86:82:27:db:6d:38:81:7b:
67:d1:8a:ee:88:bf:8e:ef:c4:e7:d4:07:19:30:f9:
b3:b4:96:b2:c9:b9:03:06:f8:74:99:0a:d1:d9:3c:
ea:4d:ef:46:60:75:11:7d:c0:c8:13:51:fb:a1:f7:
b5:57:81:fe:f0:bb:26:03:d1:dd:20:20:54:a0:53:
ed:75:27:09:3b:c3:86:93:53:6a:2d:cb:30:1a:bf:
f2:79:5a:a3:e3:35:3e:0b:f7:46:f3:3f:a3:86:6c:
3f:ab:c3:e3:49:77:59:d2:b3:2c:41:cb:57:c7:71:
39:6d:54:3a:b1:07:82:db:d4:fb:0c:11:0b:6a:a6:
79:6a:09:0c:dd:f3:20:bc:0d:7e:02:95:c8:35:a2:
23:11:02:2a:4e:be:fe:e2:e3:83:ab:91:52:81:04:
5b:9b:f8:6e:ce:0e:28:c6:d1:12:90:d8:32:72:d8:
69:84:cd:01:5a:3e:f1:1b:9b:b7:07:60:b3:59:da:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C3:C7:D1:C5:C3:7E:33:AA:41:9B:45:BE:9C:4F:E0:21:A9:5F:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/05660c04-9477-371e-9b06-e454ad79a3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
64.79.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e8:e0:9b:b0:01:89:26:ce:7e:6a:93:41:48:b5:1f:b3:01:
53:bb:68:39:68:53:ea:5b:bd:77:79:c4:d6:49:15:14:4a:72:
49:32:c6:31:db:be:77:ab:ae:dc:c2:01:c5:a2:8b:8c:30:8e:
6c:0d:f8:0d:67:8b:2c:98:33:e8:c0:f6:1f:19:d7:50:6b:46:
8d:ed:b1:d7:f6:34:2f:fb:a1:97:78:9a:fc:eb:1e:61:bf:de:
ae:70:5c:58:6c:3b:ce:bf:3b:69:15:1c:e7:fb:a8:a5:cf:97:
54:b0:fc:14:92:25:60:0f:3b:e0:de:37:52:33:e7:59:2a:5f:
c2:c7:93:81:64:0d:85:09:66:7f:29:f5:f1:a7:b2:bf:e2:6e:
85:36:e5:ca:ae:1b:50:a1:b9:ce:a8:09:dd:fe:84:59:4f:bb:
5c:da:1e:c1:f7:af:54:11:f8:25:c3:36:8c:ac:bd:2c:04:a1:
8d:90:d6:b6:ec:6f:d2:7e:b4:83:a1:8f:85:53:04:00:86:f1:
d6:7d:95:a3:79:68:cb:5d:c8:45:c9:a3:ea:9f:66:5f:89:47:
b8:63:a9:2f:6d:75:ac:40:4e:28:ea:48:65:e9:29:ad:45:30:
34:89:4b:a4:a6:5d:f5:81:22:f0:98:29:d1:4b:e8:56:f5:78:
c7:6a:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:51 2024 by rpki-client on console-fra.rpki-client.org