Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/459b23b6-b45a-3002-aa87-0b3a3b4b55f0.roa
File: 459b23b6-b45a-3002-aa87-0b3a3b4b55f0.roa (raw, json)
Hash identifier: B2kPzpoixt0i2e6DOJ5WUCwD60cllM1ndRF6jloUQ3A=
Subject key identifier: D6:D6:F1:3F:A9:B6:67:B2:61:F4:36:90:24:94:F0:84:64:38:FE:77
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F4328584458FB2231D6DC446B9F807DE0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/459b23b6-b45a-3002-aa87-0b3a3b4b55f0.roa
Signing time: Tue 26 Dec 2023 21:56:16 +0000
ROA not before: Tue 26 Dec 2023 21:56:16 +0000
ROA not after: Mon 25 Mar 2024 20:56:16 +0000
asID: 207713
IP address blocks: 64.79.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 13:12:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:58:fb:22:31:d6:dc:44:6b:9f:80:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Dec 26 21:56:16 2023 GMT
Not After : Mar 25 20:56:16 2024 GMT
Subject: CN=8261ae41-5f2f-4633-91f7-1ae883a70d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:b5:5b:28:6f:5b:eb:74:fb:62:7c:51:98:
63:5b:52:e0:84:c9:c1:ab:60:25:cc:5d:16:e9:c2:
51:f7:1c:5f:b0:0b:62:6e:a2:de:7e:2d:79:58:44:
65:8d:12:5a:b3:ce:a5:76:5a:17:63:4e:3b:b5:cc:
50:e5:f2:be:b4:1f:91:70:26:99:eb:2a:8d:5b:19:
12:21:15:d5:ce:86:13:f4:43:ce:d6:e9:06:fe:59:
74:8a:02:c2:a0:f7:c1:b1:32:c5:ec:67:23:5c:b4:
aa:81:99:6d:03:47:98:f3:ce:e3:25:c1:b7:fb:21:
f9:c2:29:ed:a3:3d:0a:75:35:ed:8a:72:00:f8:76:
20:6e:c1:6c:58:53:13:e4:0e:64:e5:83:2c:74:57:
f5:75:83:d1:4b:00:0d:ae:39:03:15:be:3f:a5:87:
52:1e:56:34:5c:9b:2f:d3:e1:be:14:90:ea:8d:be:
d1:09:ac:5a:35:78:07:0d:34:8b:e6:4e:91:cc:ec:
2b:41:d8:45:41:c1:c8:17:12:5a:e8:48:63:e9:52:
bf:bf:84:5f:31:ed:f3:7b:39:6e:c8:2a:c8:45:42:
58:38:98:14:b6:8b:fa:49:54:2c:72:ac:75:2f:6b:
fd:98:da:f6:a4:3b:30:1e:96:2a:2f:f7:8c:72:15:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D6:F1:3F:A9:B6:67:B2:61:F4:36:90:24:94:F0:84:64:38:FE:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/459b23b6-b45a-3002-aa87-0b3a3b4b55f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
64.79.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:fd:5e:da:81:bb:8c:6f:a7:96:58:3e:48:d6:be:3b:df:d4:
32:40:12:cc:0e:92:6a:47:56:0e:92:bd:5f:23:8e:72:3e:3e:
d9:d9:d5:84:30:3a:e0:95:ac:40:d7:31:e2:e0:5b:2b:98:48:
ec:8c:26:e2:f9:82:ff:ae:29:74:9a:8e:d0:34:46:50:67:d9:
6a:98:8e:86:62:22:71:5f:dd:e3:5f:87:a3:d2:fb:d7:c5:78:
cf:01:8a:11:d0:15:23:f2:6c:2a:49:84:b4:4e:7a:43:c6:32:
a9:ae:8e:69:23:6b:c2:cb:00:f5:ab:11:81:1a:1a:a8:18:5c:
7b:46:cf:fc:a5:eb:14:4c:42:a7:90:e0:e6:a6:43:d9:49:c5:
a9:0a:4c:a4:a5:a8:42:a7:b0:0a:8d:3a:a2:ce:80:e4:c1:dc:
8b:dc:dd:be:90:39:ad:5a:11:b9:f6:4d:86:93:a7:a4:ff:61:
4b:d5:3e:ab:4f:55:32:cc:90:ab:d0:86:a4:ff:1e:e4:75:c5:
18:63:c1:78:ee:46:e6:a0:80:be:f8:31:95:c3:d4:20:15:ec:
1a:7c:ea:2a:7a:8d:9d:81:f7:7b:65:e4:a3:4b:74:22:14:e5:
f2:c5:82:f3:a8:91:42:93:e3:d6:68:e4:7f:ba:83:61:a2:bf:
9a:2c:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 18:30:17 2024 by rpki-client on console-fra.rpki-client.org