Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/5511d97e-08bd-3c60-bde2-1e31a2ff9bcc.roa
File: 5511d97e-08bd-3c60-bde2-1e31a2ff9bcc.roa (raw, json)
Hash identifier: 46hGmSHqGwMe5gPzkQTTr8oLQob5Gek3KeVapNemEMk=
Subject key identifier: 14:EE:39:60:D9:74:F0:07:5F:96:08:15:16:A0:33:69:ED:00:AF:E9
Certificate issuer: /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial: 010D0C9F43285840B9B7F9C89BA8A58F2D14C158
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/5511d97e-08bd-3c60-bde2-1e31a2ff9bcc.roa
Signing time: Fri 24 Jun 2022 17:40:59 +0000
ROA not before: Fri 24 Jun 2022 17:40:59 +0000
ROA not after: Thu 26 Sep 2024 04:00:00 +0000
asID: 60721
IP address blocks: 199.15.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Mar 2023 13:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:b7:f9:c8:9b:a8:a5:8f:2d:14:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
Validity
Not Before: Jun 24 17:40:59 2022 GMT
Not After : Sep 26 04:00:00 2024 GMT
Subject: CN=10d45c64-f44b-4f22-ae43-3999361fd098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:d3:07:25:d4:56:f3:ff:dd:64:fc:f1:8d:
60:ac:d9:47:63:79:8c:aa:09:f1:90:fd:17:30:ce:
07:a3:09:59:01:e9:91:a0:ca:25:89:6b:c1:18:6d:
66:a0:5d:a7:96:95:36:23:28:5b:cf:4e:df:4b:c0:
9e:bf:5d:7c:6b:e3:cb:c0:ee:4c:9d:56:4a:26:5d:
ee:26:7f:50:0a:7b:75:d3:51:86:3a:5b:42:cd:c6:
4f:ee:49:6f:34:60:9f:51:cf:00:13:44:79:3e:a4:
a8:24:3a:33:dc:75:01:3f:18:56:b2:cb:9c:4c:c2:
c3:63:8f:72:ee:0f:be:7f:f1:e3:f3:8b:71:19:21:
8a:d9:8c:e2:e4:0c:8d:f3:f9:27:ef:40:3e:fb:de:
cd:36:5f:57:5e:8b:2a:45:1b:6a:ec:3e:1d:27:02:
da:0d:e2:40:39:4f:1d:77:de:25:71:07:ef:fd:a7:
01:ef:9e:75:2a:60:92:16:30:c7:f1:7a:a3:1f:a8:
c7:fd:89:e2:b9:80:2e:ae:b5:d0:ea:09:05:0e:db:
d6:31:cf:cf:22:80:28:4c:3d:34:95:69:1a:b4:a4:
36:13:a9:58:76:88:06:c3:07:38:eb:17:39:d1:8d:
f2:fa:eb:ea:50:d9:2d:d8:27:64:70:d6:10:ea:c7:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EE:39:60:D9:74:F0:07:5F:96:08:15:16:A0:33:69:ED:00:AF:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/5511d97e-08bd-3c60-bde2-1e31a2ff9bcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl
X509v3 Authority Key Identifier:
keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
sbgp-ipAddrBlock: critical
IPv4:
199.15.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:4b:80:b1:56:57:af:e8:a3:dc:09:76:97:90:81:ed:a0:40:
78:ea:f0:cc:45:3e:39:eb:cb:26:7e:55:3d:12:53:56:ef:f8:
11:aa:33:6a:f0:0f:fe:f8:e4:31:de:9a:fd:68:5c:25:26:1a:
b4:37:40:03:92:57:db:bc:f4:e3:0e:0c:cf:4b:e4:fd:63:c2:
88:0b:73:9e:19:1e:11:22:09:d8:73:e8:3c:13:e6:75:19:bc:
19:18:41:a1:6d:e2:8e:dd:f4:07:b3:0b:d4:f8:08:db:ab:1a:
c5:00:3f:a1:41:88:bc:e8:a1:d8:0d:ae:3f:00:22:8e:2e:cb:
e7:e7:ad:ce:78:1f:ea:e9:6c:dd:33:2e:63:1c:57:79:9f:84:
02:12:5a:0d:72:5f:6c:f8:d2:97:93:c0:07:73:96:c2:0d:5e:
1c:26:9d:6c:d4:67:60:10:06:26:5e:3b:eb:c8:02:cf:06:6a:
8a:5b:a5:f2:1e:2f:81:b7:57:a2:f3:a1:ea:69:7d:c1:a9:db:
30:d4:99:34:8d:fd:6d:c3:fb:00:22:4b:7b:a0:a6:a9:fa:2b:
0c:f5:fa:b9:2f:1e:e9:d6:c5:ca:a5:31:db:8c:13:ed:99:98:
4f:89:9a:ae:cb:18:fe:33:b7:66:5a:d7:03:83:01:d7:1e:be:
c4:13:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:07:48 2024 by rpki-client on console-ams.rpki-client.org