Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/5605b6e3-4dfe-3923-b309-d2369d3de355.roa
File: 5605b6e3-4dfe-3923-b309-d2369d3de355.roa (raw, json)
Hash identifier: lMdWPVjxtH9HO2ONc68N+nJPZNPt/aFFc/7QjMeTAYY=
Subject key identifier: E4:67:BA:FC:A6:58:79:77:63:3D:C5:BE:60:5B:39:D2:09:51:DB:97
Certificate issuer: /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial: 010D0C9F43285844BF3452B53A5C3506E6E8A000
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/5605b6e3-4dfe-3923-b309-d2369d3de355.roa
Signing time: Thu 01 Feb 2024 12:43:57 +0000
ROA not before: Thu 01 Feb 2024 12:43:57 +0000
ROA not after: Wed 01 May 2024 11:43:57 +0000
asID: 10796
IP address blocks: 199.15.240.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:11:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:bf:34:52:b5:3a:5c:35:06:e6:e8:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
Validity
Not Before: Feb 1 12:43:57 2024 GMT
Not After : May 1 11:43:57 2024 GMT
Subject: CN=72b5f175-3270-47fd-83df-416874a7ab0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:d0:9f:a7:3c:42:23:55:76:6f:be:84:8c:
97:94:af:ce:5f:bb:a6:cf:77:7e:f7:af:be:dd:93:
4a:4a:cc:1e:5e:aa:81:a2:cb:cc:fa:68:bc:9b:db:
5b:1f:eb:ca:f6:9f:81:7d:aa:36:58:94:e2:8c:aa:
47:a0:71:8e:fa:b2:92:3e:35:d3:be:c6:6c:b9:6a:
24:d2:c1:75:c4:89:72:00:51:82:01:6c:0b:f3:b9:
65:0d:1b:2a:c6:4b:08:33:60:77:3d:e1:ae:d0:16:
d5:31:b5:99:88:3d:d7:cb:6b:6c:2a:ae:c1:e1:63:
2a:b6:be:92:01:3d:20:f4:8b:72:f3:72:6c:19:22:
08:ab:2d:f0:3d:c2:02:22:bf:ac:13:a4:85:65:16:
60:5c:c6:3f:ef:2a:02:bf:7d:9d:19:a2:ac:3e:5d:
ba:f2:90:fd:4c:49:78:60:05:0b:b1:7e:0c:98:ab:
c9:a5:20:e1:73:e7:42:4c:83:c3:0f:bd:f3:04:ad:
6a:43:6b:b1:c5:20:2f:02:3e:33:23:c0:0b:12:39:
cc:88:aa:ab:d7:8f:01:66:c1:03:4f:7f:27:4c:f4:
9e:4f:6e:81:e0:f2:2d:d8:26:ac:e7:67:7e:cf:6c:
1b:73:f5:a8:a1:7f:16:b6:2a:10:42:ed:3d:dc:b5:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:BA:FC:A6:58:79:77:63:3D:C5:BE:60:5B:39:D2:09:51:DB:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/5605b6e3-4dfe-3923-b309-d2369d3de355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl
X509v3 Authority Key Identifier:
keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
sbgp-ipAddrBlock: critical
IPv4:
199.15.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:97:41:d6:1b:ef:db:64:ca:82:54:cd:9f:54:a1:5b:9c:e8:
d9:0b:a5:9e:52:12:e4:94:e9:73:69:45:3f:25:ea:bb:ee:dd:
85:cd:57:9c:c5:4e:24:95:00:f1:58:b3:00:a9:ad:0a:7d:54:
ff:53:df:64:22:67:b7:fd:50:c2:8b:7a:bb:f5:0c:ab:c0:b7:
ab:11:b5:97:96:e9:d7:3e:be:d1:88:32:64:83:9b:0d:91:ca:
cb:cb:5e:ce:2d:f1:ff:78:f7:f2:f8:44:72:c4:02:53:b1:2f:
4f:98:5f:86:bb:2b:ad:0d:a5:bf:1a:60:97:33:4e:6b:fd:c3:
2f:f7:e0:99:fa:78:7d:2b:8b:9c:3a:6a:2d:ab:80:69:ae:2d:
11:b7:a0:c1:c1:c9:96:10:85:4e:94:aa:d3:01:ca:7c:e4:66:
d5:c2:52:f9:b9:81:9e:f6:5f:e5:14:42:5f:ea:6b:9f:5d:68:
c4:00:93:61:28:cb:6d:4b:c1:32:21:ff:0c:91:58:6e:49:b5:
cf:01:d8:d5:30:ff:99:1b:15:ba:7e:92:77:29:5a:46:0d:47:
e6:46:d2:11:3d:3e:8c:a4:b4:24:a5:c3:e7:08:d6:77:d2:6e:
91:64:86:9b:29:9b:9d:9f:2c:f6:00:91:48:26:5d:69:c4:e4:
62:87:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 16:39:20 2024 by rpki-client on console-fra.rpki-client.org