Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/a2f65131-2872-3dfc-808b-44db6c8e40f0.roa
File: a2f65131-2872-3dfc-808b-44db6c8e40f0.roa (raw, json)
Hash identifier: hMnaaoPgch3czPpwoUAVFoNYB+8UDNMOOEw4jQAIQlk=
Subject key identifier: 32:24:65:26:73:53:3B:08:0C:2C:AC:E3:0D:C3:91:45:B4:A4:65:CA
Certificate issuer: /CN=e1a5b703-5dea-47f1-b708-67940244b847
Certificate serial: 010D0C9F432858446CFF0CE088A09C9931C00E40
Authority key identifier: 5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/a2f65131-2872-3dfc-808b-44db6c8e40f0.roa
Signing time: Wed 03 Jan 2024 02:00:16 +0000
ROA not before: Wed 03 Jan 2024 02:00:16 +0000
ROA not after: Tue 02 Apr 2024 01:00:16 +0000
asID: 834
IP address blocks: 199.15.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 12:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6c:ff:0c:e0:88:a0:9c:99:31:c0:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5b703-5dea-47f1-b708-67940244b847
Validity
Not Before: Jan 3 02:00:16 2024 GMT
Not After : Apr 2 01:00:16 2024 GMT
Subject: CN=a142086c-1a9a-46fe-b72d-ef516c025913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cb:7e:72:98:c9:b3:24:d0:3e:6c:0f:1e:88:
29:46:18:3b:31:a8:cd:98:d2:95:0f:ce:2d:29:0c:
ab:bf:a8:37:f2:0d:05:05:9a:2d:c8:f4:02:81:4f:
1f:f7:bf:e7:14:5c:ac:2b:8b:ab:b7:ce:73:5f:02:
e2:09:f4:9b:41:63:90:48:f9:7b:80:7f:c6:51:84:
c0:44:f8:dd:78:08:4d:b5:90:8b:5e:da:5f:71:4a:
bd:e2:68:28:c1:ba:7c:d4:8e:1f:9c:d3:33:9f:de:
f3:0a:9e:5f:fb:1f:8f:9e:cd:17:9d:fa:14:87:f5:
99:11:f0:d8:28:62:17:03:3f:b9:d1:b1:78:30:ef:
4f:cf:6f:b9:44:17:99:f9:73:82:2b:e0:d7:36:8b:
7c:4e:56:95:07:cc:67:a9:8a:00:e9:05:a8:4d:31:
d3:4f:36:45:ce:41:4f:48:02:c1:12:13:5c:7e:73:
08:58:5c:a5:13:c6:03:d1:e1:c0:1c:fc:cf:48:32:
dc:03:d2:f3:f9:51:08:a0:62:38:c6:23:41:13:81:
0b:96:41:81:00:9f:98:56:43:32:46:b4:0a:ca:e7:
23:df:80:79:01:a2:f1:84:0d:e3:09:c3:c3:49:f1:
d4:37:9f:09:e6:ab:3d:31:b0:06:2b:f6:7d:c7:12:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:24:65:26:73:53:3B:08:0C:2C:AC:E3:0D:C3:91:45:B4:A4:65:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/a2f65131-2872-3dfc-808b-44db6c8e40f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847/e1a5b703-5dea-47f1-b708-67940244b847.crl
X509v3 Authority Key Identifier:
keyid:5E:8C:43:38:FA:1F:B9:43:A5:ED:D2:BE:A7:E1:80:6A:B6:D0:C2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e1a5b703-5dea-47f1-b708-67940244b847.cer
sbgp-ipAddrBlock: critical
IPv4:
199.15.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:50:e0:53:a7:41:36:19:0d:11:04:d8:aa:ae:e3:ea:80:ba:
18:7d:07:9c:20:ca:51:0d:a2:be:e7:29:a6:f6:e1:42:72:65:
2f:bc:d8:60:a0:70:41:6f:54:fe:9b:e8:0c:09:3b:7d:48:dd:
8a:cb:55:11:f9:7e:0f:f4:c0:5c:38:41:6a:90:55:9e:07:b0:
c8:cd:7f:14:5e:77:4f:3a:e9:92:db:5f:56:cf:68:e5:ae:6c:
3e:ca:51:ae:90:2f:25:e5:24:b1:ef:2a:1a:85:d6:20:69:b3:
93:21:4e:69:94:c0:30:25:06:c2:e0:12:11:8c:fc:73:62:d5:
dd:ed:24:d7:4f:67:24:4e:e3:70:01:b8:5f:1f:e8:a0:d9:24:
72:dc:c4:02:ac:b6:75:a1:fb:4d:ec:f4:82:c3:9e:52:96:56:
a5:d5:19:94:c3:c6:72:e7:8f:76:5c:bf:90:a8:af:ef:52:ab:
0d:1f:d3:a9:3f:ce:4d:09:dd:44:e3:40:f8:ab:f6:a3:33:ce:
f9:da:d5:20:eb:e8:d2:d7:8f:44:36:43:6d:95:0d:b6:f4:fb:
4b:99:76:04:18:db:e2:48:21:e1:60:f1:e8:44:a3:fc:15:56:
89:2f:51:b3:99:31:6e:fa:4d:73:74:35:94:f5:97:07:ae:db:
96:d0:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:10:59 2024 by rpki-client on console-fra.rpki-client.org