Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/3da62355-3cf3-3832-97ae-47a39a3ca0db.roa
File: 3da62355-3cf3-3832-97ae-47a39a3ca0db.roa (raw, json)
Hash identifier: 0X622534sM2eARg817IKxOXs0d9A+jqayHXGHf7an68=
Subject key identifier: 5B:22:27:95:B0:A5:36:91:42:78:92:DC:82:3B:C7:D7:19:8C:D3:0D
Certificate issuer: /CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Certificate serial: 010D0C9F432858446F233819F202E9FFCD576D80
Authority key identifier: C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/3da62355-3cf3-3832-97ae-47a39a3ca0db.roa
Signing time: Wed 03 Jan 2024 20:24:50 +0000
ROA not before: Wed 03 Jan 2024 20:24:50 +0000
ROA not after: Tue 02 Apr 2024 19:24:50 +0000
asID: 400136
IP address blocks: 24.149.56.0/21 maxlen: 21
24.149.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 14:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6f:23:38:19:f2:02:e9:ff:cd:57:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32f1d23-2c4c-4ef5-bab1-559dcb491291
Validity
Not Before: Jan 3 20:24:50 2024 GMT
Not After : Apr 2 19:24:50 2024 GMT
Subject: CN=dbfca906-29cf-4212-94dd-6948596fc4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:fb:7e:89:6f:e5:8e:39:44:3a:47:13:ea:
0a:45:f8:0e:aa:f2:94:84:cb:f5:b4:42:9a:3c:72:
c9:3c:c0:b9:a1:f6:84:4d:f6:0d:fa:de:00:32:66:
c5:86:c8:db:b5:d2:fc:79:7c:b0:10:13:9f:78:01:
47:d7:f6:02:63:26:1d:89:3c:a3:cf:6d:8a:20:f0:
1b:34:45:f8:d2:ce:38:3d:de:fb:fe:21:50:11:c5:
82:18:6d:01:46:e6:a9:8b:8f:61:b1:bf:59:88:b7:
ee:e6:91:e2:73:7b:c9:95:a9:d0:e5:06:70:28:17:
fb:9d:36:b6:4b:23:8e:40:1b:ca:2d:cd:00:df:fe:
ed:54:ff:17:ed:3f:5f:c3:84:22:0b:a3:0b:91:7e:
c6:1a:ce:0f:4f:d2:ce:ad:23:ba:4f:c8:20:01:19:
57:68:62:72:ea:1e:21:6f:25:c1:a5:b6:44:15:d4:
ba:fb:09:3e:9d:5c:e0:57:8a:3c:bf:5c:60:0c:bc:
06:69:86:e8:32:ac:c2:5f:d1:f5:98:a5:94:8f:6c:
79:11:01:17:f1:1e:e6:42:8c:3b:fb:18:b7:f9:70:
07:41:7b:d2:11:5a:10:4f:db:ca:fd:87:2c:89:c4:
3e:8b:95:35:83:8f:bf:07:90:b9:3b:e7:8b:18:fe:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:27:95:B0:A5:36:91:42:78:92:DC:82:3B:C7:D7:19:8C:D3:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/3da62355-3cf3-3832-97ae-47a39a3ca0db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291/f32f1d23-2c4c-4ef5-bab1-559dcb491291.crl
X509v3 Authority Key Identifier:
keyid:C0:EF:2A:9B:67:F2:5B:7F:90:08:7E:AD:DD:04:95:C0:A7:D7:D4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f32f1d23-2c4c-4ef5-bab1-559dcb491291.cer
sbgp-ipAddrBlock: critical
IPv4:
24.149.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:4c:b7:bf:30:73:68:f0:e6:80:bd:e4:99:07:0d:35:ed:a7:
11:8b:7c:e2:eb:10:71:36:34:f3:17:15:18:3d:89:7f:de:03:
81:ab:94:30:d9:e9:22:6d:6f:07:aa:85:e2:90:45:6a:52:37:
8a:d4:93:71:fc:51:94:f3:62:3c:97:b9:16:d6:dd:0c:de:70:
46:ca:59:73:16:09:b5:e3:06:c3:f4:5a:d0:01:41:03:da:a2:
cb:1e:33:46:24:8f:0a:c9:c6:37:cc:a7:98:ae:fa:b7:f4:3c:
30:f5:95:db:3a:08:78:f8:10:23:ac:f2:6b:1f:0b:03:55:92:
ed:b6:39:16:7b:84:4e:36:b7:44:1d:ac:cb:dc:03:12:bc:8f:
da:db:89:7f:25:51:33:8f:20:37:49:a3:11:63:fb:a4:46:b7:
14:df:03:42:3b:90:1a:2e:a4:f8:f9:56:78:50:7e:25:cd:49:
6e:ee:9b:95:17:47:e7:d8:82:27:5b:6e:07:76:09:68:42:29:
44:ee:66:07:7e:9c:3f:21:86:42:57:0e:fa:6f:69:bb:54:38:
43:91:52:7c:86:83:f2:cf:57:c3:ca:81:05:19:ff:68:c7:07:
70:09:b7:37:65:ea:86:9a:62:62:72:8c:1b:ab:19:ef:b3:e3:
cc:73:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 19:43:18 2024 by rpki-client on console-ams.rpki-client.org