Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/c0d8c86a-c5d0-3164-a931-b7ca56ef2780.roa
File: c0d8c86a-c5d0-3164-a931-b7ca56ef2780.roa (raw, json)
Hash identifier: Vu2yj5UAzOR7ev/dQxVANd7liXDJYRJ2WFxd6ySqIVw=
Subject key identifier: 52:D0:90:00:69:AD:24:8F:1F:B9:25:01:D6:2C:47:31:AE:BD:3A:0D
Certificate issuer: /CN=f6955ae6-7518-4f31-adab-b1ae8009cd70
Certificate serial: 010D0C9F4328584484A3490BCBB55AA8936D4E00
Authority key identifier: 53:44:72:19:D5:28:60:AF:97:85:FA:D5:3A:11:AA:BB:A7:04:A4:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/c0d8c86a-c5d0-3164-a931-b7ca56ef2780.roa
Signing time: Thu 11 Jan 2024 13:14:50 +0000
ROA not before: Thu 11 Jan 2024 13:14:50 +0000
ROA not after: Wed 10 Apr 2024 12:14:50 +0000
asID: 55154
IP address blocks: 204.52.113.0/24 maxlen: 24
204.52.114.0/24 maxlen: 24
204.52.115.0/24 maxlen: 24
204.52.116.0/24 maxlen: 24
204.52.117.0/24 maxlen: 24
204.52.118.0/24 maxlen: 24
204.52.119.0/24 maxlen: 24
204.52.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 11:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:84:a3:49:0b:cb:b5:5a:a8:93:6d:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6955ae6-7518-4f31-adab-b1ae8009cd70
Validity
Not Before: Jan 11 13:14:50 2024 GMT
Not After : Apr 10 12:14:50 2024 GMT
Subject: CN=aee3d5e9-a65a-4d38-a954-dd9dd66f98aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:63:4d:af:57:70:b6:42:d1:f2:33:94:f9:
21:0a:fb:40:13:26:38:d0:cc:79:d6:27:1c:c4:47:
b8:6b:02:e6:d2:97:37:91:bc:98:67:c6:4c:fd:c2:
30:53:19:09:76:12:e6:fa:e4:3b:70:fb:c4:48:8f:
be:e7:04:d1:3e:e0:44:ca:a6:dc:4c:3a:cc:4b:3f:
d8:e4:cd:b4:32:a3:c0:a7:de:ee:93:27:d6:71:f1:
74:29:8b:15:54:81:6f:f8:6b:e2:0c:30:0f:75:18:
22:17:66:85:d7:48:8e:76:2c:c6:73:4b:5a:37:72:
de:13:fb:35:ed:36:1f:b9:56:f8:74:92:30:71:78:
07:ff:97:7a:62:8c:9d:65:10:e9:0a:74:cf:0a:bd:
18:cf:88:fe:52:e0:ae:69:f8:12:e7:c6:2b:96:7b:
0f:d0:52:a8:e0:cd:d4:03:b6:7a:bd:8f:74:9a:c0:
ba:09:12:f5:01:52:9c:32:72:27:f5:ef:35:f4:42:
06:23:6a:64:85:d6:11:8c:cf:b3:b4:20:fe:05:40:
6d:ac:5f:97:bd:c8:26:4e:b0:53:b8:99:d4:8d:82:
b6:84:a5:a5:cf:5a:1e:41:eb:0a:a3:df:ca:c4:73:
06:95:3c:fa:b7:d7:9c:24:31:5e:92:8a:3b:cc:2f:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D0:90:00:69:AD:24:8F:1F:B9:25:01:D6:2C:47:31:AE:BD:3A:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/c0d8c86a-c5d0-3164-a931-b7ca56ef2780.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70/f6955ae6-7518-4f31-adab-b1ae8009cd70.crl
X509v3 Authority Key Identifier:
keyid:53:44:72:19:D5:28:60:AF:97:85:FA:D5:3A:11:AA:BB:A7:04:A4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f6955ae6-7518-4f31-adab-b1ae8009cd70.cer
sbgp-ipAddrBlock: critical
IPv4:
204.52.113.0-204.52.120.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ab:cb:4a:84:60:de:96:49:e1:96:50:a0:99:7c:01:63:82:
9b:a8:76:61:ac:24:c8:66:fc:0d:70:f6:c7:52:00:f8:64:dd:
d8:3e:db:87:c1:2e:75:f1:2a:6b:ed:25:86:b6:35:d9:8c:5a:
42:12:0d:2e:b8:b2:ab:27:22:e8:a5:bd:00:86:d1:55:2e:f4:
77:7c:a3:00:a8:b8:46:d9:6f:e6:07:57:62:91:cc:33:5e:72:
66:1e:64:50:83:a8:b7:21:94:17:f8:97:5d:9d:d2:af:1a:12:
e6:6d:64:ba:6b:1a:d9:b8:7d:b0:c4:41:92:94:6b:3e:52:d2:
37:7c:06:04:fc:79:dd:0b:73:f7:e4:30:3a:58:0d:a6:a9:62:
e2:86:7d:a4:59:1c:d9:57:67:fd:b5:72:15:38:78:4a:94:06:
07:f5:3e:f4:4c:d9:51:a4:dc:cc:72:1b:c5:82:78:dd:ab:0e:
2b:36:02:1a:56:13:7b:90:ec:4e:5a:ae:7e:af:69:02:24:22:
7e:21:31:87:6d:56:89:ce:be:b6:48:32:d4:19:ed:d0:0e:23:
ff:c8:f2:1e:0a:5d:7d:c9:54:4c:80:ae:9c:70:f9:95:4f:17:
14:99:2a:20:a2:6c:c6:63:23:17:ec:6f:c8:2e:33:27:73:5e:
35:43:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 17:10:07 2024 by rpki-client on console-fra.rpki-client.org