Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03f6c7c0-cc25-3427-997b-470c297f18ac.roa
File: 03f6c7c0-cc25-3427-997b-470c297f18ac.roa (raw, json)
Hash identifier: eYMzlsUoA9YM1rE4RyGKi0kl4d1AW9dzbzridf1nX+I=
Subject key identifier: 81:A1:57:B2:3B:4B:66:80:91:39:E1:6C:D0:BE:EE:4B:A0:20:3A:4A
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584795CC2C49114C8040D5250380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03f6c7c0-cc25-3427-997b-470c297f18ac.roa
Signing time: Fri 18 Oct 2024 19:06:47 +0000
ROA not before: Fri 18 Oct 2024 19:06:47 +0000
ROA not after: Thu 16 Jan 2025 20:06:47 +0000
asID: 22616
IP address blocks: 170.85.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 17:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:95:cc:2c:49:11:4c:80:40:d5:25:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Oct 18 19:06:47 2024 GMT
Not After : Jan 16 20:06:47 2025 GMT
Subject: CN=413b961c-7d74-4465-b333-7bb8991937d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:58:c0:4b:f1:1c:17:c8:d4:f6:5f:b2:e6:
b0:9e:58:3e:3b:83:89:fb:e7:47:a4:84:b0:8e:d4:
35:61:cf:25:68:3f:9d:74:1a:f8:2f:9b:e3:92:33:
33:eb:17:4d:ca:f1:3c:0f:86:ad:07:6c:cd:29:e3:
37:1d:ff:3c:7d:f3:8e:18:f4:5c:81:8e:b9:e3:cd:
34:74:cd:a8:6f:cf:20:e6:03:69:fe:5a:fa:44:8a:
fb:43:2d:a1:91:6b:0c:a2:91:aa:33:a4:dd:94:11:
c3:fd:89:de:2c:b1:88:f1:ac:04:e0:ed:ac:3b:a2:
6f:c8:ae:8c:d7:29:bc:b0:19:37:12:1f:e5:3e:2d:
05:ff:bb:64:2d:08:f5:e2:e9:bf:14:5d:31:b4:4c:
cb:85:73:b3:8e:e4:09:33:a2:33:cf:a9:ae:ed:f2:
b9:3c:88:58:3a:90:96:9e:d0:58:39:c9:d3:62:74:
6b:91:a8:68:69:fd:d7:58:67:57:43:03:e1:df:18:
3f:b4:6b:6b:93:01:03:a6:c6:d6:0d:f1:5b:9a:b3:
1d:c5:a5:ac:bc:93:59:e5:25:33:ad:34:05:be:11:
e6:dc:17:b6:fe:d6:4d:a6:a3:c7:2d:77:ab:16:77:
74:47:71:2f:d4:8b:80:f9:b6:0b:0f:dd:bf:9d:19:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A1:57:B2:3B:4B:66:80:91:39:E1:6C:D0:BE:EE:4B:A0:20:3A:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03f6c7c0-cc25-3427-997b-470c297f18ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:3a:02:b9:30:ea:eb:4f:6a:07:ee:1f:4c:a9:32:1d:35:c9:
7e:19:fd:1a:7e:7e:6b:20:f2:8f:c2:12:45:4a:0b:b3:f7:76:
7d:34:9f:dc:4c:fe:9f:70:22:63:76:df:e5:45:33:52:ef:ca:
93:d3:f8:8b:98:fb:d4:c4:15:60:30:85:47:f1:9a:df:42:21:
c3:88:d5:ef:4a:e4:dd:90:4d:08:80:94:8d:8f:38:d9:74:e2:
79:83:d7:4f:fe:a3:c6:82:0b:e5:c7:bb:59:66:9f:63:8c:5d:
d5:72:05:51:eb:a9:4d:d7:cf:90:e1:23:c7:96:fc:de:be:dd:
c4:b9:bd:94:99:8f:04:ce:46:dc:78:51:b4:93:86:29:04:f9:
9b:b4:d1:4c:5a:5c:59:c8:d4:58:74:55:50:b7:00:b1:d0:f2:
b0:88:6c:bb:93:6c:fc:a8:03:d0:e7:65:5f:ec:ba:65:a8:06:
27:90:83:38:a9:5d:18:8a:60:a1:b4:73:82:77:b3:1e:67:49:
67:c5:39:32:7b:b9:66:5c:ce:4c:20:e4:19:90:9c:df:8f:66:
f7:cf:f5:45:fb:22:64:c0:12:f7:ef:50:15:79:cd:67:ab:27:
af:9f:98:61:9c:74:2b:9f:4d:d7:11:d4:a9:af:dd:7f:dc:e9:
c2:85:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:28:28 2024 by rpki-client on console-ams.rpki-client.org