Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/57d4dd01-8ca9-3cd2-a898-6197d4d36829.roa
File: 57d4dd01-8ca9-3cd2-a898-6197d4d36829.roa (raw, json)
Hash identifier: Fh9T77MPnOeEYwzkCHxfKGBw3fl2bpvdNTGHemSeYsU=
Subject key identifier: EE:8B:AD:61:7E:68:2C:4A:24:10:31:09:8C:9A:0D:76:FC:F3:72:A5
Certificate issuer: /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial: 010D0C9F432858427928D7E61095A54BAFCA6380
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/57d4dd01-8ca9-3cd2-a898-6197d4d36829.roa
Signing time: Sat 08 Jul 2023 01:00:17 +0000
ROA not before: Sat 08 Jul 2023 01:00:17 +0000
ROA not after: Fri 06 Oct 2023 01:00:17 +0000
asID: 11554
IP address blocks: 104.247.88.0/24 maxlen: 24
74.123.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:79:28:d7:e6:10:95:a5:4b:af:ca:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Validity
Not Before: Jul 8 01:00:17 2023 GMT
Not After : Oct 6 01:00:17 2023 GMT
Subject: CN=558df51c-61e0-4bfe-ba5d-7df32db0447d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:c6:78:ac:c4:db:5b:4a:da:55:a9:19:98:
ff:6b:de:2b:6d:46:40:93:b2:c0:a2:bf:e2:81:10:
26:9e:84:83:62:4c:bf:f1:59:eb:5b:38:38:b9:44:
a8:46:0d:bb:8b:a4:08:4b:06:f5:d5:48:f0:c6:a0:
80:fe:56:48:41:be:cf:e9:54:8c:6d:d8:b7:78:c2:
98:94:13:4d:18:8e:de:cc:6b:8a:45:77:99:a7:b3:
a5:dd:0d:e0:ba:22:fd:67:59:85:eb:23:a5:91:be:
26:97:0c:69:0f:0b:82:59:1b:34:19:30:dd:6e:45:
ea:9b:b1:98:c6:03:87:95:f0:34:e2:00:43:9c:42:
92:22:87:d4:1d:77:8a:8e:c6:7d:46:f8:23:b5:47:
98:4e:45:4a:88:8c:f5:87:35:85:3d:29:0e:68:8d:
3a:9d:71:30:26:06:54:2b:76:76:bb:44:84:dd:df:
eb:72:b0:67:2d:19:ed:29:de:36:85:89:56:d7:a8:
8d:ab:8d:6b:f9:2f:cb:0e:f7:30:ee:a4:a4:f6:77:
df:51:19:ff:1d:fe:66:a3:23:70:25:4e:2f:de:b5:
61:9d:21:20:f2:06:48:e2:06:cc:ce:05:76:09:b8:
fc:be:f9:98:8e:2c:44:bc:88:74:c7:bc:f5:f3:ae:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8B:AD:61:7E:68:2C:4A:24:10:31:09:8C:9A:0D:76:FC:F3:72:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/57d4dd01-8ca9-3cd2-a898-6197d4d36829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl
X509v3 Authority Key Identifier:
keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.123.244.0/22
104.247.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:82:7a:6c:1f:e3:f3:df:5c:f4:1a:bc:84:17:a6:9e:6f:f6:
1b:20:4f:4a:d8:b0:03:ae:c4:28:ff:22:cf:61:8c:b6:4f:f0:
81:bf:a3:7c:ac:c0:99:b1:13:ef:01:12:16:ad:07:2a:ec:94:
3a:14:9f:f2:b2:c4:38:c5:40:d4:6c:e9:d6:c4:66:d8:71:cd:
0b:0f:28:71:5f:d0:fc:2b:d8:fe:e6:6d:9d:f6:62:4e:23:6b:
f1:cd:39:1d:7f:86:87:aa:0f:b1:11:21:c8:e1:b7:d0:c3:96:
2c:75:aa:ca:09:ce:32:12:73:65:2d:9a:5c:17:2e:78:81:0c:
fa:91:af:a7:c0:7f:c7:bf:1e:0d:50:15:4e:64:0b:12:6f:0f:
3c:02:b6:13:67:a9:5e:de:88:93:3a:4b:39:2b:dd:a4:da:4f:
d7:fe:d6:53:23:be:61:ac:5b:9f:fa:e4:11:57:c9:d0:69:f9:
7b:ad:8d:fa:b5:de:f5:4c:6c:8a:34:90:b8:67:0a:cd:80:7e:
0c:6b:31:e0:38:fb:68:3e:e5:2b:c0:9a:fe:65:0c:4b:5a:ea:
98:ce:70:d8:a1:26:e4:a2:9c:ee:60:70:47:54:c7:21:33:14:
14:7d:16:8b:eb:1a:e7:9d:89:19:b3:f2:c1:8b:3d:d3:1c:f4:
de:ba:1c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 16:23:49 2023 by rpki-client on console-ams.rpki-client.org