Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/72b00719-f4ef-3459-bb21-3b72e4d1cfa1.roa
File: 72b00719-f4ef-3459-bb21-3b72e4d1cfa1.roa (raw, json)
Hash identifier: CxxtIf2bb7gpSoz+Vd0GEtxGLGisqqWira/eeMyw4g0=
Subject key identifier: 56:38:7D:7C:0F:F3:5B:29:A8:61:EA:E7:25:81:2E:78:67:19:EC:95
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F4328576D51CC73C042CFC1732F4C984F
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/72b00719-f4ef-3459-bb21-3b72e4d1cfa1.roa
Signing time: Wed 08 Jul 2020 16:40:15 +0000
ROA not before: Tue 07 Jul 2020 04:00:00 +0000
ROA not after: Sun 14 Oct 2029 04:00:00 +0000
asID: 36492
IP address blocks: 143.131.0.0/20 maxlen: 24
2605:59c0::/28 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Sep 2022 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:4c:98:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Jul 7 04:00:00 2020 GMT
Not After : Oct 14 04:00:00 2029 GMT
Subject: CN=3b9cf1c6-b9d6-4943-bedb-69c55f651cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:bf:5a:5a:3e:07:3c:ed:ad:5d:76:07:3d:
48:c6:1d:4b:3f:ed:76:c9:6d:de:33:8a:48:e7:9b:
91:7a:31:e8:2a:05:77:17:2a:91:b7:26:f0:33:18:
31:00:f2:eb:b2:1b:2a:a2:04:fb:16:38:2b:d4:ac:
10:83:aa:c2:d1:4d:23:bc:ee:03:ab:43:b0:ca:d5:
8e:39:34:63:8d:42:ff:71:73:d5:24:58:5d:37:db:
23:7a:05:45:a0:98:9b:b6:f0:3b:5c:37:e5:4b:e2:
fe:61:11:b9:a7:19:96:73:99:49:dc:49:70:85:ac:
16:f7:78:e5:36:60:b5:37:d6:6e:c9:49:aa:0a:d6:
a1:3f:27:2d:29:6e:62:ca:46:df:a0:45:fb:97:a2:
15:21:1c:6e:2a:9b:fc:11:3d:28:1b:d9:4a:99:09:
25:a6:f8:bc:4a:45:5a:ab:da:1b:10:8d:4a:ba:fe:
7f:fc:90:e1:74:f7:de:5f:1a:7a:50:46:07:25:e8:
22:96:80:84:d9:47:e7:f9:b7:bf:91:13:6d:6a:1e:
9b:3d:cc:1a:3c:17:91:e6:3c:70:43:ae:2e:63:d0:
33:0c:09:af:70:5f:da:bf:b6:47:bb:ea:f3:39:91:
36:a8:95:59:a9:c8:c7:5b:a5:2b:1d:9a:29:f8:a2:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:38:7D:7C:0F:F3:5B:29:A8:61:EA:E7:25:81:2E:78:67:19:EC:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/72b00719-f4ef-3459-bb21-3b72e4d1cfa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv4:
143.131.0.0/20
IPv6:
2605:59c0::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:6e:ec:e5:ce:9a:59:e5:32:ed:91:78:7a:db:0e:9e:51:d2:
31:8a:12:2d:82:7b:ae:32:2e:06:c7:46:95:08:75:0f:b6:cb:
06:da:58:bc:40:d2:0a:a6:72:dc:f6:f9:48:71:45:2e:55:f2:
14:f8:b1:cc:49:19:f9:40:53:7d:c0:b7:c9:b3:e9:f7:19:7d:
00:d8:f6:95:9c:97:1d:cb:71:38:cf:4b:c0:6e:76:ae:78:d5:
70:60:43:94:65:ca:43:35:1e:59:8a:d8:27:78:e5:48:d3:25:
e9:ea:a2:ca:e7:f3:0e:52:13:6a:12:ea:de:ba:5d:3a:2f:15:
a2:c9:55:1b:b5:67:a1:ec:3c:8a:5d:7d:63:4c:0f:9c:95:6b:
0a:38:68:76:e9:aa:b9:fb:aa:10:c4:63:9a:24:ba:95:00:9d:
95:93:b9:bc:bf:2c:9c:7f:6a:7a:f0:49:8f:af:f3:19:45:ea:
3b:a4:30:e1:3c:ac:95:15:87:81:15:71:e4:c9:64:75:dc:af:
6f:bb:c6:75:e6:b0:3a:ea:05:a8:3b:ac:20:54:d4:23:8f:4f:
be:75:35:93:41:0d:05:c1:53:97:80:19:0d:22:96:7d:63:18:
6c:8a:42:70:fe:3e:e0:7f:8e:3d:1f:9a:62:9c:bf:a9:e5:dc:
aa:31:df:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:50 2024 by rpki-client on console-fra.rpki-client.org