Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/7879fe9a-c755-395a-881a-32fdf1a1b989.roa
File: 7879fe9a-c755-395a-881a-32fdf1a1b989.roa (raw, json)
Hash identifier: STfPOfzHthb6ciY/Im7a+C3qNBC+QfatPjJC42IHw9U=
Subject key identifier: AA:ED:AE:D7:08:A5:CE:5A:F6:59:51:56:93:54:8F:D8:5B:B8:BB:94
Certificate issuer: /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial: 010D0C9F432858440183C11D97426DBA125704C0
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/7879fe9a-c755-395a-881a-32fdf1a1b989.roa
Signing time: Sat 25 Nov 2023 14:00:21 +0000
ROA not before: Sat 25 Nov 2023 14:00:21 +0000
ROA not after: Fri 23 Feb 2024 14:00:21 +0000
asID: 32181
IP address blocks: 64.29.78.0/23 maxlen: 24
66.180.136.0/24 maxlen: 24
66.180.140.0/24 maxlen: 24
66.180.133.0/24 maxlen: 24
66.180.134.0/23 maxlen: 24
64.29.88.0/24 maxlen: 24
64.29.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:01:83:c1:1d:97:42:6d:ba:12:57:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Validity
Not Before: Nov 25 14:00:21 2023 GMT
Not After : Feb 23 14:00:21 2024 GMT
Subject: CN=85e487d6-9ec7-41d7-9f81-63e53ed7f78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:57:1a:32:07:95:7b:b7:70:ce:d2:46:90:aa:
3c:3e:f2:6c:4a:4d:7b:b9:e8:c2:3f:29:bd:04:92:
6f:ca:b1:33:29:ae:84:f2:2d:17:57:c5:4b:58:04:
9a:9f:44:7c:6d:43:62:37:46:e1:a7:1b:fd:96:44:
52:d2:66:8e:f7:07:1c:f0:50:24:a4:44:57:97:ea:
24:14:0a:65:bb:e9:56:a3:73:c3:cc:3a:32:62:4a:
c4:2a:ba:a3:47:2f:ba:51:0f:0d:6b:4d:51:40:c3:
cb:17:63:dc:a8:20:d0:c8:7a:ca:b7:5e:94:ce:30:
bb:0a:2a:3e:f9:5f:46:ca:e7:91:14:91:02:e9:84:
fe:7a:47:de:9d:d1:d4:f7:62:bd:6e:6b:68:db:8f:
7d:db:c1:75:a8:28:39:47:88:21:1e:63:4b:87:b3:
1e:16:5d:c6:9f:3e:06:14:6c:74:af:62:dc:51:18:
d9:26:3c:14:75:63:2b:a0:dc:f4:02:5b:f8:b2:be:
fe:89:7d:a0:3b:63:68:13:50:0e:f2:b6:0f:91:7a:
9f:01:1e:5f:30:93:a2:c3:96:c2:e7:f3:79:6f:57:
04:20:3a:84:45:33:84:79:76:47:ac:29:0b:8b:54:
39:0d:78:9b:fc:15:cc:80:5d:5a:9a:48:d3:92:9e:
cf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:AE:D7:08:A5:CE:5A:F6:59:51:56:93:54:8F:D8:5B:B8:BB:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/7879fe9a-c755-395a-881a-32fdf1a1b989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
X509v3 Authority Key Identifier:
keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.78.0/23
64.29.88.0/24
64.29.92.0/24
66.180.133.0-66.180.136.255
66.180.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:cf:60:a4:d2:b9:03:58:2b:ba:c2:8f:f7:1f:15:80:8d:74:
83:06:e8:ea:ec:ba:9d:a2:3b:a9:39:b1:ca:4f:06:ad:28:1e:
88:6a:f5:4c:78:fe:31:d3:32:1f:5d:85:d1:d1:f1:96:f7:43:
45:30:e0:a4:e9:14:f0:d0:19:1c:cf:87:27:d7:2c:8f:c0:a2:
d1:7e:a3:32:96:b9:71:37:74:0d:00:12:f6:b3:b2:5a:85:24:
1a:85:30:3e:57:2f:45:8c:9e:cc:26:65:64:66:25:5b:47:a9:
31:6f:8e:59:c7:5a:5e:3e:c4:0e:f3:14:7e:8d:9b:ef:b1:2e:
cc:04:49:4d:7e:14:03:bd:c9:ec:c7:dd:68:f8:ae:87:67:d3:
a1:d0:5d:ae:fc:21:46:3a:03:e8:72:cb:04:b3:b6:e2:ae:77:
ae:a2:d8:95:a7:0d:c9:21:c8:79:12:f6:52:fc:16:63:45:28:
de:8b:13:cf:d3:97:2a:d0:b9:86:31:b6:8d:39:0b:d6:0a:f4:
f0:1f:9b:ae:18:25:7b:82:fe:95:f6:98:97:dd:24:02:78:ff:
8f:79:e6:80:68:c9:cc:e7:2c:95:f3:c4:ad:88:bc:d6:c1:1e:
a5:84:ca:db:3e:de:e1:5f:b5:b7:22:bb:73:b0:bb:58:23:c7:
f0:78:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 21:45:08 2023 by rpki-client on console-ams.rpki-client.org