Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4fc84b8-4c52-3522-ad69-082de4ac922d.roa
File: d4fc84b8-4c52-3522-ad69-082de4ac922d.roa (raw, json)
Hash identifier: AiTqiDZ+05X/Fhqn3qvRrk4kia3O4WCS44RWogzlnf0=
Subject key identifier: 61:87:2F:3B:17:88:E5:A7:6A:9C:45:60:4D:06:46:80:13:63:F8:C7
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584316E4968E1D129596ADFC2300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4fc84b8-4c52-3522-ad69-082de4ac922d.roa
Signing time: Sat 02 Sep 2023 13:00:30 +0000
ROA not before: Sat 02 Sep 2023 13:00:30 +0000
ROA not after: Fri 01 Dec 2023 14:00:30 +0000
asID: 40311
IP address blocks: 198.45.250.0/24 maxlen: 24
198.45.248.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:16:e4:96:8e:1d:12:95:96:ad:fc:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Sep 2 13:00:30 2023 GMT
Not After : Dec 1 14:00:30 2023 GMT
Subject: CN=1cc525d3-4d18-4d67-bd76-4e97f76e8d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:b2:9f:8b:c1:d3:99:1d:50:e3:a6:1b:77:
10:b5:f0:4d:41:ce:9f:14:1d:91:da:ba:e1:c5:b8:
a0:ba:3b:a9:eb:4c:45:a0:8d:25:13:2c:99:75:69:
ff:9c:3a:4f:50:45:ea:cf:ef:76:7c:8b:ac:ba:13:
cb:d9:0c:d4:d2:d1:2d:d9:a5:ec:89:a1:16:d0:e9:
5c:40:ea:50:db:2f:0a:49:23:66:d7:e6:04:fd:b8:
2c:49:cc:fd:08:34:98:08:8d:53:bd:67:16:81:9f:
45:87:4d:2b:aa:ec:e1:1d:5d:e3:fd:74:57:be:f7:
16:52:2e:57:30:65:27:10:65:e1:9e:e3:12:13:60:
d5:24:3e:a3:5a:b1:fb:8b:86:15:50:91:87:98:aa:
13:0d:95:1f:6f:b5:9f:f9:b5:d1:89:ad:7b:e9:07:
a7:44:b9:19:02:0e:74:b9:44:6f:e9:c8:58:10:90:
6d:ed:41:a7:a9:d1:fb:2b:19:ed:19:aa:c0:ab:9c:
a2:6d:a9:5d:5d:4e:89:25:95:29:ce:d1:34:52:b4:
63:92:1e:34:e5:0f:47:27:b5:4e:5c:39:0c:58:3a:
31:b4:cd:61:17:85:29:c5:0e:3b:27:f9:81:bb:3e:
1b:4d:34:76:3e:7b:05:49:bf:d8:32:00:a1:03:a1:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:2F:3B:17:88:E5:A7:6A:9C:45:60:4D:06:46:80:13:63:F8:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d4fc84b8-4c52-3522-ad69-082de4ac922d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.248.0-198.45.250.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:58:5a:4e:44:11:1e:50:aa:1d:4a:a1:f9:ea:cb:68:06:f2:
1c:de:79:72:30:8f:53:fb:38:eb:ff:fb:16:fe:cd:1d:23:44:
17:18:6e:da:80:f3:0d:a0:1e:8c:60:a9:38:06:18:a5:27:60:
c6:f7:be:f8:a1:cf:e0:22:e5:7b:67:23:56:3e:3b:ea:1e:f3:
b3:b0:82:ec:fe:1c:26:d4:ec:18:c4:9e:51:b4:74:b7:ab:e6:
0e:2d:47:92:68:92:61:1f:70:ab:eb:48:98:bf:58:37:8d:43:
ed:26:8a:49:c1:f0:b9:c4:9a:04:80:de:1c:ec:ff:e8:f8:b1:
3e:87:8c:66:2b:78:82:40:77:bc:02:1b:0e:3f:62:31:ec:d5:
4a:c3:47:0e:f2:82:c5:20:47:c2:b5:8b:c3:f0:dd:30:89:7d:
f3:5b:92:fe:6e:98:37:73:d3:b1:d8:4f:d7:e0:59:ba:e5:27:
89:d0:f1:51:1e:57:52:b0:9a:8e:b5:65:2a:ac:d1:fc:37:40:
ed:27:7a:d5:f8:c1:53:41:46:d9:c3:f3:05:4f:8e:3c:66:e0:
c3:6e:8c:e2:1f:30:2e:5f:a7:83:0e:47:c1:3d:45:8a:49:0d:
57:b9:a3:0c:68:12:3d:96:70:f0:af:12:98:83:2e:57:ac:b4:
bf:65:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 07:01:32 2023 by rpki-client on console-ams.rpki-client.org