Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/3adc67a8-7cdc-3387-a3aa-e946a7507ae2.roa
File: 3adc67a8-7cdc-3387-a3aa-e946a7507ae2.roa (raw, json)
Hash identifier: /+GFBKhhPUqjZiy1xSa/Vc10hv/sgYt44G2pA4nOk3Q=
Subject key identifier: 3A:6C:30:3F:37:AE:9E:88:20:1F:A1:BA:CF:26:1A:B4:55:48:F7:1A
Certificate issuer: /CN=4b36fa3e-06ec-405c-acf7-72589e9511d3
Certificate serial: 010D0C9F43285844CEB509A64BD8E3A203BA8C80
Authority key identifier: 98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/3adc67a8-7cdc-3387-a3aa-e946a7507ae2.roa
Signing time: Wed 07 Feb 2024 02:00:24 +0000
ROA not before: Wed 07 Feb 2024 02:00:24 +0000
ROA not after: Tue 07 May 2024 01:00:24 +0000
asID: 136184
IP address blocks: 149.112.57.0/24 maxlen: 24
149.112.56.0/24 maxlen: 24
149.112.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 04 Apr 2024 14:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ce:b5:09:a6:4b:d8:e3:a2:03:ba:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b36fa3e-06ec-405c-acf7-72589e9511d3
Validity
Not Before: Feb 7 02:00:24 2024 GMT
Not After : May 7 01:00:24 2024 GMT
Subject: CN=88f4af9d-af74-4a92-b721-63e5356643b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:4b:47:80:31:20:b9:ef:8c:65:d2:05:37:
1c:96:e3:b8:76:b2:e4:74:03:c7:11:58:9e:b7:bc:
ad:76:b1:4c:25:fd:72:11:6e:13:d9:2e:07:cd:f4:
0d:11:65:66:2e:aa:1e:26:be:bd:3f:5f:e4:c6:0b:
73:a4:c0:a4:75:38:c0:9f:74:0f:75:6c:90:4c:5b:
68:b6:90:80:f4:c9:08:32:dd:82:18:ed:52:77:e3:
37:4a:60:a2:fe:1c:78:88:99:b0:ca:23:88:00:f2:
29:b9:d0:13:16:e2:7e:b5:28:aa:88:c1:df:b3:51:
58:34:9a:c3:60:72:67:49:4b:dc:5d:33:62:e5:83:
04:79:66:9f:bd:4b:5f:5d:c0:f0:a8:b5:0c:6c:9a:
6a:ec:54:5c:9d:b4:68:51:15:9a:d5:c0:30:26:35:
ef:92:34:a0:76:72:1f:f2:1d:16:dd:b1:fc:4f:ca:
c3:4c:fd:82:78:b6:8a:b9:07:7d:6b:67:2d:ba:59:
d7:62:e8:22:c0:bb:d7:da:1c:83:6b:31:8b:7d:d4:
b2:f7:26:25:f0:07:47:3e:39:6e:44:78:da:31:c7:
c7:71:27:75:c9:a6:96:10:ad:43:99:5d:d6:04:68:
35:ac:fa:a3:f0:3c:ea:68:7a:01:13:0c:e9:b9:ad:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:30:3F:37:AE:9E:88:20:1F:A1:BA:CF:26:1A:B4:55:48:F7:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/3adc67a8-7cdc-3387-a3aa-e946a7507ae2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.crl
X509v3 Authority Key Identifier:
keyid:98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:53:6a:ee:9d:39:be:71:f6:e1:08:52:37:18:46:8d:f4:0b:
fb:6b:94:c7:90:70:1e:b0:b1:51:c6:31:9c:f4:a3:21:45:fc:
fb:5c:af:74:d4:24:89:19:e9:1c:b0:6d:f7:87:0e:9b:0b:35:
9f:d9:42:80:e6:a6:c0:a1:5d:a0:2b:1d:5d:f6:96:a2:9d:82:
cd:fa:9d:b2:50:11:3e:67:15:86:af:16:0c:e9:fe:54:6f:ff:
76:1f:9a:1c:67:62:32:7a:26:a7:bd:3d:b1:a2:c8:57:e3:45:
da:11:7b:ae:3e:22:e2:40:e1:68:20:a5:b9:7b:a5:2b:e8:58:
0e:90:4e:6b:82:34:b5:9f:6f:34:ba:43:4b:bf:a2:14:b1:81:
6f:2f:d1:6b:97:b6:d0:54:85:c6:58:8a:36:2f:24:94:c5:fb:
f3:5b:b2:cd:f6:dd:22:53:51:44:6d:3a:fe:ab:72:1a:18:ed:
5f:ac:b9:ad:9e:02:c9:cc:89:89:da:b1:5a:17:6d:a4:29:00:
db:18:73:23:60:2c:cd:eb:e4:8d:e5:ee:6c:c5:05:e9:58:b6:
22:b5:13:cd:fb:ce:2f:ad:da:9e:0b:e8:73:77:a2:84:de:21:
cc:da:43:69:17:00:8d:88:69:5f:18:80:e7:77:13:33:77:b5:
e3:ad:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 17:36:59 2024 by rpki-client on console-fra.rpki-client.org