Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/81adf295-46cb-34fb-b772-a7162ef97e9d.roa
File: 81adf295-46cb-34fb-b772-a7162ef97e9d.roa (raw, json)
Hash identifier: iJYpVKRO+NUv5eruC5j7OEFBTtVYMhmpRqqoCREkYc8=
Subject key identifier: 48:DA:A7:16:E8:E2:67:FB:FE:43:0F:75:4E:C0:D2:3E:5E:CC:20:ED
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F432858424E60F35C5ED311E41421D140
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/81adf295-46cb-34fb-b772-a7162ef97e9d.roa
Signing time: Wed 21 Jun 2023 12:00:00 +0000
ROA not before: Wed 21 Jun 2023 12:00:00 +0000
ROA not after: Sat 09 Aug 2025 04:00:00 +0000
asID: 9823
IP address blocks: 159.182.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 15:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:60:f3:5c:5e:d3:11:e4:14:21:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jun 21 12:00:00 2023 GMT
Not After : Aug 9 04:00:00 2025 GMT
Subject: CN=f7d2b243-1cda-47b4-848f-a401faed3abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:f2:e9:ed:4b:76:d9:e3:62:34:a9:09:93:
4c:a2:20:21:57:6f:f6:35:a2:ae:e0:92:6c:ec:5a:
9d:aa:fc:bd:dc:80:7a:de:7a:27:3f:46:be:cf:22:
e6:a9:fd:0b:42:5b:90:1a:71:f6:d2:1f:90:42:6c:
ec:9d:de:98:2a:c9:30:e0:5b:f8:c1:20:c8:5b:4c:
97:b1:f7:44:20:a7:a5:a3:80:4c:b4:a5:40:bc:18:
08:56:4f:43:a7:7e:41:2c:9e:d4:ca:9f:91:bf:da:
4c:4c:f7:21:9d:81:39:c3:79:b4:ae:fb:fe:06:31:
cd:c8:00:63:61:25:fb:11:6e:63:7c:11:22:4a:55:
91:9e:21:d4:20:5d:2e:07:d5:93:9f:30:82:90:21:
9b:65:b8:fb:9b:52:f4:19:9c:02:09:f4:45:e7:c2:
c4:74:c9:75:02:4c:3b:7f:5b:45:47:52:2b:c9:a5:
c8:ff:92:9a:e2:e5:a0:33:12:2c:ce:64:2f:6d:d4:
a7:d2:fa:56:56:66:16:80:b3:ad:35:a1:2b:45:7d:
dc:d5:16:9f:32:66:1b:ba:2e:9d:74:3b:f7:6c:b3:
c8:51:09:05:34:f5:9c:bb:45:2e:a9:ae:16:82:2a:
81:01:6c:b0:65:e9:a9:d1:81:11:43:13:48:b5:fe:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:A7:16:E8:E2:67:FB:FE:43:0F:75:4E:C0:D2:3E:5E:CC:20:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/81adf295-46cb-34fb-b772-a7162ef97e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
159.182.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:f5:42:03:4f:ec:59:85:dd:a7:ff:db:11:f4:e2:ab:fc:b1:
28:f4:9a:0a:e9:64:65:64:8b:fa:ff:26:f2:4d:a0:2b:b7:9b:
4c:ab:28:0c:ba:3d:07:58:cf:16:90:26:c7:57:89:3a:ab:b8:
e2:05:03:a9:c0:35:78:22:14:c4:d8:cc:23:78:a8:3e:b6:21:
d4:8a:de:85:45:c2:da:0e:24:e1:f6:01:d5:0a:54:f0:a7:d7:
44:be:6e:fc:cd:c5:7c:36:1f:28:a2:bc:dc:53:21:47:1b:8d:
cd:7b:13:35:8e:c8:df:0e:e7:14:3e:a3:86:85:56:01:6d:60:
8e:54:ef:d2:06:62:cd:9f:dc:85:57:b6:f6:37:d8:75:77:f3:
c8:38:a4:84:1a:f7:61:bb:fd:92:ea:73:32:0d:7b:b1:f3:9d:
02:b0:f0:45:3b:f0:bd:da:f3:3a:1a:75:ec:d5:39:7e:28:6e:
ef:12:ff:4d:5e:9b:01:22:aa:24:82:79:11:79:8e:10:da:09:
25:c7:f5:27:09:f0:b1:30:77:42:08:bc:75:45:11:9d:37:31:
9a:66:f3:4d:ce:1e:77:4f:41:a9:5b:8f:3f:17:77:93:12:8f:
29:c9:66:16:14:fb:7c:a9:34:4a:4b:89:6d:bb:df:64:72:08:
54:34:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 20:26:25 2024 by rpki-client on console-fra.rpki-client.org