Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/db48ee38-c9dc-3c07-8e77-e40332d2fb28.roa
File: db48ee38-c9dc-3c07-8e77-e40332d2fb28.roa (raw, json)
Hash identifier: TNS9VqOamZDigCJX656SXDk3u+rim47/U3Tt0ftiXe8=
Subject key identifier: 42:B2:4B:67:33:B1:B5:58:4F:D6:4F:01:00:94:7C:06:D4:4B:CF:A2
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F432858424E60D48EF43704FC28FA3140
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/db48ee38-c9dc-3c07-8e77-e40332d2fb28.roa
Signing time: Wed 21 Jun 2023 12:00:00 +0000
ROA not before: Wed 21 Jun 2023 12:00:00 +0000
ROA not after: Sat 09 Aug 2025 04:00:00 +0000
asID: 6461
IP address blocks: 159.182.54.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 15:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:60:d4:8e:f4:37:04:fc:28:fa:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jun 21 12:00:00 2023 GMT
Not After : Aug 9 04:00:00 2025 GMT
Subject: CN=2e36ba8b-3f95-46ce-bd62-9ed2990a1bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:c3:4f:b2:04:50:78:ea:5f:f8:b1:84:29:
10:71:6c:3a:05:0b:ca:19:4a:dc:8c:64:b4:60:e1:
42:0e:8e:5c:13:28:ef:13:96:a0:9a:c3:df:65:38:
e4:f1:4f:5e:ea:fa:1b:35:0d:34:dd:35:21:38:d9:
6a:62:10:df:37:32:29:9a:a9:6e:7b:ed:5e:ac:82:
48:6d:33:9d:68:10:0a:5f:03:ed:3e:ec:e1:88:fc:
47:cc:fa:ca:cf:6c:fb:e6:e4:06:28:83:b1:08:42:
ee:e0:f6:3b:51:7b:07:43:8b:43:82:a2:be:28:81:
1d:7a:61:d6:e8:c0:4c:cc:c0:58:cf:bd:2c:9f:99:
4d:57:27:ec:bc:44:90:0e:25:12:d3:a0:ae:5d:4e:
bf:6e:d6:7f:1b:90:58:d7:d9:1a:0a:fb:53:08:42:
f3:7d:b7:57:22:2d:af:9b:6f:72:83:05:06:a2:bb:
6b:6b:aa:ce:25:f3:c8:18:2a:ff:93:72:db:18:c5:
b6:7c:03:fb:0d:30:ad:7a:72:44:45:74:11:f4:c1:
84:26:24:3e:9c:b4:6b:cd:97:0a:44:cd:8e:90:17:
8d:5d:ea:8a:8e:b8:13:bd:9c:c8:c8:27:10:ce:d3:
20:74:d9:e6:67:f7:15:06:4a:fb:b5:86:25:ad:ec:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:4B:67:33:B1:B5:58:4F:D6:4F:01:00:94:7C:06:D4:4B:CF:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/db48ee38-c9dc-3c07-8e77-e40332d2fb28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
159.182.54.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:50:dd:8f:ce:e7:2c:ed:7d:47:0e:cb:57:3d:5c:fd:04:34:
90:0a:49:3a:d6:9f:79:c3:79:2b:a3:0c:61:a8:e0:c0:d1:2e:
96:f9:b3:ea:e2:99:05:80:c3:79:3f:3d:be:18:91:54:d0:a0:
4a:85:a0:ce:20:e9:29:ac:04:7b:b5:9c:a2:31:92:bc:54:39:
99:aa:cb:69:3c:bc:c5:db:a5:cb:91:07:32:92:a5:0d:22:ce:
c4:5b:08:3d:bb:9a:64:d1:50:9f:70:61:a8:46:5e:8d:6f:5d:
b8:4a:e7:23:11:bc:c2:f0:69:96:3f:eb:6e:c4:84:32:4c:1b:
7e:e4:77:76:5c:f1:6f:90:9e:24:3b:ef:88:46:ac:b3:92:6b:
cf:5e:4b:ad:bc:77:22:fa:36:fb:5f:c3:55:2e:1c:0c:c6:9e:
56:b1:65:61:a8:34:fc:af:80:82:f2:aa:34:d0:3f:0e:37:0d:
40:d2:1a:25:c4:96:de:27:58:54:ef:04:b1:f0:57:fc:91:91:
83:5f:c6:35:f5:f3:24:d7:80:da:b1:9a:30:c4:10:e4:22:5d:
df:8b:d2:21:e4:89:ad:fd:15:51:dc:ec:c3:21:ce:85:70:07:
f6:3f:88:81:b7:b7:cb:a7:3b:70:98:4c:eb:1a:51:1a:d8:0f:
53:dd:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 20:26:25 2024 by rpki-client on console-fra.rpki-client.org