Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/fb74d94f-37a0-3b82-ae08-c048b2b274b4.roa
File: fb74d94f-37a0-3b82-ae08-c048b2b274b4.roa (raw, json)
Hash identifier: MVJR5PRDo4rSw5sYryE2Fz5M5UeZkq7eoKFgKZP8w6Q=
Subject key identifier: 4C:6C:51:B9:C6:29:02:69:FC:28:26:62:0C:3C:02:65:3B:F1:55:4F
Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Certificate serial: 010D0C9F432858403ECB6CA0416E44DC5E4B29C0
Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/fb74d94f-37a0-3b82-ae08-c048b2b274b4.roa
Signing time: Wed 14 Dec 2022 20:38:16 +0000
ROA not before: Wed 14 Dec 2022 20:38:16 +0000
ROA not after: Mon 17 Mar 2025 04:00:00 +0000
asID: 16509
IP address blocks: 64.207.222.0/24 maxlen: 24
64.207.223.0/24 maxlen: 24
67.222.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:cb:6c:a0:41:6e:44:dc:5e:4b:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Validity
Not Before: Dec 14 20:38:16 2022 GMT
Not After : Mar 17 04:00:00 2025 GMT
Subject: CN=8947949d-dd32-4b24-ba4d-e8245db8290d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:95:9e:0b:5c:6e:13:40:33:ac:75:e1:ba:
67:b6:ec:58:54:40:22:fc:19:39:95:35:91:da:b1:
12:9e:f7:47:46:eb:2d:2a:fa:4f:17:f9:b2:71:0c:
63:02:7e:52:d7:ad:22:50:e1:6b:a0:9c:27:a9:0f:
55:c5:29:2a:bc:a6:d7:85:c6:e7:8c:bf:b3:cd:c9:
40:14:29:dd:07:be:38:f9:16:2d:b0:c4:27:e0:c4:
31:fb:7f:d9:98:b3:0c:f5:0d:18:c9:6f:75:b5:b1:
8d:84:8e:4e:66:66:2f:a0:5b:18:40:1a:5a:c2:a5:
14:39:05:91:71:fe:9e:2b:95:00:1e:29:9c:34:3c:
b2:9c:54:2d:9b:20:73:0b:56:79:eb:df:3a:a8:57:
fa:49:db:6d:c6:17:0b:7c:31:00:9d:d7:b4:3d:56:
8a:35:9d:2b:cc:e5:27:0c:46:65:75:fe:10:ac:83:
05:b9:96:ea:62:92:da:38:f0:8d:9f:b9:8e:f5:11:
1f:fc:5b:47:32:a9:9b:b4:1c:d1:30:43:9c:4a:1a:
d9:b0:41:af:c0:6f:d0:b8:3a:52:a7:b7:d0:cd:08:
b8:35:7b:fc:e0:3f:b9:a9:62:47:99:33:8d:0c:68:
2a:09:5a:4d:b7:c9:e8:65:2d:44:87:97:39:91:fb:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:51:B9:C6:29:02:69:FC:28:26:62:0C:3C:02:65:3B:F1:55:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/fb74d94f-37a0-3b82-ae08-c048b2b274b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl
X509v3 Authority Key Identifier:
keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.207.222.0/23
67.222.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:99:ce:1d:aa:75:6f:9b:5a:f2:7c:ba:80:1b:21:9e:c3:40:
e1:66:48:f6:94:dc:be:0b:aa:1e:23:3d:b3:12:ea:11:07:41:
89:e2:c8:c6:36:10:60:a6:37:f4:cb:31:fc:74:66:b9:d2:b4:
13:9e:1e:2c:8c:75:48:5a:66:59:51:68:70:3f:bc:9e:2e:c8:
ac:17:d2:13:2d:1b:b1:5b:0d:c3:a7:e7:4b:9b:03:ab:a1:5f:
90:84:1d:04:f5:64:75:09:34:fe:f1:bb:d1:d0:85:a8:91:19:
88:aa:a5:81:a5:12:de:96:a3:33:75:19:a7:fd:4b:55:c4:95:
08:29:71:93:85:7b:47:7f:91:cd:93:30:36:12:86:01:25:51:
c9:fe:08:c7:7d:68:c8:35:1e:32:6e:40:98:21:44:fc:18:a8:
77:9e:38:0f:0e:2e:7f:49:21:02:42:cd:0e:0a:c0:83:d1:22:
d3:47:7b:00:d8:6c:80:d6:ef:ad:5c:26:0f:7a:2a:56:10:4d:
a3:34:a4:e7:70:8a:08:11:3d:8a:74:a8:e9:15:3b:03:10:88:
90:5a:c6:b1:22:c1:d8:7d:be:f1:e5:6d:ad:7f:29:3b:39:2a:
a4:d6:9b:bc:88:5d:10:9b:c7:3c:78:d8:b4:3c:d0:a2:3c:15:
c7:62:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:28 2023 by rpki-client on console-fra.rpki-client.org