Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/76baaeb8-1a47-3a3c-882d-e325fce015a5.roa
File: 76baaeb8-1a47-3a3c-882d-e325fce015a5.roa (raw, json)
Hash identifier: NTFANalaXJv93ArXLPL1HTCll+MYxqU/BRGpMQ+PQ/Y=
Subject key identifier: 50:9B:EA:12:34:E4:24:E6:7F:0A:7D:BC:74:60:0F:00:89:0E:A7:4B
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F432858441D6E986089874F281A55AE80
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/76baaeb8-1a47-3a3c-882d-e325fce015a5.roa
Signing time: Tue 05 Dec 2023 14:00:21 +0000
ROA not before: Tue 05 Dec 2023 14:00:21 +0000
ROA not after: Mon 04 Mar 2024 14:00:21 +0000
asID: 399636
IP address blocks: 35.62.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:6e:98:60:89:87:4f:28:1a:55:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Dec 5 14:00:21 2023 GMT
Not After : Mar 4 14:00:21 2024 GMT
Subject: CN=ebd7fdc0-4876-4135-b2e5-358f397003b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:db:e1:ec:59:70:52:b9:f8:d5:02:10:eb:
3b:30:7f:be:06:aa:ca:90:38:5d:c6:29:a6:6c:c0:
9f:2f:4d:ea:3d:ce:8a:06:2b:69:57:85:bf:5f:84:
ac:04:c4:1b:4f:ea:ec:a5:d6:70:13:7b:d7:f6:0d:
de:71:03:30:ca:b9:63:e6:e5:f1:04:d1:c2:71:36:
f7:4d:5b:84:e2:a6:e4:42:26:2c:8e:05:39:16:c3:
72:98:22:58:9e:d2:a7:cb:fe:64:4e:9c:bd:c2:3f:
94:0d:58:28:39:63:7a:38:06:27:2f:09:99:1b:ff:
e5:5b:9b:00:7a:70:f8:6d:26:33:77:8e:73:a7:ef:
6f:b5:29:d5:29:e1:5f:01:1b:69:b1:e5:b2:f7:c4:
72:6f:67:a3:53:0d:01:0a:9d:e0:c8:c3:72:49:17:
c0:80:ba:0d:5f:1f:8e:de:b7:10:9d:ed:6c:06:04:
d4:aa:4b:20:7f:fd:5a:c8:6f:8b:43:a0:17:34:05:
49:8d:db:2e:33:0f:a0:00:d6:6f:f1:c2:07:91:a2:
2f:ae:c3:bb:81:30:7a:8d:6e:b5:53:84:99:01:3c:
64:f6:e0:80:7e:9f:b2:11:d8:df:86:f2:6e:63:70:
43:45:47:ed:bc:df:c7:12:72:28:d0:24:4d:90:ca:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9B:EA:12:34:E4:24:E6:7F:0A:7D:BC:74:60:0F:00:89:0E:A7:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/76baaeb8-1a47-3a3c-882d-e325fce015a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.62.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:43:22:ae:4d:60:42:79:3d:e5:fd:3f:d9:8e:f8:95:9a:c6:
08:c8:ea:a0:a0:a6:b9:6c:f2:37:a8:3d:68:f2:63:24:45:b1:
5a:cd:49:ba:23:4d:fd:43:61:f9:21:80:5b:7d:5f:65:cc:ee:
6b:e9:30:e0:53:f7:28:42:20:a1:ed:1f:fb:7b:a7:a2:84:dd:
e0:6b:aa:3f:4b:2c:38:51:28:78:ef:34:9d:f0:73:50:0f:c0:
88:aa:1e:e6:02:15:35:ac:85:67:fe:70:51:92:15:24:fb:68:
a0:0b:24:73:1e:40:62:95:5c:74:40:4b:b6:94:37:a3:67:ef:
2d:06:82:bb:ab:95:61:c8:c7:8d:1d:bf:6b:e4:18:24:b8:01:
87:fe:62:97:3d:98:63:e8:45:df:42:68:2c:6b:eb:80:e5:06:
45:9d:68:8c:eb:31:41:7d:26:f2:7c:5a:89:25:f4:a9:40:3e:
02:a7:a6:d7:25:95:10:60:6a:9a:a8:db:d0:be:31:0d:93:39:
ae:68:9f:a8:0a:cc:c1:7b:23:6e:1e:74:d4:0a:24:94:c8:ad:
1e:07:6f:f7:23:14:d0:80:21:ac:3a:07:77:d5:17:0b:d2:f5:
68:c0:70:c2:80:1b:d6:c8:0f:7c:3e:71:03:08:53:e7:ce:68:
47:b7:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 21:04:43 2024 by rpki-client on console-ams.rpki-client.org