Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/ab330180-5fb3-35b5-9a89-b146af850911.roa
File: ab330180-5fb3-35b5-9a89-b146af850911.roa (raw, json)
Hash identifier: WR1t5+oScxAyPE6berCn+Cdr1om4c3rBCf+rU8A0F8U=
Subject key identifier: 72:6C:DA:38:9B:1E:02:0E:8D:51:86:B1:BC:52:E8:21:03:59:AE:58
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F4328584437F4162A6DF8110A2CF9E120
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/ab330180-5fb3-35b5-9a89-b146af850911.roa
Signing time: Fri 15 Dec 2023 02:00:16 +0000
ROA not before: Fri 15 Dec 2023 02:00:16 +0000
ROA not after: Thu 14 Mar 2024 01:00:16 +0000
asID: 237
IP address blocks: 35.62.9.0/24 maxlen: 24
35.63.0.0/16 maxlen: 16
35.25.0.0/16 maxlen: 16
35.37.0.0/16 maxlen: 16
204.38.0.0/16 maxlen: 16
204.39.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:37:f4:16:2a:6d:f8:11:0a:2c:f9:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Dec 15 02:00:16 2023 GMT
Not After : Mar 14 01:00:16 2024 GMT
Subject: CN=8ed98732-779b-4a26-a2bb-f870b38969df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:78:bf:49:f0:44:05:d1:c1:0e:dd:0a:38:
b2:00:39:64:64:e9:8d:ce:71:55:b8:b7:13:c0:75:
21:75:3f:f2:5b:fb:20:3e:6d:24:af:02:1a:38:af:
c6:03:12:76:d7:4b:9c:cd:a7:47:76:a0:eb:c7:50:
74:89:18:77:2d:d2:fb:b7:62:da:06:aa:b6:1b:f6:
8a:e2:bc:05:ba:3b:80:44:e1:08:3f:1e:fe:f1:c8:
c4:54:d4:54:90:a2:db:b7:6a:36:43:02:e3:2a:e5:
ca:4e:0d:50:f1:b0:12:e4:bc:9c:83:b6:fd:82:4d:
44:69:47:bb:3c:ec:6f:bb:89:da:82:32:68:3f:87:
07:ef:6a:f1:bb:5f:cb:85:25:74:e4:ba:df:27:a3:
63:ff:92:bf:ef:eb:78:27:18:82:4e:d7:2a:87:0e:
2e:f0:50:9a:8d:b3:64:96:cc:1f:b4:af:67:48:f5:
42:5c:c1:7e:4b:d2:66:c7:f0:50:bc:9a:b0:47:71:
4a:0e:b2:a0:b5:d2:08:75:8e:06:7e:fb:99:96:af:
f7:14:0a:2c:2c:8a:ea:54:f1:f2:26:4e:fe:8d:8a:
42:1b:fd:fc:40:c7:5c:f8:dc:61:bf:c5:6e:40:c7:
55:8c:28:b2:21:a3:a9:27:3b:64:fc:81:36:d5:25:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6C:DA:38:9B:1E:02:0E:8D:51:86:B1:BC:52:E8:21:03:59:AE:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/ab330180-5fb3-35b5-9a89-b146af850911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
35.25.0.0/16
35.37.0.0/16
35.62.9.0/24
35.63.0.0/16
204.38.0.0/16
204.39.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:49:9f:66:4d:98:99:70:fc:3d:d2:61:cb:30:85:57:8c:6d:
82:e8:cd:79:b4:70:65:f7:eb:e2:cd:5f:30:87:43:92:f1:4b:
be:10:fb:0b:c8:3c:cc:c4:38:74:1d:4d:e2:9a:42:be:f4:1f:
04:85:9d:b5:95:00:a9:07:7e:80:8d:b0:97:50:02:ab:ee:35:
49:a9:0c:5e:71:a3:6d:ce:b6:38:7b:e3:dd:82:47:66:35:78:
39:66:61:9b:93:05:d5:88:47:23:37:7f:e9:c5:94:9d:80:0b:
92:d6:3b:ad:60:4b:7b:81:be:f6:f9:e9:3e:8a:ce:2c:f3:4f:
0a:32:d6:0f:80:52:8a:8d:c2:98:21:cc:b4:45:83:14:29:28:
8c:0c:b5:f1:5a:61:53:4d:3e:e2:60:4f:ee:13:b1:45:79:37:
5b:52:1e:88:0c:bd:d8:9f:32:a2:84:9a:e7:95:f8:47:89:15:
97:2e:d2:50:5f:eb:ec:57:86:81:c6:14:2d:05:b9:6e:70:e1:
82:5b:64:cd:21:1e:cf:b1:ba:21:c2:ef:50:ef:b0:12:e8:d7:
64:16:bd:e7:84:8b:2e:8a:a8:3d:0a:74:37:53:4d:0f:1e:e6:
5c:d7:5f:b7:c9:e9:44:80:78:02:cd:2f:bf:b3:d8:05:f7:7d:
fe:83:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 20:23:36 2024 by rpki-client on console-fra.rpki-client.org