Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5326245f-9c1b-387f-a264-5faef885cbe6.roa
File: 5326245f-9c1b-387f-a264-5faef885cbe6.roa (raw, json)
Hash identifier: I5XaTu7J2bd+u8UH/iutjg4c9ffVLeKQCVHT1gOWvLI=
Subject key identifier: 83:E7:8C:40:E8:1D:AD:50:55:D4:57:8C:E6:E8:56:69:39:71:2F:FA
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285844BB2A4E60FCAA5776B7FBB398
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5326245f-9c1b-387f-a264-5faef885cbe6.roa
Signing time: Wed 31 Jan 2024 02:00:26 +0000
ROA not before: Wed 31 Jan 2024 02:00:26 +0000
ROA not after: Tue 30 Apr 2024 01:00:26 +0000
asID: 20940
IP address blocks: 157.238.70.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 16:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:bb:2a:4e:60:fc:aa:57:76:b7:fb:b3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 31 02:00:26 2024 GMT
Not After : Apr 30 01:00:26 2024 GMT
Subject: CN=d61bdef9-f2f2-4ec7-aa93-d13b503b3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:60:8d:b4:8d:b2:44:15:13:fc:60:a0:e9:
2f:e5:aa:2e:8b:11:7c:85:33:94:4f:76:90:be:79:
49:4b:f9:73:8c:00:28:87:3f:62:72:8b:e2:0d:1b:
8b:b6:3c:85:27:20:e1:e3:2d:c7:74:63:21:b4:bd:
00:10:c9:e9:bf:62:15:bd:ff:59:b9:fd:90:f6:ea:
f8:ff:59:73:77:2b:1f:a5:0b:90:72:be:01:09:79:
d1:3e:8c:46:ec:38:77:c2:69:33:b2:1e:15:31:ef:
08:ad:0f:d1:98:91:a7:e6:09:cf:e9:bd:09:77:3c:
49:d4:df:e7:58:bd:cc:a7:8e:c0:bf:91:28:58:cc:
21:34:ae:2f:33:e6:64:8a:8c:9e:bd:0f:c8:1d:f8:
36:dc:c6:ff:b8:3c:6b:ad:0b:08:1f:b8:dd:d0:af:
4c:a0:c1:a7:fe:81:28:8c:35:02:67:a1:f3:03:e7:
2f:06:3a:76:b7:03:89:1e:e4:f7:3c:e7:67:fd:d0:
10:09:0c:c7:d9:2f:5e:84:39:c3:66:b1:f4:56:8c:
36:b1:1b:59:df:dc:81:38:5c:e7:83:94:20:f6:37:
67:fc:ac:91:52:97:a5:98:70:2e:c6:63:fd:a3:e3:
73:7f:33:36:54:3b:a4:b1:c4:88:5f:ad:3e:df:7f:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:8C:40:E8:1D:AD:50:55:D4:57:8C:E6:E8:56:69:39:71:2F:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5326245f-9c1b-387f-a264-5faef885cbe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
157.238.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:df:5d:38:96:f6:6f:ff:51:d8:a0:ef:7a:48:e2:78:61:f6:
1f:32:50:ab:21:1e:79:af:41:0e:2d:0e:ba:5e:4f:3e:81:f5:
99:50:5a:99:cc:70:1a:28:15:f8:5d:91:43:c6:89:5f:20:04:
11:46:6b:6f:16:c2:0a:be:76:9c:8b:27:90:ef:bb:8e:49:65:
5d:8c:8b:9b:52:23:e5:dc:4d:7d:4e:8c:37:85:0e:46:2c:e1:
fa:4c:61:4c:17:ca:70:92:15:e4:88:3d:7b:29:04:2d:17:c9:
ec:f7:ff:91:5e:c1:63:a4:10:2f:d0:f8:dd:1d:5d:30:9b:11:
77:dd:91:47:d3:f2:e8:0b:66:92:ba:86:a9:55:20:e3:51:82:
11:23:9c:61:65:43:8a:05:d3:2f:9f:e1:5f:34:fd:2c:7e:73:
2c:b3:6a:b3:c1:77:52:27:80:91:4a:ca:6c:90:e6:6b:a7:fc:
ec:c9:53:47:ff:78:36:92:97:c6:94:b4:b0:1b:b5:39:c4:15:
3a:5d:ad:7e:3f:77:8d:31:81:0c:d3:dc:2e:f9:f5:3e:36:4b:
cd:64:bf:37:63:c5:44:95:e1:1b:0a:d7:3a:40:28:f1:ce:69:
8b:c6:d6:76:95:82:1f:d9:d9:fe:77:3b:69:ed:8f:c7:13:be:
62:01:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 20:50:20 2024 by rpki-client on console-ams.rpki-client.org