Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e81a7410-555a-301b-b4bd-92e2a8cb8e0f.roa
File: e81a7410-555a-301b-b4bd-92e2a8cb8e0f.roa (raw, json)
Hash identifier: nLGmWCm/1bU5OuBB74ayRMUrhL2SDuLMRRsKJi9i55M=
Subject key identifier: 03:E6:D8:D6:F5:56:1E:A7:F1:77:80:8B:09:2E:72:43:86:75:57:D9
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328583A8234ED19E25A74CDC750E480
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e81a7410-555a-301b-b4bd-92e2a8cb8e0f.roa
Signing time: Tue 10 Apr 2018 04:00:00 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Tue 10 Oct 2023 04:00:00 +0000
asID: 1225
IP address blocks: 198.64.0.0/22 maxlen: 24
198.64.4.0/24 maxlen: 24
198.64.5.0/24 maxlen: 24
198.64.6.0/24 maxlen: 24
198.64.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:82:34:ed:19:e2:5a:74:cd:c7:50:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Oct 10 04:00:00 2023 GMT
Subject: CN=6a2f727a-f212-49d0-8ebb-2294704138c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:db:bf:53:dd:10:37:7f:42:05:c7:2e:71:
8d:d8:0d:b2:59:a4:8b:87:42:6d:80:86:f7:39:4a:
2b:76:93:05:c6:c7:d8:09:67:8d:2b:f1:cf:15:7c:
7d:de:ae:1d:0e:3b:8e:69:ff:f6:0a:3a:bb:4a:6a:
4e:a4:3c:c0:a6:9f:45:f6:56:16:8b:75:0d:20:e9:
45:cb:49:80:86:00:13:89:05:b6:8a:2e:1e:79:38:
79:91:a3:ed:a6:40:17:da:14:b6:e1:3b:cc:e9:8d:
08:fb:7f:87:7c:d1:97:93:ec:c6:3e:11:44:e4:ce:
4e:d3:e4:4f:57:ee:da:bb:97:1f:ab:e0:d8:8d:a4:
85:26:0e:9f:e4:9e:f5:92:e1:45:d1:ab:56:13:f5:
20:d6:eb:aa:30:cc:4c:00:84:df:32:1f:b2:72:a0:
1a:12:a4:7f:17:19:ae:1b:37:e4:52:04:af:44:60:
d8:db:e8:55:72:4a:21:c3:60:1f:7f:5e:1e:00:3e:
a0:74:fa:c3:7a:2c:56:7f:3d:c8:ff:b8:65:74:ad:
a5:b2:de:1d:67:0c:59:03:48:0a:a3:2a:1d:74:1b:
f9:a8:35:5c:94:5b:57:21:e8:6e:d4:c3:30:37:89:
14:64:e1:f8:e2:a2:da:c1:33:5e:e9:36:86:37:6f:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E6:D8:D6:F5:56:1E:A7:F1:77:80:8B:09:2E:72:43:86:75:57:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e81a7410-555a-301b-b4bd-92e2a8cb8e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.64.0.0-198.64.6.255
198.64.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:02:87:75:79:6f:29:69:22:7d:e1:32:c3:99:4d:ab:4e:db:
3e:86:e7:1f:67:a5:72:59:39:de:47:b8:64:8c:00:b1:42:de:
25:0e:71:55:37:22:bc:6c:c5:49:54:e0:08:40:0c:a9:82:c1:
1f:a2:9e:b5:97:5f:14:6d:49:b5:00:f4:02:57:58:a6:de:5f:
c1:bf:96:d9:98:31:c8:e8:67:3c:7b:80:ef:29:60:b8:1e:b2:
54:e0:8e:0c:a9:82:d3:f4:cd:bc:e1:76:14:44:77:80:4d:86:
d9:f1:0d:aa:52:25:2e:a1:df:80:c5:c4:6c:28:90:1a:8e:0c:
9d:d1:1e:e9:1e:83:14:53:c3:c5:cf:b2:67:78:68:44:22:3d:
15:db:09:61:d6:93:3f:c8:fc:84:bb:e4:ee:10:96:5a:c0:73:
69:e8:c5:4c:6a:04:30:ef:bd:85:c7:8a:86:5a:fc:89:39:9b:
bf:84:f9:2a:57:57:aa:7d:5e:58:08:e9:60:88:0f:c2:c9:a2:
a2:29:17:63:7c:96:44:0a:5d:c2:49:b1:53:78:d0:73:78:85:
91:e1:9f:13:6c:69:31:ea:2a:c2:61:90:61:29:f1:22:d0:e6:
fc:e0:52:71:97:8c:4d:86:77:68:73:99:12:d5:d7:ac:da:3d:
28:7b:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 17:24:45 2023 by rpki-client on console-fra.rpki-client.org