Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/30e99716-3c8a-3629-844d-42cf7e4382ba.roa
File: 30e99716-3c8a-3629-844d-42cf7e4382ba.roa (raw, json)
Hash identifier: HkKrNnWjkAL2HgZPpXm1ZWMJSl9Re+iz5OAJjWnQayM=
Subject key identifier: 03:70:20:0A:A1:31:BA:EE:CC:3D:82:5E:9B:F4:DB:2C:6D:A0:44:30
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285847A4D3621F89BC5E1F1E72FA80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/30e99716-3c8a-3629-844d-42cf7e4382ba.roa
Signing time: Thu 24 Oct 2024 04:18:26 +0000
ROA not before: Thu 24 Oct 2024 04:18:26 +0000
ROA not after: Wed 22 Jan 2025 05:18:26 +0000
asID: 13335
IP address blocks: 172.70.84.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 25 Oct 2024 00:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a4:d3:62:1f:89:bc:5e:1f:1e:72:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Oct 24 04:18:26 2024 GMT
Not After : Jan 22 05:18:26 2025 GMT
Subject: CN=147ceae5-052e-434b-91f3-09a1bc5d750c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:38:9a:a3:8c:fb:2a:ff:4f:7e:da:17:81:d5:
31:b6:ee:ee:fb:f3:5c:81:dd:f5:ef:b5:4e:43:3a:
f0:a7:3c:6c:d7:26:a0:8b:fb:d0:7d:d9:c0:9b:28:
66:28:4e:5d:11:8e:a3:5e:04:6c:04:15:a2:c9:2c:
fc:da:17:34:d3:39:b0:3f:07:1c:54:52:13:9e:e7:
a4:2d:0a:af:63:80:2c:e5:a4:5c:63:8d:f4:2c:24:
26:c0:54:0f:df:03:92:26:4e:bd:2d:48:ca:86:21:
5c:26:b1:16:08:d3:8b:5f:03:74:0c:94:e8:a4:b2:
c6:fb:bf:d4:b6:8c:e7:e4:0a:8e:ac:8b:54:7c:8e:
22:be:5e:d0:8d:d1:6f:5d:24:0d:49:09:99:c1:8f:
c4:19:a8:13:b3:5d:dd:c9:09:25:cc:a5:ad:10:d7:
b7:5b:95:69:49:fb:05:91:30:5f:87:45:26:dc:ca:
be:c5:a6:02:65:a8:44:e7:b8:b6:f7:e0:ff:c5:06:
22:dc:11:2c:9f:c6:9f:41:7e:c6:bf:b7:c9:2c:6f:
18:e5:c0:d6:bf:f1:84:c0:2d:34:39:fd:ef:7f:bf:
b9:5c:89:72:87:f7:ab:db:13:4e:b9:51:40:8d:8a:
62:5e:08:2e:55:1d:aa:87:50:95:af:f1:59:2f:e5:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:70:20:0A:A1:31:BA:EE:CC:3D:82:5E:9B:F4:DB:2C:6D:A0:44:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/30e99716-3c8a-3629-844d-42cf7e4382ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.70.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:e3:14:f6:6c:4c:3e:a5:67:e3:39:d0:e4:1a:8f:40:78:d4:
14:a8:65:da:e5:71:28:10:1a:f3:eb:82:74:82:ed:2f:ad:a9:
80:7a:7d:c4:fc:3d:19:da:45:42:8e:b9:11:c2:a4:2e:f6:4a:
83:f4:e4:28:8f:76:44:ff:94:98:6d:b3:9e:8f:3e:d7:24:d3:
91:1b:c2:45:1e:e0:12:15:70:f6:8a:2c:ba:ad:46:62:e8:f2:
ea:fd:d0:de:2a:c2:35:f5:c9:30:b4:7b:5b:34:ad:46:d1:0c:
74:d2:75:11:dd:a7:2b:17:5b:9a:96:90:63:48:80:d4:cd:f2:
48:19:d1:93:2f:dd:58:37:6c:50:0f:40:d4:43:d1:3a:45:80:
86:79:f8:f3:f3:4a:06:b1:1f:a3:09:df:bb:74:50:c5:c2:5c:
27:fd:d6:94:08:7d:0e:f1:e7:41:c9:6c:d5:c4:6f:e8:9f:3b:
62:d3:56:e4:7e:8a:26:03:72:44:cb:ae:3e:f8:60:df:30:d6:
d2:49:b7:7d:47:6e:74:52:ee:d8:35:54:36:b8:d8:c4:73:42:
d3:4f:ac:ce:34:27:cd:ad:02:22:b8:19:4d:a5:22:ba:ca:6e:
40:0d:20:e9:1a:65:4d:0c:b9:ae:28:dd:53:d7:52:fe:a8:9d:
86:6b:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 03:08:45 2024 by rpki-client on console-fra.rpki-client.org