Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/3fda64af-d72c-3843-9dde-a922d7bf2d4f.roa
File: 3fda64af-d72c-3843-9dde-a922d7bf2d4f.roa (raw, json)
Hash identifier: LaCEpVUjDaYYksQGPxWmh6G/vnCU+iO8S5HYTtL1CfA=
Subject key identifier: FA:67:01:13:10:95:05:A3:BC:EE:C7:77:F0:0C:98:FC:D0:D2:76:AF
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F4328584554981AD3F675BB933EC67300
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/3fda64af-d72c-3843-9dde-a922d7bf2d4f.roa
Signing time: Tue 26 Mar 2024 01:00:25 +0000
ROA not before: Tue 26 Mar 2024 01:00:25 +0000
ROA not after: Mon 24 Jun 2024 01:00:25 +0000
asID: 398797
IP address blocks: 199.255.148.0/23 maxlen: 24
2602:fd1e::/36 maxlen: 40
Validation: Failed, certificate revoked on Wed 08 May 2024 20:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:54:98:1a:d3:f6:75:bb:93:3e:c6:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Mar 26 01:00:25 2024 GMT
Not After : Jun 24 01:00:25 2024 GMT
Subject: CN=72168f61-fcbd-4178-a08c-a7df1e8ae6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:d1:71:a0:24:1a:8f:4e:75:b0:ea:0a:f8:
c2:9a:bb:fe:59:d8:e3:13:b3:80:37:99:5e:bd:82:
7d:1f:16:47:8a:a5:b3:90:38:7f:98:8b:0f:5a:4d:
1d:a9:e5:87:94:fb:a2:26:a3:c8:02:15:72:24:04:
81:a3:5f:59:07:81:5a:00:ee:d6:2d:09:73:07:23:
2a:14:e1:20:5c:ca:96:0c:0e:bb:51:4f:3b:9f:01:
ce:6c:7b:e7:44:c6:16:23:f6:7e:22:70:98:d7:f6:
34:6b:6c:53:c3:d7:c3:2b:32:a4:e0:44:50:b2:ea:
60:b4:50:7a:5a:1e:dd:84:70:f8:8b:d0:66:1e:b1:
da:73:ee:b3:79:49:17:8a:cc:08:52:06:3b:34:2f:
cd:cf:75:5b:42:53:04:ed:18:bb:47:46:e8:cb:dd:
74:66:df:60:47:d8:a0:81:b9:21:99:a7:cf:23:3c:
7c:38:2f:89:df:89:1b:0d:e2:d0:1c:4b:bb:ba:c4:
fc:80:e7:0c:bd:0c:7b:4c:87:34:63:73:25:55:38:
14:d9:1e:a7:af:99:8d:d9:f3:28:0a:b6:c4:2c:da:
14:f3:43:c1:ce:2a:9f:51:7f:f0:16:06:27:1d:66:
21:cb:8a:62:e0:80:5d:2f:0d:1d:cb:f6:3a:43:54:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:01:13:10:95:05:A3:BC:EE:C7:77:F0:0C:98:FC:D0:D2:76:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/3fda64af-d72c-3843-9dde-a922d7bf2d4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.148.0/23
IPv6:
2602:fd1e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:f7:f6:95:d2:2f:c8:8b:00:05:b4:f4:2f:2f:0f:76:ad:ee:
38:80:d9:6d:d2:39:18:02:cd:59:6e:1e:ef:13:ce:e4:12:6d:
3d:31:d0:d0:da:cd:85:3e:bb:b0:93:cc:1c:7d:0f:0d:b6:cb:
f5:4f:02:5b:75:24:71:f2:0e:83:45:d7:b0:6a:d9:bc:71:e1:
a8:1a:fa:03:5d:a4:00:7c:56:04:28:bb:51:4d:4b:65:5e:34:
40:fe:4c:41:da:bf:16:a7:5e:b7:49:28:dd:7d:81:19:fb:a0:
2e:10:ce:96:be:23:01:74:b6:d9:5d:a0:a8:b9:e8:a0:a5:15:
e3:f4:3b:89:5d:7e:93:80:c6:5e:20:ac:4f:a7:c6:d0:98:e1:
f1:75:a1:25:fb:89:8b:26:66:de:74:29:e2:1b:00:8d:d8:72:
ba:a3:33:0f:2f:e3:32:0f:d1:07:4b:60:bb:e6:1a:f0:d2:dc:
1c:5f:63:92:a6:6e:32:69:e5:10:18:13:74:c4:2d:7a:31:19:
75:cb:48:d1:9c:5a:c7:5b:1a:07:bf:4f:91:3d:4a:5b:73:c0:
8d:07:a8:48:a0:c8:06:57:96:c9:0f:57:17:8b:8b:5a:10:72:
a7:0e:a9:13:85:18:d3:a1:0e:1c:7b:d5:76:05:e5:16:1c:2e:
1f:c7:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:40:24 2024 by rpki-client on console-ams.rpki-client.org