Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/84a3a5e3-edc7-3448-a333-4f69db2e3264.roa
File: 84a3a5e3-edc7-3448-a333-4f69db2e3264.roa (raw, json)
Hash identifier: L8ESc0i5/w1pjkmSQvVGjxEzRoeP6wIomIx6qQC/o8M=
Subject key identifier: 32:98:3A:FE:3A:D5:1A:F0:34:7C:DF:E8:F1:27:D6:F9:40:8D:62:35
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F43285846AACCC59F91D325E4B8314180
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/84a3a5e3-edc7-3448-a333-4f69db2e3264.roa
Signing time: Fri 26 Jul 2024 14:53:01 +0000
ROA not before: Fri 26 Jul 2024 14:53:01 +0000
ROA not after: Thu 24 Oct 2024 14:53:01 +0000
asID: 834
IP address blocks: 199.255.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 10:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:aa:cc:c5:9f:91:d3:25:e4:b8:31:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Jul 26 14:53:01 2024 GMT
Not After : Oct 24 14:53:01 2024 GMT
Subject: CN=3db2d7c7-6995-4750-ae3e-241ed4e6067e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:c4:bc:94:9f:1d:d5:3b:39:ee:97:92:67:
d8:70:b1:88:a3:43:c2:5d:d8:c5:73:c4:c4:68:5b:
04:be:13:c5:df:c1:56:6c:e2:fb:14:e7:9f:81:3b:
a5:1e:50:32:af:77:79:fd:6e:43:78:64:1b:eb:81:
22:e8:87:cb:6a:78:21:a9:51:06:9e:84:bf:d3:99:
9d:34:c2:28:51:47:12:42:b5:bc:75:3b:42:eb:99:
05:3c:69:f0:e6:46:51:4c:ea:b9:40:d2:99:ff:0a:
f5:eb:1e:ff:5f:6d:1d:2f:5a:98:45:5b:b6:82:d2:
63:75:a8:c3:4d:3b:53:6b:5b:bb:9c:21:3b:3a:9e:
a3:2c:89:60:34:e3:7f:28:4d:0b:35:09:f5:f4:0b:
3c:b6:d5:2c:0c:2c:5d:af:b8:06:68:0d:55:47:eb:
4d:32:54:af:7f:e1:d9:c4:9d:f9:c9:ab:9e:bf:db:
d9:51:a9:c5:3a:d3:8c:33:03:c4:5f:e6:cc:a5:40:
22:12:de:f3:2e:7d:e6:48:ba:d0:ed:48:dd:65:ff:
94:1c:ed:09:e7:d6:fe:d2:65:f9:5d:20:89:b0:47:
6b:a0:58:ea:a3:ea:45:f3:7f:39:82:03:6c:53:2d:
89:40:da:77:1a:c1:4b:ce:4a:76:85:72:66:20:4a:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:98:3A:FE:3A:D5:1A:F0:34:7C:DF:E8:F1:27:D6:F9:40:8D:62:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/84a3a5e3-edc7-3448-a333-4f69db2e3264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:da:23:e1:f8:1c:40:87:be:5a:7a:6a:d3:55:c9:d3:b7:f6:
65:88:9d:8e:d9:c3:db:a5:24:af:5c:52:27:e6:e5:24:e4:c9:
f1:9d:8d:58:be:67:40:69:77:19:12:83:1f:c1:52:ba:80:a0:
21:e2:d0:7e:a6:05:07:8c:ff:57:cb:8c:f6:6e:51:67:8c:39:
ed:d2:04:91:61:ea:96:4e:1e:3d:15:4e:3c:00:67:a5:3a:ac:
93:13:66:d7:b9:29:b9:04:4b:4f:ad:e5:64:b1:4b:6b:0d:fc:
23:ce:be:11:d2:88:1e:d8:30:67:bf:92:03:0b:94:dd:2c:62:
24:b4:90:85:da:23:4f:ed:aa:11:f7:74:89:75:ec:14:5b:13:
8d:f8:2a:a8:ff:69:bd:3a:0d:0b:a0:fe:c2:17:25:6a:91:ff:
6e:ee:6f:3d:18:77:9d:7d:74:f3:95:90:69:ca:70:9c:e3:88:
f7:37:87:fe:1c:ea:5e:39:96:5d:f2:0d:6c:e3:e1:ea:f5:9f:
df:89:c6:cf:c9:03:b3:dc:d2:c0:c0:ad:ad:03:cc:0a:68:07:
32:18:42:99:22:46:30:08:b1:c5:09:8a:ff:8a:07:4c:f6:07:
ab:78:1a:8f:fa:94:37:e6:dd:82:be:bb:6d:a6:5c:5f:9f:d5:
62:0e:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 12:11:53 2024 by rpki-client on console-fra.rpki-client.org