Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/69d658a2-9f1f-3dde-9397-5f92569c28fc.roa
File: 69d658a2-9f1f-3dde-9397-5f92569c28fc.roa (raw, json)
Hash identifier: hi9j0nzDJPmp7DtANaXpDymkxWvvBesoYoGuZ5VvYDE=
Subject key identifier: 7C:00:F6:AD:49:96:23:37:44:4D:12:73:CB:11:B6:03:C4:E4:64:82
Certificate issuer: /CN=cf262e73-14ca-479e-ada6-8dbbce9b5d5c
Certificate serial: 010D0C9F432858471503A1CEEE443A461210DC80
Authority key identifier: 68:C3:7C:49:84:71:93:E8:B6:39:3E:9C:AD:71:0C:78:42:49:8B:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/69d658a2-9f1f-3dde-9397-5f92569c28fc.roa
Signing time: Mon 02 Sep 2024 15:59:15 +0000
ROA not before: Mon 02 Sep 2024 15:59:15 +0000
ROA not after: Sun 01 Dec 2024 16:59:15 +0000
asID: 20473
IP address blocks: 143.223.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 18:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:15:03:a1:ce:ee:44:3a:46:12:10:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf262e73-14ca-479e-ada6-8dbbce9b5d5c
Validity
Not Before: Sep 2 15:59:15 2024 GMT
Not After : Dec 1 16:59:15 2024 GMT
Subject: CN=ef8b690e-a90a-4aba-946f-71958450aedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:45:98:ce:bd:4f:97:f6:14:57:d1:ff:8c:
c1:b5:b0:25:a5:a6:7b:0a:00:ae:63:2d:c1:62:cb:
1b:7a:11:b5:a2:a7:18:cc:e8:db:74:e7:bc:29:11:
11:97:b7:43:f8:67:6b:ea:7d:f6:52:5f:dc:8c:c0:
69:18:2a:08:95:a7:f0:bb:e7:96:9f:8f:2b:15:cb:
0f:3d:59:be:28:e4:62:56:2f:3e:be:76:ca:f8:86:
ea:5e:ec:7e:5d:fa:6a:37:6b:8f:d5:e0:97:4a:80:
72:99:c8:26:0e:c0:0c:e3:0f:f5:19:5e:98:0e:75:
29:50:79:e9:b5:25:7e:e9:b2:b2:dd:c5:36:40:e1:
81:2c:4e:04:3c:3c:a0:43:f2:e2:98:f7:45:ae:50:
1e:19:84:de:70:22:55:ee:2f:b5:36:e5:7f:d2:29:
1f:c5:a5:70:48:25:88:95:a2:5d:1a:81:82:b6:73:
0a:89:f5:8e:ae:a0:5f:91:56:72:f0:b7:6b:17:bb:
23:cc:cd:63:eb:ad:8d:8f:b5:29:a7:f9:74:7b:5d:
40:c9:36:5b:68:e9:88:44:e3:6e:e5:17:08:38:20:
dc:73:06:a0:b5:e4:8a:d7:47:a1:ed:19:bb:6f:02:
4d:3c:46:9a:c5:27:fe:62:2d:25:0a:41:b4:9b:aa:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:00:F6:AD:49:96:23:37:44:4D:12:73:CB:11:B6:03:C4:E4:64:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/69d658a2-9f1f-3dde-9397-5f92569c28fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.crl
X509v3 Authority Key Identifier:
keyid:68:C3:7C:49:84:71:93:E8:B6:39:3E:9C:AD:71:0C:78:42:49:8B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf262e73-14ca-479e-ada6-8dbbce9b5d5c.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:4f:b6:b7:04:99:8c:ff:cf:8a:c2:bb:f7:3d:f4:77:66:09:
3f:6b:70:48:dc:52:90:55:9b:f7:0d:fc:2d:99:51:0b:c5:18:
a1:6d:87:70:8d:60:05:86:53:32:f6:55:12:40:f0:dd:c3:a1:
3a:9a:76:9e:c0:be:03:8b:ca:2a:e1:7f:c1:61:bf:9c:c5:2d:
d2:74:60:4f:3e:1c:c9:c7:3a:7c:3a:a3:f6:11:0b:d3:d1:4d:
92:58:70:06:d6:21:f1:03:e4:2a:c0:e2:8c:c1:e2:ba:7e:c0:
9e:c0:40:d1:2e:85:93:38:cb:54:f3:04:04:73:f3:37:5c:3d:
97:f8:a3:11:ab:c2:77:f7:42:02:3e:83:3a:e3:0d:50:aa:eb:
21:b7:e5:58:11:2b:41:e0:1c:d4:f8:29:93:52:29:b2:f5:f1:
69:e1:46:2c:5d:8f:0e:51:9f:db:bb:5f:b3:07:8e:68:db:61:
ac:5e:da:95:7c:3d:99:0e:5d:d1:aa:d2:a4:b4:27:6e:ff:35:
28:0c:42:e1:9d:f3:91:a2:14:44:c6:0a:4b:01:01:dd:51:75:
1e:e1:fb:26:2a:d2:ca:77:6a:f1:93:87:f0:9e:6e:a7:0b:ec:
5d:33:7d:41:1e:73:de:71:f1:90:35:be:38:4e:3f:ee:2f:8a:
03:51:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 20:17:15 2024 by rpki-client on console-fra.rpki-client.org