Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5f1c7b79-5e6c-3563-960b-158681c441c9.roa
File: 5f1c7b79-5e6c-3563-960b-158681c441c9.roa (raw, json)
Hash identifier: kI1bEdZyrf5a5JZL4juAkHZCCUQ7L6EO+KdzhlzLW0Y=
Subject key identifier: 26:18:9B:A2:9D:46:2B:CA:E3:AF:8F:D1:8F:47:11:21:E1:E0:BC:0C
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F4328584541D4AFD3AA83263510743F40
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5f1c7b79-5e6c-3563-960b-158681c441c9.roa
Signing time: Tue 19 Mar 2024 07:42:09 +0000
ROA not before: Tue 19 Mar 2024 07:42:09 +0000
ROA not after: Mon 17 Jun 2024 07:42:09 +0000
asID: 396998
IP address blocks: 163.123.194.0/24 maxlen: 24
104.152.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 15:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:41:d4:af:d3:aa:83:26:35:10:74:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Mar 19 07:42:09 2024 GMT
Not After : Jun 17 07:42:09 2024 GMT
Subject: CN=1ed994fd-894e-4722-820d-8b90f2ab4494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:3a:9d:f3:5a:d1:eb:30:26:36:70:f6:f0:
40:e0:ca:4e:5a:ce:fc:37:8a:48:5c:32:1b:6b:f4:
71:f1:16:9d:33:2b:2c:76:79:b7:03:61:e2:ab:a8:
28:c2:1a:af:20:4d:b0:23:90:80:3b:93:30:57:7b:
ce:f9:5b:26:9d:d1:15:92:d1:1e:1c:40:3f:f0:85:
38:bf:5b:1d:91:8b:13:20:83:33:0c:17:be:5b:25:
3f:51:78:f5:a7:d3:15:79:0f:68:7e:16:a3:21:4f:
b1:f8:43:39:3d:12:ef:03:21:71:ca:2f:9c:eb:82:
84:89:0d:66:33:98:2f:23:4f:ea:7d:1a:54:71:1f:
0f:3a:25:56:6a:54:cc:7d:02:b6:0c:88:69:c8:3f:
db:b3:f0:f1:f8:39:d6:2c:7f:ec:8a:98:ef:fc:0e:
bf:7a:1d:41:d4:51:8b:e2:05:c5:fe:ea:8e:d6:11:
8e:52:bd:97:23:01:4a:94:8d:2c:ac:0f:70:87:c1:
0c:ae:81:50:41:cc:11:fd:02:cd:fb:ac:11:f3:5f:
4f:06:bd:20:7b:6a:41:3d:ea:cd:5a:76:f9:15:e7:
fc:35:06:84:f1:50:bf:56:a7:2a:c2:ae:a4:01:ef:
b0:36:0b:bf:57:18:da:f9:2f:8f:ce:80:ad:12:08:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:9B:A2:9D:46:2B:CA:E3:AF:8F:D1:8F:47:11:21:E1:E0:BC:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/5f1c7b79-5e6c-3563-960b-158681c441c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.141.0/24
163.123.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:44:7b:1a:8c:eb:0f:78:1c:2c:1b:dd:42:18:b8:8a:29:67:
39:1b:a6:b9:fa:67:16:49:68:3b:db:f2:61:b5:f2:6c:d9:0f:
85:4e:01:6f:49:e4:83:ea:a2:0c:3e:e9:a2:86:bb:83:67:65:
44:2f:61:b4:28:d9:a8:4c:3c:0d:17:bd:27:c8:44:94:57:a1:
8f:0f:24:19:65:3a:9a:0b:2f:08:6c:50:67:f2:3d:15:c6:84:
b0:ad:8f:86:ab:77:0e:f3:9c:19:72:d3:ea:ec:b9:3d:09:5c:
e4:3f:0e:15:29:a0:75:a1:10:38:c9:ea:7e:a9:f8:c2:7f:ea:
4b:e0:56:10:55:c2:d2:81:f6:9a:c1:b4:08:91:28:b6:ae:3d:
be:2b:bf:24:09:84:43:e6:99:2d:40:7c:49:a5:ca:21:a6:82:
4f:27:72:07:c8:3f:05:65:79:83:ab:8d:65:40:a2:82:f6:5b:
ca:8b:a2:f2:fe:ea:9f:59:3d:54:90:77:61:92:dd:be:22:8f:
3f:fd:1c:43:8b:d3:59:52:10:0d:c4:1c:d1:e8:76:1f:1f:02:
e0:ff:c1:d5:ef:32:2f:36:fe:5f:b3:a8:ae:01:85:04:80:3e:
11:d9:b2:8f:88:99:ab:4f:22:6e:f6:a8:94:5b:01:e2:24:e1:
5b:11:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:02 2024 by rpki-client on console-ams.rpki-client.org