Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/c9670254-fe06-3ded-9dfb-e45a08d49556.roa
File: c9670254-fe06-3ded-9dfb-e45a08d49556.roa (raw, json)
Hash identifier: VFMKga32b69CD8rAzLgbTEalNLcjRHvFnB+hgeNQNl4=
Subject key identifier: 70:D2:94:81:D6:E3:44:D9:63:B5:F2:48:8D:39:A7:8B:78:EB:1F:80
Certificate issuer: /CN=02d0abc8-99da-40bc-a45c-4d8b1fc73352
Certificate serial: 010D0C9F432858448371649DF9054E1FF482C200
Authority key identifier: BB:D3:0F:E5:CD:05:80:43:30:FD:20:CA:3C:3A:CB:AA:F8:6D:95:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/c9670254-fe06-3ded-9dfb-e45a08d49556.roa
Signing time: Thu 11 Jan 2024 02:58:30 +0000
ROA not before: Thu 11 Jan 2024 02:58:30 +0000
ROA not after: Wed 10 Apr 2024 01:58:30 +0000
asID: 40581
IP address blocks: 208.90.104.0/21 maxlen: 24
2607:f4f0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 14:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:83:71:64:9d:f9:05:4e:1f:f4:82:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0abc8-99da-40bc-a45c-4d8b1fc73352
Validity
Not Before: Jan 11 02:58:30 2024 GMT
Not After : Apr 10 01:58:30 2024 GMT
Subject: CN=1051bf0a-cb50-48aa-b1fd-a623de469bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:66:4e:6f:0a:92:6e:4f:aa:e9:36:84:7a:
50:d5:ef:59:b0:3e:94:6e:f4:8e:ff:83:29:5c:4d:
28:5d:e4:9a:ca:ed:80:11:4e:72:8b:a7:2c:d0:01:
6c:af:e1:8c:cf:f6:23:fb:3e:a4:b1:5e:60:b5:49:
f0:d0:5e:b5:b4:87:3f:cd:ec:26:40:34:ac:68:b3:
c8:71:3f:3c:8d:d9:0d:dd:ae:ac:43:a2:d1:40:69:
86:d8:e5:79:3e:2c:3f:ae:e0:cf:5b:f6:5f:f9:a0:
30:f7:7f:5b:b1:1d:8f:24:9a:f7:88:e0:43:87:98:
44:4c:f7:4c:bc:93:ca:73:1b:e6:1a:93:15:ba:be:
a3:c7:05:23:f3:21:b7:c6:13:b9:d4:b9:26:bd:d9:
02:51:b2:2e:16:69:4a:89:01:87:1f:5f:92:76:3c:
9b:3a:c1:44:d9:71:5a:36:2a:36:cd:6b:8d:7b:eb:
77:40:e7:8d:24:f1:b6:79:64:ac:04:a9:ed:6b:47:
0d:36:99:d8:33:ae:28:14:70:b5:8a:89:f8:f0:a8:
82:ac:8b:9a:eb:9c:bf:85:f0:e6:e6:df:a1:cd:d9:
50:d5:6a:c3:0e:dd:e6:2d:76:24:7d:ff:d4:b5:3f:
08:41:91:76:20:35:24:31:89:4e:93:a0:2c:76:ae:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:94:81:D6:E3:44:D9:63:B5:F2:48:8D:39:A7:8B:78:EB:1F:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/c9670254-fe06-3ded-9dfb-e45a08d49556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352/02d0abc8-99da-40bc-a45c-4d8b1fc73352.crl
X509v3 Authority Key Identifier:
keyid:BB:D3:0F:E5:CD:05:80:43:30:FD:20:CA:3C:3A:CB:AA:F8:6D:95:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02d0abc8-99da-40bc-a45c-4d8b1fc73352.cer
sbgp-ipAddrBlock: critical
IPv4:
208.90.104.0/21
IPv6:
2607:f4f0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:08:d8:5a:37:8d:08:77:9c:b4:1c:21:09:a8:21:cb:08:27:
0a:48:96:8f:12:b1:15:5d:94:46:e5:08:e3:e8:5c:e4:6b:9d:
72:bd:20:6d:e5:42:1a:9f:29:49:57:75:05:b2:81:c0:83:b9:
8e:d1:fe:39:d3:ac:35:d2:f9:c6:34:d0:d4:66:e6:92:2e:cd:
65:d8:de:68:73:e9:4f:74:b1:ed:42:aa:18:c6:eb:d2:8f:79:
d6:10:a4:82:fa:49:ad:87:fb:bb:5c:69:14:1d:64:b6:c6:d5:
30:7a:2a:0a:43:29:17:a6:58:12:ec:73:a0:14:aa:36:eb:31:
a3:5b:8e:f9:f7:0d:e8:09:e8:97:63:1c:14:7f:da:bf:ec:64:
17:9e:81:9c:c7:f1:43:19:e4:94:b3:4d:82:2b:dc:d9:f5:29:
2a:83:92:13:24:e5:ae:1f:62:22:3b:f8:b4:36:77:1a:62:3c:
6a:06:10:1c:c6:73:f0:ea:a9:32:c4:da:cf:33:29:95:c2:c2:
f3:6f:de:47:8c:a8:37:00:31:28:23:76:f1:9d:9b:db:73:42:
2b:f3:4a:16:21:78:26:1c:6a:cb:8d:a7:d5:6f:39:a1:78:e6:
77:96:76:68:bf:10:5d:f8:83:27:da:62:2b:2d:19:27:9c:f8:
f6:6c:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:15:39 2024 by rpki-client on console-ams.rpki-client.org