Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/7fd1462b-db7e-3cf2-be7a-27bfe0c223f5.roa
File: 7fd1462b-db7e-3cf2-be7a-27bfe0c223f5.roa (raw, json)
Hash identifier: 4OIHdgYxqrnYeWJSgtE9/4NEG8+ksbmITfejmxb0Tik=
Subject key identifier: 26:BC:0B:6D:A0:C0:6C:CD:5D:6A:FB:63:11:52:B8:EA:71:55:A7:FC
Certificate issuer: /CN=0ef8f014-b9f1-4fd0-90e9-86951c39e46c
Certificate serial: 010D0C9F43285845685EB21EF501643AB59F4640
Authority key identifier: 12:F0:C5:3F:85:B4:D0:F2:09:75:61:81:1C:7A:26:AE:44:75:62:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/7fd1462b-db7e-3cf2-be7a-27bfe0c223f5.roa
Signing time: Tue 02 Apr 2024 03:00:57 +0000
ROA not before: Tue 02 Apr 2024 03:00:57 +0000
ROA not after: Mon 01 Jul 2024 03:00:57 +0000
asID: 54454
IP address blocks: 192.253.208.0/22 maxlen: 24
192.253.216.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 14:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:68:5e:b2:1e:f5:01:64:3a:b5:9f:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef8f014-b9f1-4fd0-90e9-86951c39e46c
Validity
Not Before: Apr 2 03:00:57 2024 GMT
Not After : Jul 1 03:00:57 2024 GMT
Subject: CN=939fde18-1f4f-439c-b85e-a77c56a58cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:3c:bf:16:24:ac:d2:98:ab:60:ef:6e:9c:
ab:0d:f3:ec:b5:1c:20:a8:0d:d1:18:1d:7e:a6:04:
10:43:fd:39:d7:a0:b8:0f:26:e8:97:6c:0a:3c:b1:
0e:98:41:d1:b8:e6:b4:0d:fb:27:20:60:86:04:56:
c6:9b:bc:11:7a:22:a9:1f:3e:e2:df:20:18:51:5e:
a2:f5:4d:4d:1b:6f:ab:4c:e2:da:59:86:b1:3b:c6:
16:00:ce:ad:87:17:aa:5c:bf:ca:18:65:d8:c9:fc:
56:6c:b7:f1:1e:d7:84:b4:ec:d9:49:b5:8b:00:32:
e4:40:d3:05:25:b2:b3:a6:b1:44:39:7b:e7:70:9e:
88:05:2f:5f:7c:39:06:d5:3d:0b:50:03:d3:d7:b7:
6a:92:5f:0d:da:56:3b:bb:30:c0:af:0e:4b:eb:11:
d0:6e:19:21:5c:64:37:eb:7a:96:37:88:43:3e:55:
3d:0c:d6:bc:8b:16:62:88:a6:2c:7f:5c:f0:c7:a2:
76:9c:0f:82:a5:f4:6f:46:90:7c:0c:bf:86:6b:e5:
d3:b1:94:44:c9:d7:91:da:54:ad:68:1e:d1:52:6f:
bb:0d:48:bd:12:66:b7:ad:84:36:26:e6:0e:be:36:
7d:31:d4:e8:f3:5c:ad:3e:33:69:30:71:6d:18:70:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BC:0B:6D:A0:C0:6C:CD:5D:6A:FB:63:11:52:B8:EA:71:55:A7:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/7fd1462b-db7e-3cf2-be7a-27bfe0c223f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.crl
X509v3 Authority Key Identifier:
keyid:12:F0:C5:3F:85:B4:D0:F2:09:75:61:81:1C:7A:26:AE:44:75:62:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.208.0/22
192.253.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:47:82:95:24:f6:2c:bd:24:cf:eb:94:15:18:f1:72:3b:56:
60:3e:1d:61:96:38:a0:ab:58:c1:57:35:9d:20:1f:04:c5:79:
34:94:91:2e:f1:94:59:22:2f:17:44:a0:53:58:b9:f0:84:67:
a6:b5:58:d2:20:f8:6e:5e:95:e5:a7:47:e3:be:b3:4b:2b:78:
5f:f1:f2:05:be:82:44:41:05:e2:68:a2:25:5b:60:52:74:a6:
76:5f:e9:57:98:99:c3:57:20:05:31:ac:3a:e1:bc:63:33:de:
81:f7:38:8c:e2:7d:59:d1:32:68:d8:31:bc:ee:b3:69:9b:5f:
d1:46:ec:e5:d8:e3:31:97:12:99:33:56:13:17:3c:a1:ac:79:
1a:49:df:36:c6:f0:10:b7:fa:aa:af:1d:bd:ea:ee:7d:63:d5:
04:1b:5e:fa:f5:14:98:65:68:85:c7:12:46:ee:d6:30:f6:5c:
de:5d:d3:ca:59:85:92:fa:c7:4c:c5:c2:7c:bc:69:e2:12:f8:
6a:3f:5d:8c:9b:90:3e:e2:29:30:29:a9:2d:4c:2c:a7:36:51:
80:ea:fd:b9:c7:03:ee:70:16:79:15:40:6a:fe:59:93:f8:1a:
fc:8f:07:3a:12:4f:e3:b7:e0:5e:1e:22:07:6a:ba:af:f8:65:
7e:9b:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 19:36:04 2024 by rpki-client on console-ams.rpki-client.org