Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/1be1ef3a-b968-3900-b316-99bcb16070f7.roa
File: 1be1ef3a-b968-3900-b316-99bcb16070f7.roa (raw, json)
Hash identifier: 2zFOn911GZ825hmjV7EeYncchQm9geUpNDF31wXIFYA=
Subject key identifier: 7D:FA:8A:35:D7:77:52:02:CB:DC:5E:22:BC:FC:E8:65:F4:F3:7D:B3
Certificate issuer: /CN=59dd5c15-2985-4e5b-8090-c191469aad18
Certificate serial: 010D0C9F432858456C895E85681D04CCE906BF80
Authority key identifier: 6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/1be1ef3a-b968-3900-b316-99bcb16070f7.roa
Signing time: Wed 03 Apr 2024 14:50:09 +0000
ROA not before: Wed 03 Apr 2024 14:50:09 +0000
ROA not after: Tue 02 Jul 2024 14:50:09 +0000
asID: 62164
IP address blocks: 72.18.64.0/24 maxlen: 24
72.18.65.0/24 maxlen: 24
72.18.66.0/24 maxlen: 24
72.18.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 21:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:6c:89:5e:85:68:1d:04:cc:e9:06:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd5c15-2985-4e5b-8090-c191469aad18
Validity
Not Before: Apr 3 14:50:09 2024 GMT
Not After : Jul 2 14:50:09 2024 GMT
Subject: CN=69bfa20c-c590-4de5-a0f0-e0330759f48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:03:11:96:93:c9:ac:36:e6:d0:56:2f:d1:12:
63:20:ac:18:17:c5:97:87:07:5f:f2:b8:84:fb:7f:
e0:8d:3f:a2:51:c2:6c:c7:29:ef:a7:ba:4b:13:78:
f4:01:51:a4:c6:d4:d7:1b:13:6c:a6:3d:1e:b5:01:
91:84:aa:f1:9f:ce:e2:33:5a:5b:7c:69:4a:ea:8e:
48:1a:c7:66:62:17:c9:69:b7:42:82:3a:25:14:6d:
c1:33:9c:95:99:83:a9:cf:69:3c:6f:fe:fc:dc:35:
55:9b:58:90:e5:3f:17:31:d5:d0:0b:cc:c9:fa:33:
30:1a:e8:5f:0e:25:a3:c0:d1:ad:0d:d3:3f:f5:95:
2b:b0:89:b8:87:f6:66:63:e6:51:fd:0f:a1:6c:5b:
1e:3d:e3:ce:44:cc:ee:5f:57:06:39:91:a0:7a:e3:
fb:d8:ca:66:71:68:a3:9c:2d:87:11:79:bf:f8:7d:
6f:c9:5f:ab:16:ef:5b:b5:8c:70:6b:29:58:bb:c8:
05:b7:52:86:b3:cb:f7:3c:8a:61:0f:48:39:7d:43:
dc:13:c4:43:c4:d3:67:52:f9:27:3b:29:54:e7:d6:
8c:52:20:4e:1d:28:94:0d:5d:fc:80:2f:2f:7d:8d:
2d:14:00:e5:76:0c:ff:b1:38:db:37:71:26:79:f7:
95:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FA:8A:35:D7:77:52:02:CB:DC:5E:22:BC:FC:E8:65:F4:F3:7D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/1be1ef3a-b968-3900-b316-99bcb16070f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18/59dd5c15-2985-4e5b-8090-c191469aad18.crl
X509v3 Authority Key Identifier:
keyid:6F:45:9A:85:B8:5C:F4:8A:7D:AF:A0:7C:29:0F:FC:20:C0:7D:86:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/59dd5c15-2985-4e5b-8090-c191469aad18.cer
sbgp-ipAddrBlock: critical
IPv4:
72.18.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ee:48:71:f2:5c:34:09:05:d2:71:f7:68:da:7c:3a:10:3d:
d1:70:f3:e2:15:04:37:93:4e:f3:d0:da:46:37:01:2d:b5:89:
00:ee:3a:88:42:c1:65:d4:1a:1f:68:e8:09:28:79:6e:6a:8e:
0c:24:c5:f0:a4:a5:ba:a2:87:f1:45:6a:6e:5f:f6:a0:d3:74:
b2:db:86:0f:56:0a:1c:19:28:76:ee:59:c0:46:95:d1:39:45:
3c:b7:a9:63:a1:f5:01:6d:5f:03:8d:fc:c4:b4:7c:e1:54:00:
fb:9c:52:bd:1d:7e:b9:c0:d6:09:83:7e:63:74:83:a1:f7:d7:
16:34:c3:98:d8:e8:23:ad:08:5a:f6:b8:2d:08:de:a6:51:ed:
58:af:dc:b7:71:6f:50:9a:61:f7:4d:e8:36:d7:e3:fb:15:85:
c3:b9:e9:b7:79:83:e8:82:4f:aa:12:79:6c:04:36:20:96:97:
5c:41:ce:b6:1b:c9:09:3c:dd:94:0c:9d:b2:3d:24:99:4c:d7:
90:b8:d0:83:8d:93:1d:c8:a1:c5:6c:a2:1f:df:49:b3:16:33:
bd:36:37:f1:9c:b5:2d:b6:6e:db:db:5b:e4:51:43:23:ae:36:
80:2b:20:6e:d5:2f:ea:fb:28:53:2b:d7:ed:8f:d6:9c:53:03:
28:c5:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:04 2024 by rpki-client on console-ams.rpki-client.org