Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0/489f8038-c3ef-34ef-9928-0176df90de70.roa
File: 489f8038-c3ef-34ef-9928-0176df90de70.roa (raw, json)
Hash identifier: kQS1mn6L8MNmCG/kFbbOTW2hbIdMrlO9O9gDDEJAqwI=
Subject key identifier: B8:EB:2E:39:6A:F4:CC:EC:EE:F3:64:64:3C:4B:B2:8C:93:3D:DA:2F
Certificate issuer: /CN=7333d638-3395-4f20-8d03-4fc71c8c65b0
Certificate serial: 010D0C9F4328584679BA0DBC611D54FEC531B6C0
Authority key identifier: 7B:2B:63:A5:23:D2:5C:0A:2E:B0:E2:BD:24:7D:2F:42:D3:D0:12:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0/489f8038-c3ef-34ef-9928-0176df90de70.roa
Signing time: Tue 09 Jul 2024 01:00:25 +0000
ROA not before: Tue 09 Jul 2024 01:00:25 +0000
ROA not after: Mon 07 Oct 2024 01:00:25 +0000
asID: 7018
IP address blocks: 216.152.112.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 28 Aug 2024 14:16:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:79:ba:0d:bc:61:1d:54:fe:c5:31:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7333d638-3395-4f20-8d03-4fc71c8c65b0
Validity
Not Before: Jul 9 01:00:25 2024 GMT
Not After : Oct 7 01:00:25 2024 GMT
Subject: CN=045d591e-7dd8-403f-b47f-95e84c533728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:16:75:c2:8e:09:14:52:a6:99:89:37:7c:
f0:59:f6:05:1f:e4:ca:36:38:39:4b:fe:fb:78:53:
96:56:d9:9c:91:88:ed:7e:55:91:c8:91:3d:5a:47:
6f:38:00:7c:52:28:b8:9c:7f:10:08:1f:6a:c5:f3:
a9:ea:4f:1c:2e:93:d5:e2:1c:69:56:b2:2c:04:ca:
63:60:85:42:40:f0:c7:0a:ff:19:0e:34:70:01:ec:
a6:1f:76:3a:4c:34:6d:59:55:a2:65:17:93:ec:c4:
5c:48:94:92:69:8e:87:d8:34:da:1b:59:9b:2b:8a:
ce:9f:7f:cc:0f:02:63:4b:d6:5b:64:c1:e6:35:2a:
a6:96:d4:6c:ee:9e:93:9c:2a:78:f9:2f:3e:62:11:
c0:e1:0a:e5:16:b4:52:33:2d:5b:89:39:de:1b:41:
f3:27:0c:e4:41:ca:c0:be:ca:d2:2b:a5:93:61:2f:
ef:20:73:7f:6f:7c:ca:2e:7a:4a:54:5a:6f:9d:1c:
88:fd:3d:02:01:72:7c:83:c8:06:49:1d:b8:6c:29:
37:ff:b6:f8:0e:10:eb:15:97:1e:38:8a:92:94:5b:
4d:9f:34:f7:66:70:51:d5:61:5d:6d:78:79:45:c3:
e1:47:6e:da:ef:18:c9:e0:af:1d:5e:ac:ea:3c:f8:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:2E:39:6A:F4:CC:EC:EE:F3:64:64:3C:4B:B2:8C:93:3D:DA:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0/489f8038-c3ef-34ef-9928-0176df90de70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0/7333d638-3395-4f20-8d03-4fc71c8c65b0.crl
X509v3 Authority Key Identifier:
keyid:7B:2B:63:A5:23:D2:5C:0A:2E:B0:E2:BD:24:7D:2F:42:D3:D0:12:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7333d638-3395-4f20-8d03-4fc71c8c65b0.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:0d:94:df:c9:37:4c:28:66:b9:68:fc:d0:8d:82:c0:aa:f0:
e4:8c:03:7c:c9:16:5f:ed:56:0f:15:6a:7d:bf:cb:7b:8e:6c:
73:1b:5f:d1:ec:25:db:ae:e0:17:e9:12:ab:22:b0:a0:b4:df:
09:be:5a:8e:8f:2b:77:13:d5:1c:aa:e7:95:d6:4d:d4:40:32:
c5:3b:3f:c6:11:1d:ef:e2:a0:c5:ad:91:a8:52:da:dc:1e:45:
7e:f1:9f:1e:dc:9e:fb:f1:cf:43:d4:1c:9c:59:13:e8:c2:74:
e6:9d:6b:ae:ca:28:79:53:7c:6a:72:01:93:da:fe:9e:d6:9b:
57:43:52:df:0e:9f:95:ce:5a:f3:1c:32:8a:2e:bc:0f:2a:58:
05:d9:04:9c:58:41:7e:3c:58:58:4e:a6:d4:a8:c7:df:83:26:
aa:e0:70:3d:03:b5:ad:32:cf:33:38:2c:f2:9b:5e:b8:9d:4b:
f0:ab:98:cc:8b:fc:a2:a3:5c:da:bc:41:97:84:b7:53:a9:01:
f7:a3:90:76:76:f9:ab:c3:2a:78:18:6c:3d:71:73:87:1a:03:
dc:de:0a:06:b7:79:b4:87:57:32:6f:f5:e3:92:bc:b2:24:a3:
e5:f0:fb:db:27:10:f0:dc:2b:a4:0c:88:31:17:d7:f2:54:2a:
4b:67:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 17:52:53 2024 by rpki-client on console-fra.rpki-client.org