Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/64d140e8-9d2c-3853-8e1d-5be7553ef920.roa
File: 64d140e8-9d2c-3853-8e1d-5be7553ef920.roa (raw, json)
Hash identifier: l2XqE9Zs8i6WVS59lXjmII/coKRE1pQfnd2vczCaqN0=
Subject key identifier: F2:D8:FD:15:97:70:2C:0A:A0:DE:D3:4C:11:A9:C5:B3:B3:23:02:03
Certificate issuer: /CN=91e8565b-cd85-4439-818b-0c669c1e609a
Certificate serial: 010D0C9F432858454CB3F53AB77FFB1537283B00
Authority key identifier: 3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/64d140e8-9d2c-3853-8e1d-5be7553ef920.roa
Signing time: Sat 23 Mar 2024 05:10:06 +0000
ROA not before: Sat 23 Mar 2024 05:10:06 +0000
ROA not after: Fri 21 Jun 2024 05:10:06 +0000
asID: 400745
IP address blocks: 52.129.12.0/23 maxlen: 23
52.129.12.0/24 maxlen: 24
52.129.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 19:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:4c:b3:f5:3a:b7:7f:fb:15:37:28:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e8565b-cd85-4439-818b-0c669c1e609a
Validity
Not Before: Mar 23 05:10:06 2024 GMT
Not After : Jun 21 05:10:06 2024 GMT
Subject: CN=ef0604be-417e-408e-a94c-57b32f618ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:04:07:3f:33:42:b7:c9:a9:6f:2c:cf:d7:
0c:49:a2:6a:1a:46:bc:b4:01:95:56:39:f6:30:62:
f8:a3:9f:6b:cf:bc:6a:ff:16:65:45:7f:98:ba:18:
8f:78:fd:e0:85:a8:83:90:6c:52:a3:f6:6f:a4:53:
f5:1b:ad:27:bb:2b:66:73:b6:12:6c:96:97:c8:b5:
f9:43:29:63:ed:b5:00:f4:bb:1a:3f:ce:a4:44:23:
60:c9:cd:07:7f:f6:19:31:fc:fe:b0:16:bf:82:f8:
fd:25:5a:93:6a:0a:b9:91:69:30:60:ad:dd:93:e6:
73:aa:80:e1:fa:58:e0:f9:f6:c1:3a:a3:02:70:f3:
63:ad:e5:32:63:88:c6:40:a6:dd:1b:10:86:5d:12:
f3:04:34:41:f1:96:28:9b:bd:5f:dc:20:f1:73:d3:
e6:50:d7:2a:61:cb:fb:09:50:4a:82:d1:d4:08:58:
7a:94:69:8f:d2:85:4f:d2:e3:5a:bf:82:c2:8d:a3:
1c:2a:94:21:11:e8:77:e4:1a:dc:31:b8:1b:e9:f7:
af:3f:32:88:87:8f:15:b5:40:6f:8f:98:05:2d:5c:
c3:29:81:f4:c8:e8:f3:e6:6f:a5:8e:10:d4:97:43:
b6:a9:b3:40:74:31:45:81:ac:db:04:22:e9:94:99:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:FD:15:97:70:2C:0A:A0:DE:D3:4C:11:A9:C5:B3:B3:23:02:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/64d140e8-9d2c-3853-8e1d-5be7553ef920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a/91e8565b-cd85-4439-818b-0c669c1e609a.crl
X509v3 Authority Key Identifier:
keyid:3A:C3:89:20:04:27:04:1A:BD:A1:42:37:C3:1D:D3:7A:76:DE:DA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/91e8565b-cd85-4439-818b-0c669c1e609a.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:37:e5:65:e9:59:0f:cd:49:ac:3e:95:04:0b:bd:1e:6c:cf:
c4:cd:96:cc:6b:31:85:43:ed:f5:ab:ed:13:da:70:54:b6:c6:
5f:cb:36:f1:0a:ac:17:7e:a6:40:bb:ed:69:75:21:54:90:8b:
81:6c:fe:e4:40:63:fa:5f:c2:4d:2f:7b:cf:81:87:16:5d:45:
6a:ca:db:b5:4d:38:07:a8:7e:a7:61:2d:78:bb:d7:d9:ea:30:
75:53:a5:5c:d4:41:f0:84:00:ac:a5:d8:6a:8e:4e:15:17:d2:
f6:9d:cf:bf:ae:2f:20:ae:0f:1e:2a:28:d2:fe:45:7f:bb:d1:
5b:ff:f0:f6:70:6c:84:67:70:0a:d3:a7:98:ac:47:28:f6:ba:
ee:fd:90:58:51:70:fa:71:a5:c8:8d:75:45:81:d5:ca:96:07:
9d:0c:9c:65:63:e8:44:61:f9:0a:45:53:45:79:16:e9:9b:72:
3c:de:87:09:80:08:49:9c:c9:ec:67:0a:0f:5c:bb:45:17:f3:
dd:af:fd:51:90:34:31:9d:26:d0:53:4b:67:07:63:18:04:2d:
cf:50:fe:66:34:2d:cf:4d:87:1b:f9:13:da:f2:6c:c7:5f:d5:
3d:fc:15:fa:63:90:80:6c:26:cf:2a:9a:72:67:3f:b0:01:5e:
70:36:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:09 2024 by rpki-client on console-fra.rpki-client.org