Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/c2dbda12-5e37-31f7-8ed4-cae95bf8d779.roa
File: c2dbda12-5e37-31f7-8ed4-cae95bf8d779.roa (raw, json)
Hash identifier: E2Ewcbg87I9GLqIOWu93j0GOMrmf0rUo8Hl7Qkg2GEQ=
Subject key identifier: 23:3F:3D:C9:28:FC:3D:29:8A:29:B3:36:F1:B2:01:C7:2B:89:DE:65
Certificate issuer: /CN=94738821-1f1e-430f-b49e-05e511cc80b4
Certificate serial: 010D0C9F43285845855D6D7C7627DF3F4C9F4080
Authority key identifier: 80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/c2dbda12-5e37-31f7-8ed4-cae95bf8d779.roa
Signing time: Fri 12 Apr 2024 12:16:50 +0000
ROA not before: Fri 12 Apr 2024 12:16:50 +0000
ROA not after: Thu 11 Jul 2024 12:16:50 +0000
asID: 209242
IP address blocks: 209.222.114.0/24 maxlen: 24
209.222.115.0/24 maxlen: 24
209.222.114.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 12 Apr 2024 19:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:85:5d:6d:7c:76:27:df:3f:4c:9f:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94738821-1f1e-430f-b49e-05e511cc80b4
Validity
Not Before: Apr 12 12:16:50 2024 GMT
Not After : Jul 11 12:16:50 2024 GMT
Subject: CN=c38a7d1d-0149-462d-95bd-723dcbe5f71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:e9:31:65:b6:89:e3:1d:90:2b:e1:b4:94:
50:3e:39:50:75:27:b9:60:21:ce:82:d1:c1:f4:14:
a4:0b:49:5f:45:6e:dc:8e:67:91:16:6a:dd:1f:72:
61:30:70:9f:19:cd:b1:88:ba:7f:53:18:cc:74:b5:
be:a2:98:36:68:3a:e8:b2:03:18:76:8d:cb:29:86:
5c:ae:7f:4d:25:b5:bd:a9:6d:b2:fb:04:a7:1d:e7:
20:f5:d0:60:d1:db:e9:34:c4:fe:29:85:07:bb:ee:
01:ce:43:c5:72:0a:ee:da:28:19:4c:f1:19:b4:04:
61:62:9c:71:e9:7b:d1:c5:34:ff:fe:d1:d2:1e:8c:
fb:11:43:53:7b:45:91:5d:3e:18:90:13:4c:98:1a:
0b:46:18:db:9f:d4:53:bb:e1:77:85:26:b9:d6:b9:
65:02:6d:8e:0c:94:3f:e7:91:cd:8f:59:f6:15:41:
91:84:e5:e5:41:76:92:aa:80:ee:e4:5f:f0:c6:5d:
27:a8:71:e0:35:3f:ea:b9:9c:b1:22:59:15:3d:d8:
62:a3:d4:07:d3:f4:5d:6e:32:8a:11:d6:a2:7d:d5:
4c:64:99:b7:d6:09:f7:f8:a8:27:00:e2:81:b9:5d:
78:4f:92:95:fb:e7:8c:2b:b5:49:da:d3:fd:3f:39:
e1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:3D:C9:28:FC:3D:29:8A:29:B3:36:F1:B2:01:C7:2B:89:DE:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/c2dbda12-5e37-31f7-8ed4-cae95bf8d779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.crl
X509v3 Authority Key Identifier:
keyid:80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.222.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:c0:c2:10:a0:76:11:e3:f6:1d:d3:d5:0c:35:26:75:17:9b:
eb:7c:cb:2b:ff:9c:2e:8c:fd:67:70:80:28:80:41:76:67:a2:
27:fc:d1:d8:11:73:89:d2:ee:98:29:4d:52:14:ff:a6:32:24:
38:dd:61:df:fb:d0:f5:51:cb:c9:cc:c5:17:3b:fc:b5:e0:81:
65:86:bc:da:f9:ce:60:0f:99:9a:94:a2:9e:35:a2:42:c0:6f:
4d:c3:b1:3c:a9:69:27:d1:3c:a5:ae:82:28:3f:a0:40:03:e6:
a5:63:9b:bc:c0:e9:a0:ed:72:e1:37:c6:51:d0:d5:a7:2a:f7:
06:c9:46:11:af:14:48:c9:e9:de:df:c3:16:f6:c1:1a:18:3f:
39:5b:17:fd:00:c2:f0:51:f6:36:d6:8b:61:9f:97:8d:67:9b:
77:a3:6e:ea:c5:f2:5d:32:45:07:2d:e9:26:99:4f:26:52:07:
b1:6f:3e:9d:a7:0d:0b:87:b7:20:4c:cb:ca:53:74:c0:ab:53:
c1:a6:83:6a:67:4a:db:78:e3:71:da:23:8b:a7:2c:a2:0b:9e:
90:0c:c5:14:e2:68:ee:12:21:80:28:40:f6:8b:04:9a:cc:1c:
ad:6e:6c:fe:79:07:37:59:c9:d8:7a:d8:13:a7:d2:eb:9f:dc:
f2:5f:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:05 2024 by rpki-client on console-ams.rpki-client.org