Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faf24bfc-1da6-3b6a-83a5-a595415abe92.roa
File: faf24bfc-1da6-3b6a-83a5-a595415abe92.roa (raw, json)
Hash identifier: SWWWO/oHroo4i/YLaenOQxGTM/dhSnjtkB649f1Gr8k=
Subject key identifier: B3:08:4B:00:CC:45:D7:EE:07:06:9E:8C:A8:E1:A3:EE:62:16:98:49
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F43285846FBBA9C71D9F3D0507A6D3480
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faf24bfc-1da6-3b6a-83a5-a595415abe92.roa
Signing time: Sat 24 Aug 2024 14:36:54 +0000
ROA not before: Sat 24 Aug 2024 14:36:54 +0000
ROA not after: Fri 22 Nov 2024 15:36:54 +0000
asID: 47585
IP address blocks: 65.87.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 00:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:fb:ba:9c:71:d9:f3:d0:50:7a:6d:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Aug 24 14:36:54 2024 GMT
Not After : Nov 22 15:36:54 2024 GMT
Subject: CN=69014ab5-2f71-484c-a2d9-b0f948da6015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:b8:da:57:da:a2:d4:20:a0:47:62:3f:fe:
dc:9e:60:97:3d:43:5d:61:65:96:a1:d7:76:78:04:
be:b1:0c:46:9a:9a:75:57:19:3a:e6:67:4e:16:36:
ea:07:1c:34:88:e3:44:62:8a:ac:20:03:64:73:c9:
69:d4:79:c6:01:0c:a2:ad:f3:ee:1d:1f:d6:b1:38:
35:2a:06:7b:44:9a:7b:72:84:c0:30:6a:a1:d0:6c:
94:dd:14:8f:63:15:91:e4:89:20:14:34:b2:64:7d:
24:7d:39:39:15:aa:ec:f0:06:f1:da:af:ca:e7:ce:
59:a7:8d:33:01:7a:c2:d9:f5:41:d9:1e:20:f7:6a:
b4:6f:f9:bb:45:45:25:f7:05:5f:94:8c:ab:87:1c:
91:03:9a:2b:8e:58:f9:69:ba:37:ff:94:32:b2:62:
b6:37:cc:cc:a7:1b:8a:95:8e:04:32:b7:5b:8e:99:
b3:29:ff:1e:04:fb:e6:97:92:3b:75:b6:7f:5a:87:
32:a3:9e:f7:45:f5:ab:f9:31:4a:e7:fa:c5:be:df:
a5:4d:ed:4a:5f:17:3b:62:95:f4:b8:0c:ab:2d:d4:
29:e7:4a:3c:00:c2:e8:45:cb:60:f5:31:1b:36:74:
ff:44:77:9e:0c:d8:d3:33:10:38:9d:d4:6c:58:54:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:08:4B:00:CC:45:D7:EE:07:06:9E:8C:A8:E1:A3:EE:62:16:98:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faf24bfc-1da6-3b6a-83a5-a595415abe92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:87:08:5f:4e:cc:80:63:5e:73:0a:22:d0:df:03:a5:c1:b8:
f3:e5:d0:45:53:f2:41:7c:76:fc:a9:cb:cf:48:7a:6a:4d:53:
ab:16:46:02:d5:a2:02:42:a6:e9:bd:a9:09:55:a3:3c:91:d7:
1a:74:13:d5:f9:8f:6a:d8:7a:36:3b:49:9d:90:39:3e:4d:81:
46:92:54:4e:5d:93:c7:64:42:75:1d:e8:aa:de:6b:77:49:c1:
b4:e6:2c:4e:88:73:83:55:25:c1:13:fd:b4:9b:69:7c:d3:88:
c0:e5:cd:f3:92:16:9e:fc:64:72:d2:6e:d5:e5:46:75:fc:92:
ca:ce:90:dc:7f:06:99:c4:c6:82:99:dc:b0:2f:39:ce:e3:da:
4f:84:b6:1c:22:24:a5:7f:7f:a2:f6:35:c4:82:9a:4c:0a:49:
e3:ab:d6:ca:ee:51:7d:5e:20:d3:6e:02:1d:28:e2:6d:9d:4c:
ef:87:bc:34:b6:b0:8f:73:a4:cb:6f:91:d3:37:0d:42:1a:e7:
cb:57:18:16:8b:bc:7c:70:b5:1c:da:25:cb:21:9c:aa:67:e8:
cc:ef:27:a3:9f:19:cc:34:71:fc:82:c8:b8:d1:55:b0:5a:5f:
c5:00:ad:cd:24:78:b4:1f:08:3f:e4:15:97:d8:9d:28:92:4e:
ab:18:02:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 02:16:21 2024 by rpki-client on console-fra.rpki-client.org