Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/5f9f9d59-0994-3e92-bf86-7a5153178038.roa
File: 5f9f9d59-0994-3e92-bf86-7a5153178038.roa (raw, json)
Hash identifier: U3jZKo5EgKCylBLZSi6whNQ08gxjcIPrLA6DHvgmBYk=
Subject key identifier: 28:8A:7B:57:8F:DE:F5:F9:32:AA:A6:4D:50:33:27:8A:40:5D:85:7E
Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial: 010D0C9F43285847B53AD07E07B4F4ABC50AF040
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/5f9f9d59-0994-3e92-bf86-7a5153178038.roa
Signing time: Wed 30 Oct 2024 01:19:46 +0000
ROA not before: Wed 30 Oct 2024 01:19:46 +0000
ROA not after: Tue 28 Jan 2025 02:19:46 +0000
asID: 32595
IP address blocks: 23.172.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 16:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:b5:3a:d0:7e:07:b4:f4:ab:c5:0a:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Validity
Not Before: Oct 30 01:19:46 2024 GMT
Not After : Jan 28 02:19:46 2025 GMT
Subject: CN=9faf01d1-3436-4a7a-b1cc-a1efef2d7600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c1:d5:33:40:92:21:aa:54:dd:ef:3f:05:bb:
10:bb:19:c1:66:56:c1:a4:95:d2:0c:63:20:b4:44:
24:01:ca:1d:73:a3:4d:13:ae:6d:48:fd:37:20:37:
1a:1f:41:83:62:8f:48:7a:26:80:d8:f7:c7:9a:81:
05:2b:47:53:f2:8c:0c:19:18:30:01:38:04:6a:60:
b3:c1:ad:14:58:10:48:33:42:c6:a8:9b:31:6d:ca:
d3:a4:0a:b9:85:71:18:c6:e4:f5:2e:5a:b5:51:b3:
c0:84:57:da:47:54:ee:75:0c:2b:e8:10:47:24:19:
79:e9:63:a6:83:ed:64:73:9f:94:23:f1:88:59:ab:
1c:68:d5:c9:8c:61:e6:fa:5b:ad:85:0c:d8:bc:9e:
26:61:92:16:eb:b7:d2:f7:da:ec:70:3e:fc:f3:91:
a6:61:29:2e:f2:66:c2:be:3e:b4:11:2e:ce:ac:3b:
a9:27:99:1b:f9:c1:88:fb:57:06:86:f0:aa:da:54:
29:77:fa:d5:86:da:02:95:be:f7:a3:5e:e3:5c:4c:
31:4c:1c:47:24:ba:44:14:ab:ff:c9:7d:35:f2:9c:
40:7d:b8:df:03:7e:10:85:30:af:28:f2:ba:27:0a:
5a:35:15:80:89:d2:3a:6e:e8:a9:5b:a7:e4:f8:a8:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:7B:57:8F:DE:F5:F9:32:AA:A6:4D:50:33:27:8A:40:5D:85:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/5f9f9d59-0994-3e92-bf86-7a5153178038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
X509v3 Authority Key Identifier:
keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:cf:a0:13:36:b6:72:d5:32:16:52:7f:da:de:24:43:7c:ec:
86:f9:69:c1:22:7a:1d:6a:18:68:4a:f4:73:f0:04:fb:43:1a:
18:12:03:52:2a:1b:2c:ab:dc:d4:a4:f8:4a:ef:11:7c:f7:c0:
5c:48:f8:fa:5e:05:03:f0:6b:d0:da:1d:0c:79:11:db:84:79:
8f:ed:bc:ae:9b:a9:b3:d6:54:2e:b2:0d:a5:0f:e7:ce:b5:ea:
29:6e:ea:67:5b:44:66:c2:51:48:65:86:39:b6:1d:89:9e:cd:
8a:77:2b:75:a8:a2:e8:fe:1e:e4:fb:b8:7d:da:21:d4:03:8e:
56:ea:8a:62:0e:1b:60:41:09:1c:31:86:02:07:a9:46:b0:dd:
c8:28:2c:5a:95:f8:da:30:54:94:94:9a:cd:3c:c8:18:f0:8d:
07:6b:0f:42:f8:81:53:2b:7e:c0:34:60:24:0c:6c:6c:c1:cc:
64:5b:92:7a:d6:21:0b:13:cd:77:e7:2b:2b:b1:45:75:37:11:
ef:88:c8:98:8b:dd:8d:77:cf:91:a9:56:3c:86:c8:3a:8e:9d:
4f:61:73:0b:11:14:b9:10:dc:52:3f:e4:94:7d:b9:09:f0:87:
be:f5:2c:8b:28:76:c7:ed:53:bb:02:f4:81:1b:50:96:fe:67:
59:6f:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 18:49:43 2024 by rpki-client on console-fra.rpki-client.org