Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3e4c8d5f-275c-38cd-8201-e93b83842be2.roa
File: 3e4c8d5f-275c-38cd-8201-e93b83842be2.roa (raw, json)
Hash identifier: 7I9kabdCV4yN9hTDACo1tA1wtPYrLXZWycmw2CN9ykE=
Subject key identifier: FF:F8:33:8D:B2:D1:3F:28:43:8F:91:2E:D6:0E:E7:56:A0:27:1B:0F
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F43285846B2F51C1EAD6E8E6A654BF3C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3e4c8d5f-275c-38cd-8201-e93b83842be2.roa
Signing time: Mon 29 Jul 2024 13:00:38 +0000
ROA not before: Mon 29 Jul 2024 13:00:38 +0000
ROA not after: Sun 27 Oct 2024 13:00:38 +0000
asID: 54203
IP address blocks: 108.171.104.0/21 maxlen: 21
173.255.176.0/20 maxlen: 20
216.169.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 13:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b2:f5:1c:1e:ad:6e:8e:6a:65:4b:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jul 29 13:00:38 2024 GMT
Not After : Oct 27 13:00:38 2024 GMT
Subject: CN=94d08a9c-5a51-4b04-a72e-bab8530a60a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:e3:5e:bb:7f:46:38:6c:58:ae:4d:b5:05:
42:09:24:c7:09:7e:29:86:eb:38:8c:41:61:38:54:
5d:ba:08:8b:93:29:dc:6f:e8:9f:9e:a0:17:ba:5b:
d1:d2:83:3a:8a:ae:57:7d:76:85:14:e1:ac:a8:be:
64:9c:e3:dd:16:6c:65:1a:5c:99:1c:51:2c:54:28:
da:63:20:5c:80:2d:34:c8:d4:14:4d:1f:89:1a:51:
c5:0e:42:e1:59:e0:0f:6b:eb:a6:73:93:10:f1:d9:
3c:a7:df:2a:5e:71:d4:9c:c3:08:ea:da:d3:85:1e:
7a:d2:76:4a:7d:1f:03:0b:41:e2:cd:35:48:99:fb:
bc:19:6d:64:18:f7:d7:74:10:85:59:09:31:67:17:
9a:de:82:4c:16:51:db:7e:f1:56:aa:db:6b:7c:55:
d8:d4:1d:00:6c:1c:2c:36:4e:5e:9d:80:5e:1b:4e:
35:53:61:73:b5:e9:71:fb:f8:4b:c6:71:8b:5e:e2:
55:c2:c1:57:40:43:98:51:dd:30:13:bc:15:bf:22:
65:aa:09:9d:23:ed:91:ae:91:e6:55:bc:55:e2:29:
62:a5:e1:3b:da:fe:1f:1f:58:f3:9a:84:a2:1a:03:
8a:23:bf:96:36:6a:ba:05:8d:49:28:62:39:bd:47:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:33:8D:B2:D1:3F:28:43:8F:91:2E:D6:0E:E7:56:A0:27:1B:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3e4c8d5f-275c-38cd-8201-e93b83842be2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
108.171.104.0/21
173.255.176.0/20
216.169.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:00:ab:78:4a:2c:ab:c6:53:75:bb:5b:d0:3f:a1:dc:68:e1:
bf:94:8f:4e:f7:7a:4b:f4:81:56:92:db:fb:be:82:cb:6e:dc:
e2:c6:e5:2c:f4:27:76:01:9c:37:1c:d8:5f:3e:8b:74:5e:84:
36:04:dc:21:8a:9e:34:25:05:01:6c:a1:04:57:fe:d8:71:f5:
a3:f4:d1:2a:8a:7f:a5:5a:91:24:be:e4:8c:93:ef:58:2a:9d:
41:74:68:3d:56:9f:1c:0f:33:6a:9a:b1:6a:aa:ef:05:75:b6:
10:a2:6d:b8:92:2b:47:b2:ed:e2:4e:52:7d:87:b4:25:49:b1:
2f:25:b0:71:ea:a6:06:96:5e:c5:00:97:ed:1b:e7:83:ba:13:
b8:3c:7e:1e:81:5c:c2:62:f3:84:fd:e6:91:ec:27:69:b6:82:
eb:86:ae:09:71:2a:ca:e0:95:33:50:84:42:59:08:45:50:e6:
a6:a2:2c:55:11:91:b6:92:3b:a4:94:43:87:e2:ab:84:5f:03:
03:36:e3:cc:c1:8c:dc:b9:e4:e9:a8:4e:99:b7:69:d6:ba:6f:
ae:4f:4e:03:f6:d9:c2:97:c3:78:cb:a5:ca:05:03:7e:be:10:
2a:4d:1d:76:45:a6:39:3e:0c:9d:6e:65:38:49:02:e4:0c:4a:
26:b0:56:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 16:29:12 2024 by rpki-client on console-fra.rpki-client.org