Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/30b3c551-29e6-3f53-a81e-273f5ff6e58f.roa
File: 30b3c551-29e6-3f53-a81e-273f5ff6e58f.roa (raw, json)
Hash identifier: IXvftjiVbRlfXX1dq1Chse5Qn60W4CDzc8yiEhV5iys=
Subject key identifier: B0:F4:75:CA:06:68:FE:75:1A:3E:51:2C:69:EB:98:D3:AD:47:26:53
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F4328584582A89173141352DEA9C89CA8
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/30b3c551-29e6-3f53-a81e-273f5ff6e58f.roa
Signing time: Thu 11 Apr 2024 13:00:36 +0000
ROA not before: Thu 11 Apr 2024 13:00:36 +0000
ROA not after: Wed 10 Jul 2024 13:00:36 +0000
asID: 60068
IP address blocks: 147.124.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jun 2024 15:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:82:a8:91:73:14:13:52:de:a9:c8:9c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Apr 11 13:00:36 2024 GMT
Not After : Jul 10 13:00:36 2024 GMT
Subject: CN=ca4ef7ca-b462-4802-9d7d-ac92f5231e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:8f:a5:80:b4:83:ad:16:c9:8c:c6:3d:3e:
e4:14:2d:b9:fe:7b:c5:67:81:db:61:61:9b:97:fb:
9c:2a:56:7a:fc:f3:5d:2e:fa:05:3a:d0:47:c6:73:
8b:ab:af:6d:2c:18:9f:e0:50:31:de:a9:49:6e:53:
3b:9c:eb:49:07:92:bc:69:bb:9d:18:d1:55:34:a9:
01:8f:be:6c:08:75:d4:60:4f:d7:8c:e1:76:03:ae:
16:e4:d4:83:6d:84:6f:4f:84:d2:20:11:bf:6c:36:
4a:7f:bc:9e:7f:91:1c:05:cc:a8:b5:bc:2f:db:1e:
2b:d6:ea:e0:d2:1e:19:68:b8:1c:6b:a1:fe:7e:a8:
a6:13:bd:4b:34:be:5d:b8:70:8c:18:91:4d:5f:70:
16:d2:3f:5d:58:61:ed:c4:5d:55:a8:2d:02:71:97:
17:0f:41:c8:ee:f8:7d:f5:50:17:04:f5:ee:46:92:
59:70:ef:9e:5f:b1:47:d1:37:9e:38:23:23:a7:af:
bc:43:84:5b:95:ff:cb:36:5b:14:5d:08:0e:d5:7e:
69:e8:bf:57:ad:dd:59:30:66:37:16:90:aa:81:d9:
c4:ff:5d:a9:65:74:58:74:d8:a7:36:53:72:ff:c2:
01:46:90:f3:27:3c:33:e2:fc:6c:0c:24:43:64:48:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F4:75:CA:06:68:FE:75:1A:3E:51:2C:69:EB:98:D3:AD:47:26:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/30b3c551-29e6-3f53-a81e-273f5ff6e58f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:84:db:30:35:fe:e0:68:f2:31:20:fe:af:ad:a1:c3:97:30:
c8:f0:a8:66:1e:4d:55:66:8c:db:eb:be:d0:21:5c:ef:c1:81:
e6:fc:5a:4f:83:f4:b9:d4:03:ed:1a:cd:37:97:2a:d6:67:ff:
01:a2:eb:04:b1:5f:c0:e5:9c:0d:3d:24:80:49:91:8e:c2:41:
ed:d2:df:6d:2b:43:76:1b:b4:83:80:6c:ce:86:cb:3f:30:22:
ee:39:59:f6:36:53:19:37:fd:bb:67:a1:ca:f9:fe:58:df:59:
06:7c:3b:5b:4a:e9:9b:4a:b7:50:df:04:c0:3b:41:eb:b9:c3:
b9:10:e2:a2:1e:4a:90:5e:11:c6:4f:73:f1:62:22:71:02:c3:
65:f8:4e:19:58:58:bb:20:a4:b9:ad:09:92:30:dc:cf:67:f2:
08:45:a6:65:a6:8d:6b:f1:cf:bc:11:cd:57:ce:19:63:44:13:
fa:79:fa:12:f1:b1:57:13:a2:5e:24:75:2f:cf:d4:1e:ed:84:
99:58:c3:27:e4:3b:3e:a0:ba:d8:c9:b6:b8:6d:9b:ce:0b:74:
66:86:1d:fb:d0:df:7f:ba:bb:4f:85:af:d6:d8:cc:81:b2:03:
3d:e0:21:fa:f7:c0:fe:ea:3a:ee:ab:63:f5:2e:2a:be:7f:c6:
d7:fc:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 19:17:44 2024 by rpki-client on console-ams.rpki-client.org