Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/4660b849-ccbf-3f80-bd2c-45f19d8b8998.roa
File: 4660b849-ccbf-3f80-bd2c-45f19d8b8998.roa (raw, json)
Hash identifier: MMY/Jgoggs0iZpW4k7U7yKUPCYPxASgrKVS5Bfo6vg4=
Subject key identifier: E5:6C:F5:86:A1:CF:B9:48:B3:E8:5C:F9:D9:91:23:B5:76:1C:0F:95
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F4328584523DAF18F01D8AAA6FDDDD040
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/4660b849-ccbf-3f80-bd2c-45f19d8b8998.roa
Signing time: Fri 08 Mar 2024 14:00:30 +0000
ROA not before: Fri 08 Mar 2024 14:00:30 +0000
ROA not after: Thu 06 Jun 2024 13:00:30 +0000
asID: 14315
IP address blocks: 147.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Apr 2024 16:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:23:da:f1:8f:01:d8:aa:a6:fd:dd:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Mar 8 14:00:30 2024 GMT
Not After : Jun 6 13:00:30 2024 GMT
Subject: CN=be6f5a8e-7791-428f-a28b-e45efa5a473f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:bc:06:01:48:e6:5b:07:a0:ac:f9:e8:4d:
69:c7:33:bc:ac:eb:1a:e3:7c:c3:f6:bb:bb:3a:2e:
4c:9a:7a:c3:a6:37:26:83:1d:ef:a6:29:fd:27:f8:
53:66:32:0a:9f:4c:ec:fd:54:d2:ef:f9:4a:0e:55:
04:d5:1a:93:9d:b1:3a:43:16:d9:bd:cd:37:ad:cc:
61:62:a3:36:ec:19:6f:ed:41:ef:ae:e0:ed:9e:03:
89:33:1c:55:55:91:57:d0:60:ab:f6:0f:a1:11:2c:
83:a7:eb:3f:1e:25:29:ec:54:b1:a4:91:4e:fa:08:
b3:12:19:a4:e4:c1:62:4a:b6:aa:69:db:bc:37:cb:
f6:b4:4d:a6:4b:71:77:d7:6e:d8:5d:a0:d4:89:89:
a2:50:b7:51:ed:0f:92:dd:50:98:3b:ac:6b:2f:da:
cf:f6:f5:c3:6f:37:30:66:9e:1c:3b:dc:e9:f6:ea:
76:15:97:64:d7:19:4d:07:d4:2a:02:39:10:5f:0f:
eb:9e:e6:a7:4f:d3:95:59:bd:c5:e6:c9:8f:5c:c8:
f8:16:d5:41:d6:39:24:a6:3f:46:da:55:05:aa:e6:
ea:a7:67:76:f9:78:56:dc:09:0e:28:2c:e3:cf:bd:
19:18:b6:0e:b6:b3:29:a1:82:8d:63:e4:9c:56:52:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:F5:86:A1:CF:B9:48:B3:E8:5C:F9:D9:91:23:B5:76:1C:0F:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/4660b849-ccbf-3f80-bd2c-45f19d8b8998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:d3:de:f1:0c:22:89:0d:55:b2:2a:e3:90:f1:24:19:f5:05:
13:a0:13:76:2f:ed:3f:98:4c:10:1d:bf:e3:34:b2:09:57:bb:
8e:ce:72:b5:0c:69:a7:a5:43:40:60:2f:85:81:3c:32:d8:fd:
80:fe:b3:11:23:6c:a4:21:19:07:1d:11:64:20:57:18:36:42:
8a:96:b0:4c:85:c5:b6:0d:37:9f:98:e4:a1:4b:91:6a:56:c8:
8c:19:9a:7c:c3:7f:ca:1e:ad:29:23:f4:1b:b4:ca:a1:c4:79:
54:2b:fb:dc:8d:7a:2b:37:eb:4d:fa:3b:9a:4e:8d:45:0e:5c:
47:ab:03:c5:45:6d:57:70:26:d4:a4:a8:2c:85:1f:69:ec:ac:
56:96:e3:04:bb:6d:5a:6e:af:54:5b:b7:92:66:49:c8:3c:02:
d8:e4:7c:23:16:c3:ff:d3:9c:c7:15:af:1f:d2:bf:57:df:f8:
6c:4e:54:83:80:fd:31:6d:c0:f3:ed:ce:a8:a1:6e:62:39:c2:
9d:41:31:a6:4d:cd:fa:f9:f0:a0:25:c9:f6:4d:eb:e4:f3:dd:
08:13:2e:5b:18:33:ec:73:82:dd:fd:fd:9b:55:f6:7c:74:26:
86:e2:1c:fe:41:08:fe:8d:56:64:ba:77:22:7e:bc:cb:55:3d:
95:b7:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 18:00:34 2024 by rpki-client on console-fra.rpki-client.org