Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/891c52b5-86fc-3a48-96e6-cbfd41e14006.roa
File: 891c52b5-86fc-3a48-96e6-cbfd41e14006.roa (raw, json)
Hash identifier: 2DttrIOX43VxISvotabQ9ZrY9eqJdbMzUrjmj16//H0=
Subject key identifier: 7C:72:1C:CA:7E:BC:09:5D:DE:A4:0B:A1:F5:D2:EC:49:E2:13:F5:2D
Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Certificate serial: 010D0C9F4328583D1B85132D8FE2514B2B705CE0
Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/891c52b5-86fc-3a48-96e6-cbfd41e14006.roa
Signing time: Tue 01 Mar 2022 05:00:00 +0000
ROA not before: Tue 01 Mar 2022 05:00:00 +0000
ROA not after: Mon 01 Mar 2032 05:00:00 +0000
asID: 6939
IP address blocks: 67.206.182.0/24 maxlen: 24
198.135.178.0/24 maxlen: 24
2606:c40::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Mar 2022 02:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1b:85:13:2d:8f:e2:51:4b:2b:70:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Validity
Not Before: Mar 1 05:00:00 2022 GMT
Not After : Mar 1 05:00:00 2032 GMT
Subject: CN=77225739-f45f-48f6-9560-1ba9a296d5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:18:54:4f:77:0c:77:57:3e:6c:a9:dc:75:
2f:bb:13:a3:94:b6:9c:c1:8f:a9:8e:40:21:09:02:
60:b6:4d:2c:26:03:a2:c5:db:ea:97:14:d7:da:ca:
9f:f7:11:14:b5:6c:30:74:a5:aa:f4:77:c2:6a:00:
8f:5e:38:ba:09:5f:4a:a6:e6:c1:40:a4:e1:a3:95:
89:f9:34:64:d4:d8:85:0c:80:94:ed:df:50:a6:c7:
46:45:7e:fe:99:a5:af:c3:d0:ed:5c:ea:58:13:3d:
53:0f:18:16:49:48:58:95:48:f3:08:a8:d4:72:e7:
cf:bd:21:b7:5c:4e:31:1e:99:56:4d:2e:42:b9:ea:
71:f8:34:be:cc:fd:ef:1e:ae:db:fd:ec:ce:49:89:
29:f2:f1:2a:17:c3:18:89:1d:e8:f4:66:2a:b9:da:
81:02:e6:d2:4a:13:b4:b9:5f:b0:e6:9a:38:39:7b:
fc:ea:4a:7e:4d:98:40:2f:a0:63:b3:46:6b:5b:52:
b5:4f:d4:0d:a5:83:9a:c6:2e:e2:8f:c0:95:ae:2f:
69:7e:0a:30:6c:ad:e5:c3:57:4b:76:99:0a:cb:fe:
8e:ad:b3:f1:52:41:b2:38:b7:a4:d6:ce:44:f3:48:
3d:e0:b2:1d:27:c8:0f:a6:a5:18:ec:8c:4c:4f:3b:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:1C:CA:7E:BC:09:5D:DE:A4:0B:A1:F5:D2:EC:49:E2:13:F5:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/891c52b5-86fc-3a48-96e6-cbfd41e14006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl
X509v3 Authority Key Identifier:
keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
sbgp-ipAddrBlock: critical
IPv4:
67.206.182.0/24
198.135.178.0/24
IPv6:
2606:c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:4d:c4:f2:42:fd:38:8d:3b:b8:b0:b8:f1:ec:30:07:cf:50:
dd:7f:e1:d7:d3:27:ec:8a:8d:51:62:7a:ae:45:49:d7:da:8e:
53:3d:2f:4f:2a:cb:8f:dc:c5:82:77:c2:b7:31:48:c6:0d:99:
d2:d1:e4:88:2b:2c:57:a0:6c:10:ea:83:78:17:47:dc:78:c7:
31:a8:1e:49:f5:45:09:bb:6d:ba:bf:b9:27:d9:43:b6:82:65:
b2:66:86:3a:70:49:98:f5:be:b9:a4:43:b4:b5:af:15:ec:e7:
93:c9:aa:c8:96:c2:7f:9f:73:81:c7:94:12:5d:3c:02:4f:b9:
2b:3e:e3:b4:67:b3:5e:2c:6c:09:43:56:30:2e:aa:be:1a:5f:
50:3d:a2:98:6a:02:cf:4d:f3:ec:94:42:72:c5:27:d3:5c:bc:
ab:f9:64:84:a9:a3:4d:cf:bd:b2:0f:9c:47:f3:b8:c3:ad:e4:
61:eb:80:56:fe:71:4d:14:d7:a3:1b:a8:c7:44:10:f2:06:20:
3a:c3:3d:25:1f:90:55:a0:3f:22:a5:17:ff:03:97:ca:6e:af:
bf:b4:df:9e:d3:4f:b6:f5:f6:8f:db:66:01:ca:f2:19:c6:bf:
06:d5:3a:53:70:ec:08:e2:25:12:44:3e:dd:2c:0b:f5:63:df:
d1:f3:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:43 2024 by rpki-client on console-ams.rpki-client.org