Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0767b0a8-a863-39b1-ad29-28eaa071cfef.roa
File: 0767b0a8-a863-39b1-ad29-28eaa071cfef.roa (raw, json)
Hash identifier: nNLNYf07guPOdFv2RTqjRGfbV6jKF8vl5nsoD6l2CmA=
Subject key identifier: 2A:F5:1F:B4:9C:99:E9:2C:70:D3:3C:88:24:5B:9D:79:D9:AD:CE:86
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847C675656C4AC4985F004CDDC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0767b0a8-a863-39b1-ad29-28eaa071cfef.roa
Signing time: Tue 05 Nov 2024 05:26:32 +0000
ROA not before: Tue 05 Nov 2024 05:26:32 +0000
ROA not after: Mon 03 Feb 2025 05:26:32 +0000
asID: 834
IP address blocks: 172.111.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 09:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c6:75:65:6c:4a:c4:98:5f:00:4c:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Nov 5 05:26:32 2024 GMT
Not After : Feb 3 05:26:32 2025 GMT
Subject: CN=61b0a01f-4415-4482-b3c5-7093e4e410fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:ab:48:7a:ed:2e:79:96:de:c7:e6:19:2e:
19:d5:33:a2:a2:24:0a:e1:5c:8b:e4:de:f0:60:38:
3f:49:18:f4:02:46:48:b8:52:17:3b:87:90:81:9b:
8c:03:7f:31:ec:2b:20:9b:5a:d0:e4:b6:7b:5b:ba:
05:fa:6a:df:30:9d:c6:24:e0:fb:70:ee:dc:76:1a:
69:b6:eb:65:dc:7d:73:01:7c:fd:c1:da:d1:ae:52:
cc:18:d9:3f:0a:c6:f5:67:12:cb:cb:ee:6c:b3:ee:
c7:ed:cc:21:9c:7d:59:d0:d6:25:a1:0a:1c:63:c0:
2d:9c:a2:8f:3e:ff:bd:88:af:c8:ae:45:aa:a4:17:
aa:f3:4d:a4:f4:8f:e4:1e:98:99:f5:dd:7f:75:5c:
0b:19:e7:99:90:3f:72:78:b4:05:f9:ed:72:8f:71:
25:09:e5:df:c1:19:df:47:c9:d1:2d:2c:9d:b3:fd:
4c:f3:eb:72:47:e9:83:10:af:92:9e:f0:46:4d:45:
5d:4c:ab:ef:b5:3a:03:2f:50:e2:b3:43:52:f5:2b:
15:36:8f:c7:5c:3e:49:e6:00:a8:98:d1:bf:fa:93:
b0:58:cc:74:07:88:27:5c:2b:47:e1:82:6c:17:00:
40:3d:e7:96:29:42:e1:12:2c:a2:18:fd:44:8f:a3:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:1F:B4:9C:99:E9:2C:70:D3:3C:88:24:5B:9D:79:D9:AD:CE:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0767b0a8-a863-39b1-ad29-28eaa071cfef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ba:8f:68:5e:48:ec:0b:be:e6:eb:b9:a0:7c:10:af:b7:6b:
f1:c3:2b:63:3e:31:b6:21:3a:8f:de:7e:48:99:0c:5e:f5:50:
14:8c:37:81:97:25:e0:eb:20:00:eb:ee:90:d0:65:23:74:27:
6d:ba:47:65:0e:97:7d:4e:5f:44:81:ea:6a:d6:c1:f7:2e:e0:
42:d8:a1:2c:26:05:56:8d:e9:3d:4e:e8:ff:14:e7:d5:5b:35:
19:fe:03:7d:ef:45:26:a5:71:06:c9:67:ae:52:46:58:00:1d:
b9:eb:a5:02:2c:15:6a:15:c2:01:ec:a5:7a:52:de:de:86:cb:
50:89:45:6f:ec:74:48:c7:6f:9d:0c:64:62:ce:61:8f:b2:6f:
f0:23:e8:38:74:f2:db:97:91:4e:51:1a:c3:c0:23:bb:4d:53:
2b:03:1d:41:8c:3a:e4:3a:04:01:06:34:f9:a1:28:b7:15:e6:
fb:f3:65:41:55:a2:04:78:ae:e8:6d:74:a1:c2:e4:83:a2:38:
91:7b:87:4e:f3:a9:c8:61:25:b9:3c:75:d8:37:9f:aa:d6:4f:
78:94:53:e9:0a:e1:57:69:e8:e0:ee:4d:30:97:63:c9:fc:9b:
e1:f4:4d:2f:7e:19:52:7e:d4:54:9c:90:fd:68:be:a0:a9:73:
f7:ba:e9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 13:32:29 2024 by rpki-client on console-ams.rpki-client.org