Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/09886c31-11f8-3c15-b51c-8e7903def62e.roa
File: 09886c31-11f8-3c15-b51c-8e7903def62e.roa (raw, json)
Hash identifier: ifyIAqR4S3Tpi9WtbpZhpqBO5STiB/HE+hlKOe0i3+Y=
Subject key identifier: 6C:BB:5A:EF:C4:6E:FE:B9:7F:11:83:A3:F2:A9:5A:82:12:92:43:9C
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858471E7069228E12A4E7007F7A40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/09886c31-11f8-3c15-b51c-8e7903def62e.roa
Signing time: Fri 06 Sep 2024 01:00:31 +0000
ROA not before: Fri 06 Sep 2024 01:00:31 +0000
ROA not after: Thu 05 Dec 2024 02:00:31 +0000
asID: 20473
IP address blocks: 172.111.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 09:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1e:70:69:22:8e:12:a4:e7:00:7f:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 6 01:00:31 2024 GMT
Not After : Dec 5 02:00:31 2024 GMT
Subject: CN=1fc876c9-a2c7-42cc-9d0b-0a25fd5f34d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:7a:f6:0c:68:30:48:19:31:03:3b:17:c9:
c2:8d:ab:fc:5f:da:1c:a3:4c:11:b9:5a:b3:cd:44:
aa:64:8f:29:2b:20:2d:a9:f2:29:73:4a:b0:56:a6:
e8:7a:af:cd:8a:c6:88:ea:7e:09:32:a2:f1:01:f8:
d8:4c:e1:5e:0c:96:ae:84:31:30:69:a7:24:32:ae:
78:1f:95:df:37:47:70:9d:db:dc:27:5f:6a:98:e6:
9a:1a:4e:95:95:8b:8f:fb:23:a0:31:35:bc:51:05:
6b:9e:3d:3f:2b:d8:20:cf:0e:a6:c5:d1:e6:03:3b:
79:52:48:1e:5c:40:10:37:3e:ca:48:03:da:d2:b6:
e7:bd:13:7c:c5:bd:d9:f6:9a:90:b1:95:d5:3e:53:
65:05:e0:5f:fb:4d:cf:61:59:61:ab:20:71:a3:a4:
34:b1:48:68:e8:4c:e0:e1:31:fa:59:c0:d0:3d:55:
40:67:8c:e8:2d:46:4b:9e:dc:40:af:94:d9:98:c0:
a9:c4:ae:65:28:c8:f1:e0:a5:1f:cc:30:64:68:e7:
f7:b8:e4:38:7c:c6:b6:55:95:4c:0a:36:6b:fb:c6:
4c:cd:4b:58:35:eb:78:64:bd:83:b4:8d:b7:25:e8:
6d:70:3e:44:31:2a:f3:a7:c9:c4:c5:77:18:d2:9d:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BB:5A:EF:C4:6E:FE:B9:7F:11:83:A3:F2:A9:5A:82:12:92:43:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/09886c31-11f8-3c15-b51c-8e7903def62e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:ea:7c:70:21:29:da:b3:68:99:d6:7e:ad:5f:55:a1:cb:cc:
c7:54:94:1d:b9:b8:92:2c:af:e5:a5:3c:b8:0a:4d:41:4d:cc:
ec:9d:ca:36:bc:1b:41:d8:c3:01:1b:7b:f2:6f:ff:e8:30:18:
ad:42:f6:0c:26:3e:c4:d2:69:1f:c6:36:24:72:41:de:bc:b7:
71:f7:2d:9a:4e:fe:b4:bf:61:82:f1:35:e0:7b:cb:de:dc:d7:
ae:38:bc:db:a2:94:b8:bf:26:fc:b4:9a:52:d7:4d:82:6b:05:
83:7a:9b:4f:30:bc:65:0c:f1:f5:d3:d2:3f:8f:1c:60:4a:69:
9c:1d:b1:bf:27:81:5b:58:71:d3:b1:cb:ab:d5:39:31:a5:c0:
38:a8:df:3c:99:bd:b6:f7:9f:60:27:47:18:0a:cb:96:61:70:
f4:e2:0b:f1:ea:9a:c1:70:81:ae:e6:e6:de:f5:34:a4:c1:87:
13:3b:2f:2a:47:38:b6:54:53:9a:f2:70:08:b6:db:a2:2e:a8:
13:79:9e:a4:c1:4b:68:a8:5e:3a:06:aa:44:09:5b:cb:95:df:
37:0a:f1:1a:dc:87:ad:37:27:c4:8a:01:3d:07:42:4e:13:71:
d9:26:20:f7:23:a1:83:6c:4c:f1:f9:a3:e8:92:2b:c6:d9:16:
ac:d5:d8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 12:59:00 2024 by rpki-client on console-fra.rpki-client.org