Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/194d75e2-2dcf-3abd-b37d-6d47ea778ae2.roa
File: 194d75e2-2dcf-3abd-b37d-6d47ea778ae2.roa (raw, json)
Hash identifier: YTXw1F3kV5dIEGUe9YPwtAsyS2wDhkVCAhqU+gygL2w=
Subject key identifier: 68:D7:2A:FA:F8:BF:B4:7C:99:B1:C0:A1:9D:7F:B6:A6:E0:FF:8B:78
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584762D65982540F407BB9DCC280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/194d75e2-2dcf-3abd-b37d-6d47ea778ae2.roa
Signing time: Mon 30 Sep 2024 13:00:42 +0000
ROA not before: Mon 30 Sep 2024 13:00:42 +0000
ROA not after: Sun 29 Dec 2024 14:00:42 +0000
asID: 212238
IP address blocks: 172.111.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 09:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:62:d6:59:82:54:0f:40:7b:b9:dc:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 30 13:00:42 2024 GMT
Not After : Dec 29 14:00:42 2024 GMT
Subject: CN=d4067a2c-9aec-410a-8e58-5735190a6fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:40:dd:1d:63:af:97:20:3a:92:45:28:61:
d3:f7:de:bf:b6:cb:66:62:c4:b5:51:52:fa:7b:4a:
71:b3:10:5b:08:33:23:d4:c4:12:e2:fc:f1:49:f7:
54:2f:4a:82:ac:02:8c:c1:49:8d:3b:64:ad:3a:8a:
3f:a0:69:51:c8:3b:d8:ae:53:d4:d4:91:cf:98:ca:
1e:11:c4:08:5d:4d:4c:96:9e:9a:ef:a2:c9:bd:0d:
3d:c4:74:f8:ec:c7:00:f3:95:ea:50:e6:1e:1a:b8:
8f:7e:7e:c4:06:ee:94:b7:c1:d7:ad:2a:d2:01:0a:
7f:ab:66:e9:91:83:89:e3:c6:22:58:43:0d:0b:a3:
54:fa:10:76:9a:8f:97:c1:a1:c5:f9:87:6e:dd:a1:
c4:a6:2b:76:c3:be:ef:3c:09:d5:53:de:26:76:e4:
80:20:41:ec:cc:b9:07:02:c0:3e:a5:1e:e5:63:7d:
2c:92:58:68:10:20:3b:e3:2e:63:93:30:8e:73:56:
b0:1c:47:f3:86:f6:6a:cd:30:4f:e0:30:27:1a:f7:
81:35:0d:28:5b:db:93:16:08:0c:0c:2a:1e:b2:ad:
ad:2f:6d:e8:4c:cf:ea:c6:56:9b:33:c6:33:0c:f0:
8c:af:93:dc:c4:4d:42:6e:cb:86:bd:90:54:14:e0:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D7:2A:FA:F8:BF:B4:7C:99:B1:C0:A1:9D:7F:B6:A6:E0:FF:8B:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/194d75e2-2dcf-3abd-b37d-6d47ea778ae2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:c0:0e:df:df:9b:76:ad:47:c8:7e:15:19:a3:8d:90:0f:33:
ec:cd:02:61:b6:7a:a5:95:72:b8:91:01:da:24:4c:c5:6c:0c:
60:cd:22:fa:d3:fa:2b:cd:e7:77:58:2c:63:e1:d8:84:43:4e:
8a:40:e0:38:16:a1:d8:94:82:c4:53:dc:e3:e6:12:ba:4e:c2:
64:4f:3a:20:2e:0a:e2:a7:49:7f:8a:b0:1b:4a:74:be:7a:5f:
60:ea:43:88:3d:12:8c:af:c9:0b:dd:ad:16:05:72:e8:4e:6b:
88:01:70:b3:18:3c:a3:19:59:e6:68:88:c6:50:62:1d:84:23:
e4:b5:ec:5d:24:bd:c0:de:68:e8:67:a5:b3:6c:d9:93:fc:84:
d5:3b:34:d2:52:ab:6f:bc:87:4b:b1:e5:94:b8:a9:3a:94:a8:
05:41:c1:81:50:3e:2e:2b:8f:5b:3f:53:1c:1f:a7:71:d1:dc:
41:d3:6b:ba:6a:93:23:00:aa:fa:52:42:20:31:66:e1:e0:73:
e8:5a:87:6a:c7:d5:48:3d:d3:25:62:93:7c:9a:a7:85:60:f3:
1e:7b:29:da:c3:1f:bd:c9:ff:b5:5c:08:c7:73:07:d0:0c:22:
32:e5:5b:f7:68:71:d8:cf:4f:87:45:4a:4d:f3:61:e3:6d:4a:
bf:d8:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 13:34:13 2024 by rpki-client on console-ams.rpki-client.org