Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21e2f0e8-f965-3007-8bb0-39c5a7132481.roa
File: 21e2f0e8-f965-3007-8bb0-39c5a7132481.roa (raw, json)
Hash identifier: nG+iNo8wIuc+qAeDnvGTds3RDqVeW7SjA3BN+PPA0+k=
Subject key identifier: 87:01:8D:58:12:DD:A7:4B:76:02:7A:A6:D9:95:81:04:87:64:51:F0
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858424F488C898BFCDAFEC543B6C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21e2f0e8-f965-3007-8bb0-39c5a7132481.roa
Signing time: Fri 23 Jun 2023 01:00:17 +0000
ROA not before: Fri 23 Jun 2023 01:00:17 +0000
ROA not after: Thu 21 Sep 2023 01:00:17 +0000
asID: 212238
IP address blocks: 172.94.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4f:48:8c:89:8b:fc:da:fe:c5:43:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jun 23 01:00:17 2023 GMT
Not After : Sep 21 01:00:17 2023 GMT
Subject: CN=bf86a102-39dc-43e5-811a-fd1227a1fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:46:cb:44:be:f9:46:45:d2:a0:8a:80:e7:
43:0d:df:25:45:e3:6c:af:13:21:84:45:c4:01:a4:
af:94:65:3a:27:a9:3b:fd:f2:3d:53:f1:16:27:d4:
73:91:fd:ea:49:ae:da:f1:34:23:18:91:34:48:57:
08:a9:7b:63:b6:5b:c7:7c:b7:77:74:fd:83:3b:47:
fe:9e:06:0a:f1:b7:76:fe:9c:98:db:be:c2:73:54:
a1:60:84:05:29:2b:c0:04:fa:b0:89:90:1c:2e:0b:
12:df:ca:90:cb:c2:ba:70:e4:2a:52:92:87:27:d2:
22:2b:fa:13:d0:cd:cf:1d:f9:54:e8:d1:b8:e0:5c:
14:ef:d5:59:96:70:5d:c6:d9:1c:94:31:15:ba:5c:
4d:06:36:c8:56:3b:cf:e8:9a:a6:fb:97:d0:c8:12:
4e:87:e4:57:29:63:f9:eb:bd:32:2a:c4:bd:7c:e6:
0f:97:a8:c0:c3:ef:53:dd:b7:38:cf:36:42:bb:9d:
ca:7b:c9:fb:93:23:13:1b:75:98:8f:72:c1:ee:43:
81:aa:8e:73:47:24:27:4c:25:10:99:13:4e:ef:31:
03:57:51:48:6b:b0:b4:14:06:84:38:4f:81:35:46:
a2:54:e5:33:31:e5:23:bf:14:4f:bf:d7:4b:e5:90:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:01:8D:58:12:DD:A7:4B:76:02:7A:A6:D9:95:81:04:87:64:51:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21e2f0e8-f965-3007-8bb0-39c5a7132481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:4b:98:f5:32:d8:ba:92:88:cb:3d:e6:b3:70:df:d7:58:5b:
38:e0:7f:3b:6b:66:ab:64:5f:59:b6:61:cc:1a:21:67:d1:cf:
d5:ac:8e:2a:12:a4:f3:f1:54:08:cc:56:c0:2f:03:cf:e4:21:
18:74:fd:30:ea:98:f0:f9:3b:09:1e:c5:b7:7a:3c:d5:10:25:
a5:0e:77:77:f0:7b:54:e8:02:24:5b:ee:99:0e:78:65:30:ca:
85:78:78:07:9a:1c:99:b0:8f:5f:fd:87:18:32:69:28:c7:d0:
34:43:07:a9:8a:62:99:07:17:82:76:e2:c1:38:9d:fd:30:94:
de:b4:84:54:c5:a4:1b:05:96:58:d8:95:3f:8c:10:32:05:41:
f5:91:39:7f:57:f6:4e:25:b9:89:e3:13:85:7e:1c:91:d5:67:
8a:ae:b8:a7:37:87:57:d5:6a:72:b0:60:f7:d7:0e:f4:87:61:
1f:5c:69:75:37:40:cd:8c:96:34:2d:8a:ea:56:33:0e:c5:93:
64:16:85:68:4e:b0:ec:42:29:3c:ad:87:f2:5e:7b:41:65:27:
fa:78:d2:7f:81:37:89:55:fc:65:0d:35:11:fd:82:8e:38:4f:
81:3e:2a:18:1c:24:84:d6:11:dc:1d:f2:03:74:44:77:c5:70:
9e:05:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 12:38:39 2023 by rpki-client on console-ams.rpki-client.org