Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/30cb889b-6820-3613-9dda-ff5aa6e01582.roa
File: 30cb889b-6820-3613-9dda-ff5aa6e01582.roa (raw, json)
Hash identifier: UWnsAktRG9meNYffAzxp/3SlShIvh/DvV7C94C8uqOs=
Subject key identifier: CC:E1:D0:9D:AC:B2:9D:87:DB:21:2C:B7:E2:1F:5F:4A:E4:84:39:AF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328583D41DEADE0BA601815A3920000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/30cb889b-6820-3613-9dda-ff5aa6e01582.roa
Signing time: Thu 09 Sep 2021 04:00:00 +0000
ROA not before: Thu 09 Sep 2021 04:00:00 +0000
ROA not after: Tue 18 Jun 2024 04:00:00 +0000
asID: 199524
IP address blocks: 172.94.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Mar 2022 11:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:41:de:ad:e0:ba:60:18:15:a3:92:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 9 04:00:00 2021 GMT
Not After : Jun 18 04:00:00 2024 GMT
Subject: CN=f2ae75db-7f71-405b-bad8-e0eae2ecc724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:62:f6:ca:6f:50:f4:e1:06:a0:32:3a:37:00:
6d:5d:c9:ed:cf:08:99:a1:0f:4f:14:8b:1e:26:e3:
2b:87:85:b1:ac:13:c6:66:af:c1:53:20:c1:42:d3:
40:05:8b:47:c0:76:84:d1:18:7f:0c:db:7e:d2:c1:
69:8c:c8:80:13:71:67:c6:12:25:1c:4a:6c:02:cc:
35:99:f9:6b:bb:ba:0b:27:f6:36:41:00:b4:1c:82:
68:59:ee:f3:a5:28:3b:c6:ef:ae:03:ff:8c:98:4a:
04:b6:c5:5a:ff:6e:16:4d:74:5e:c9:ad:ae:49:cc:
f2:52:22:32:a3:75:3b:1f:d2:dc:e9:bc:8d:ea:89:
ee:28:fa:68:83:6f:a3:8f:4f:f3:11:0b:c6:fe:30:
e3:61:5d:95:84:4c:3b:33:26:46:ea:04:f4:32:7f:
ed:57:ad:61:69:99:ed:7e:74:55:4d:a2:4e:eb:9a:
8b:3b:e0:65:a3:3b:32:3e:8d:3a:c7:b0:c3:75:77:
d1:fa:91:9b:ae:6c:55:99:bc:6b:81:2e:58:59:6b:
ea:41:58:fd:4a:8f:02:0d:87:02:97:d3:31:51:2c:
8e:29:d1:bd:44:a3:a5:41:c4:fe:de:77:0e:e8:8c:
27:f1:28:3b:81:83:fc:87:48:66:1f:96:e4:18:6e:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:D0:9D:AC:B2:9D:87:DB:21:2C:B7:E2:1F:5F:4A:E4:84:39:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/30cb889b-6820-3613-9dda-ff5aa6e01582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:7a:5c:13:22:f6:ab:7f:6f:b1:31:0a:c4:8d:b4:57:1d:75:
ec:1d:69:a2:79:a3:de:3e:a5:c1:a5:0d:80:76:84:73:ab:17:
5f:89:f0:b3:19:04:08:46:72:be:e7:b8:71:11:83:d4:3e:8e:
41:51:d1:66:d8:bc:d1:59:a3:b3:6e:36:57:4c:b5:c1:5c:73:
c4:42:5c:19:2a:9f:f5:5a:07:00:a9:d4:23:a8:1e:dc:84:19:
64:a8:b2:09:15:08:d6:7f:63:fd:3b:2f:68:e8:b1:d7:8b:42:
ac:94:e0:7a:fb:0e:41:8f:4d:90:e6:41:48:02:e6:d3:f5:ce:
89:95:53:d9:de:f3:aa:e9:2a:fb:84:8b:71:2b:be:03:ba:d0:
2e:6a:c6:72:b8:17:bd:32:85:35:b2:92:a6:26:93:dc:5c:43:
63:bf:89:d3:7c:ca:92:cb:19:38:1a:e7:01:79:8f:c4:bb:b7:
05:cd:2d:3d:47:12:8a:cc:09:a0:f2:54:3f:21:f2:ea:3a:02:
bb:02:b5:50:a2:c2:e5:99:e7:5c:d9:dc:e8:b4:ee:fc:34:12:
e1:a1:33:7f:c8:aa:7e:a4:ce:fe:69:82:97:14:fa:eb:02:16:
58:1a:bb:f9:fa:12:f7:c9:ff:ae:53:43:0b:40:dd:b7:97:15:
7e:dd:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org