Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/391a683d-eb8f-3ccd-b7d8-461f83269e14.roa
File: 391a683d-eb8f-3ccd-b7d8-461f83269e14.roa (raw, json)
Hash identifier: gAFe466mk5y2L8az+olUOYmFtwiqcVV+/vK9MtEcESo=
Subject key identifier: E2:49:15:A5:40:09:BA:F0:C9:92:C2:69:72:54:F1:7B:1B:18:79:97
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858476B363E5FF42124B5EB560ED8
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/391a683d-eb8f-3ccd-b7d8-461f83269e14.roa
Signing time: Thu 03 Oct 2024 13:00:41 +0000
ROA not before: Thu 03 Oct 2024 13:00:41 +0000
ROA not after: Wed 01 Jan 2025 14:00:41 +0000
asID: 9009
IP address blocks: 172.111.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 07:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6b:36:3e:5f:f4:21:24:b5:eb:56:0e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 3 13:00:41 2024 GMT
Not After : Jan 1 14:00:41 2025 GMT
Subject: CN=0b3a3d64-a412-41c7-b558-cd5920126ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:72:35:0a:31:ab:bf:b6:7e:77:b0:01:9d:
63:ce:dc:db:41:eb:f3:fc:c0:e9:b3:35:3e:53:f4:
c8:39:fd:d3:4f:60:f8:bd:aa:5b:72:13:5f:6e:08:
e5:2f:ee:b6:d6:f6:84:81:6f:57:70:1b:55:f6:de:
52:93:32:57:f0:4a:13:9b:66:50:e7:8e:fd:90:2f:
12:56:82:11:64:a6:a0:29:a0:1f:1f:59:1c:29:fe:
89:4e:2b:87:d8:01:33:68:89:12:dd:d8:e7:49:5f:
5e:52:9c:4e:88:d5:83:53:7d:62:4c:86:9c:47:ec:
73:54:6c:6a:39:0a:56:16:49:3c:ac:2c:d8:90:81:
73:7d:d0:21:0b:59:a2:b4:3d:ca:0a:97:f7:90:f2:
78:e0:26:51:74:52:a7:78:88:05:79:9f:6a:97:f8:
ca:a4:9e:e3:e4:03:dc:05:4a:0f:fd:66:d2:e3:35:
7b:66:59:77:a6:0e:1a:18:f0:a4:f8:fd:e9:d4:b3:
52:83:09:eb:af:f8:26:88:de:5d:f6:f7:78:bc:f0:
e3:04:11:94:d8:99:8c:44:bd:71:e0:b2:1e:44:a1:
11:f2:25:6e:d6:6d:7d:54:3b:2f:00:ff:95:5f:0a:
8e:35:e9:37:d0:2f:9b:71:59:dd:1f:5a:12:88:0d:
08:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:15:A5:40:09:BA:F0:C9:92:C2:69:72:54:F1:7B:1B:18:79:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/391a683d-eb8f-3ccd-b7d8-461f83269e14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:26:0f:d5:22:49:cc:61:e9:d4:c2:70:9c:cc:bc:79:20:29:
c8:b8:b6:53:50:94:83:9a:53:f1:5d:b0:65:90:0b:f5:cf:c6:
9f:b7:62:c0:71:e0:7f:4c:8d:dd:e4:85:50:8c:10:83:54:63:
a3:ac:e1:b9:a2:4d:31:86:74:44:8c:ba:9f:24:9d:73:66:98:
48:26:82:1b:2c:55:be:79:ac:ad:8d:07:7a:cd:a5:78:da:03:
d1:25:00:63:e0:2e:c1:3c:e3:d6:b4:c0:65:f5:aa:60:85:c9:
af:a3:35:17:36:05:d0:10:a4:fd:fe:9a:84:19:a5:f1:1f:54:
49:81:15:5d:be:c0:e5:1b:b8:67:74:cd:e3:c6:51:a8:90:9f:
60:38:dc:f9:f9:a1:4f:96:19:52:8c:72:10:87:8d:0b:47:af:
01:5c:5d:99:ca:66:3b:15:20:b7:e4:b7:85:08:36:cf:60:90:
c3:47:4f:22:40:5f:02:92:d9:f3:a5:79:a0:be:f7:05:24:57:
a7:27:c0:0f:b4:a8:4e:43:1c:a2:46:d1:ee:c3:e5:90:fb:99:
4d:ad:52:4a:6f:60:16:1e:52:c7:9c:b6:59:a0:87:b6:9f:38:
3f:0e:aa:81:1e:e2:31:d0:97:8e:a0:c9:ed:f0:14:7f:ec:06:
e2:62:ae:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 10:40:02 2024 by rpki-client on console-ams.rpki-client.org