Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/771aebfd-d4e0-32d1-ba80-9ee3b4787fcf.roa
File: 771aebfd-d4e0-32d1-ba80-9ee3b4787fcf.roa (raw, json)
Hash identifier: GKeO14u8K6y618hfU+vP0OzqKbthaGawS4WmfjDnTl4=
Subject key identifier: 02:61:0C:3A:79:D9:78:58:D3:14:AB:A7:D8:F1:3F:AD:89:0A:56:E3
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285847A73BE6FD6210DC321E726050
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/771aebfd-d4e0-32d1-ba80-9ee3b4787fcf.roa
Signing time: Fri 25 Oct 2024 01:00:31 +0000
ROA not before: Fri 25 Oct 2024 01:00:31 +0000
ROA not after: Thu 23 Jan 2025 02:00:31 +0000
asID: 1421
IP address blocks: 172.94.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 11:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a7:3b:e6:fd:62:10:dc:32:1e:72:60:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 25 01:00:31 2024 GMT
Not After : Jan 23 02:00:31 2025 GMT
Subject: CN=e1a1449b-bfad-4193-a655-b66c350caf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9a:06:35:c2:7c:d9:2d:ca:e1:fd:44:24:f9:
c2:79:b5:07:63:39:e8:18:a2:09:ea:d9:9a:d3:8d:
4d:0f:b0:18:ea:b6:d6:a3:c4:92:05:5d:f5:f1:4e:
b4:ef:d9:65:f9:a3:75:41:6f:02:b7:23:73:5a:bd:
b3:37:a2:47:1f:c1:3c:fb:01:b6:ee:03:22:d0:fa:
08:3a:e7:39:9f:2b:07:c6:2b:0b:e3:4b:a2:e1:60:
a1:1b:6a:81:a1:dd:de:32:66:b1:7c:ba:42:ae:ac:
ea:90:a1:08:df:d5:d5:81:2c:af:18:94:c5:18:c0:
35:9b:a9:38:dc:df:4e:f9:db:8f:ef:b9:97:30:39:
13:21:81:bf:d8:f2:6c:3b:84:c9:56:5f:d8:23:0f:
dd:44:9b:40:1d:00:a6:5d:6c:04:68:37:73:f9:b1:
bc:61:85:62:eb:60:c7:d7:5f:39:17:26:8c:47:7f:
19:61:ae:c6:93:96:56:44:34:70:be:2f:be:1e:83:
1f:07:26:c6:e5:10:13:94:02:23:a5:f0:c6:b6:d9:
9c:f6:2c:1d:e1:9c:36:a2:3d:77:b5:a1:1e:a2:ec:
9c:45:7e:94:2a:cb:47:9e:23:4a:2b:2f:69:f7:f4:
89:af:b3:2f:ef:b7:5e:a3:64:62:7d:78:ec:e4:69:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:0C:3A:79:D9:78:58:D3:14:AB:A7:D8:F1:3F:AD:89:0A:56:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/771aebfd-d4e0-32d1-ba80-9ee3b4787fcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:4a:3e:64:57:a6:3c:22:77:df:1f:22:16:14:60:db:bc:ca:
2a:5b:21:d4:60:93:ee:44:b7:ba:99:46:72:d8:9c:98:d1:be:
4d:e7:10:98:8b:5e:67:d3:8d:6d:62:a3:1a:e8:7b:cb:32:82:
ce:94:d1:a2:b3:2b:a3:0e:88:ba:e9:66:98:78:bf:16:a1:9d:
1b:dc:06:7d:e8:d0:cc:0e:34:b3:71:1a:b9:76:ae:80:89:b6:
4f:20:a1:0b:49:53:60:5f:2c:03:57:86:06:96:b8:ca:cc:a2:
61:a4:f4:ec:26:e6:68:2a:73:48:37:9f:22:f7:42:5a:5d:43:
a5:36:78:57:64:4d:98:e9:11:df:0c:27:9e:61:5f:9d:b1:e9:
95:ef:2a:c7:92:62:11:92:41:f8:45:52:86:ea:78:e7:f5:b2:
e6:fe:be:22:30:e8:a7:e7:8c:f1:25:a9:57:35:db:9f:34:6a:
9f:93:7b:2f:e8:9d:6e:80:13:b1:67:cb:a1:01:43:1b:f1:72:
51:8f:5a:cf:69:63:90:6e:58:b2:52:75:7d:3c:bd:3b:81:af:
9c:17:ce:b9:a6:99:c0:fc:b8:bd:97:ae:94:98:81:f4:32:1a:
90:07:c4:c7:36:f8:ba:c2:2a:02:23:34:ac:b4:4b:fd:05:52:
23:95:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:55:55 2024 by rpki-client on console-fra.rpki-client.org