Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b195d05f-f5dc-309c-a2f4-6570bb0e5362.roa
File: b195d05f-f5dc-309c-a2f4-6570bb0e5362.roa (raw, json)
Hash identifier: 3klcemTJ6Jqu06UD07dGA+InXMoJRIdr3elaZkXHQDo=
Subject key identifier: EB:93:C2:40:AC:48:82:3B:B7:9C:D5:CE:1C:89:81:C2:CD:41:A6:0E
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858476C9DB4C2B6BD7493EB802300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b195d05f-f5dc-309c-a2f4-6570bb0e5362.roa
Signing time: Fri 04 Oct 2024 01:00:31 +0000
ROA not before: Fri 04 Oct 2024 01:00:31 +0000
ROA not after: Thu 02 Jan 2025 02:00:31 +0000
asID: 51430
IP address blocks: 172.111.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 09:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6c:9d:b4:c2:b6:bd:74:93:eb:80:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 4 01:00:31 2024 GMT
Not After : Jan 2 02:00:31 2025 GMT
Subject: CN=e95b527c-a2a6-47e5-9067-e58d024b35ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:c4:51:a9:8c:cd:51:35:ee:eb:7f:cb:e1:
55:43:e3:60:b2:c1:35:0e:81:00:10:a1:a0:6b:b2:
00:3c:b1:5a:19:85:40:74:18:32:ae:32:98:f9:5f:
65:76:2d:da:93:89:a2:ce:68:39:c6:b0:b9:34:95:
35:89:1a:f0:58:e2:af:f9:96:f1:70:c2:03:5d:66:
48:42:de:2f:61:16:a6:10:c9:06:d8:65:f5:28:c3:
80:c0:93:20:90:6e:2f:a0:75:65:49:21:65:32:87:
6a:24:ab:15:78:d3:60:ad:09:64:25:2d:27:64:65:
c0:e9:fe:07:97:43:8a:26:6a:10:3c:3c:c6:59:35:
4f:6a:9f:36:6e:69:6c:cf:c8:3a:cf:73:d9:4c:2d:
c7:fd:eb:82:80:ae:02:c4:bf:3d:e2:72:94:d8:26:
43:61:4d:ff:88:bd:a6:da:ab:e9:e2:ee:5b:7b:c1:
57:20:84:3b:4f:30:8b:29:f0:0c:58:66:52:b9:0d:
92:a6:ef:cd:39:c5:be:1b:77:23:78:70:99:92:9b:
75:5f:fc:76:42:f8:9b:01:95:71:57:07:17:4b:73:
70:88:20:d6:51:24:aa:4f:04:91:6d:35:4f:60:8c:
c6:0b:dd:e8:eb:21:df:4d:f6:99:e2:46:76:e4:2f:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:93:C2:40:AC:48:82:3B:B7:9C:D5:CE:1C:89:81:C2:CD:41:A6:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b195d05f-f5dc-309c-a2f4-6570bb0e5362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d6:1e:98:c1:77:02:59:00:38:fb:11:70:6d:5d:6b:3e:64:
dc:7d:a4:2c:fc:cc:a7:ef:ed:8e:67:14:5e:a3:42:2b:97:a6:
55:dd:f9:26:e4:5c:22:cd:da:5e:3e:91:89:11:59:dd:09:2d:
96:f0:18:75:9e:2c:9a:7a:15:28:86:54:3e:d1:19:e1:7b:c5:
a3:ed:a6:ca:77:f8:93:70:67:8a:40:29:2c:ac:2b:ef:db:c6:
47:5a:31:65:cb:70:bd:d7:27:58:cb:b9:e3:9c:38:58:02:0f:
13:a6:bb:e2:51:52:ca:58:3d:76:53:2f:62:1e:46:4f:6e:9d:
39:1e:20:fe:3b:56:41:bc:5e:a8:ee:97:47:ea:9b:8b:5c:37:
af:1a:ea:e3:31:87:73:33:eb:7e:43:98:a3:e6:62:2a:99:d8:
5f:f4:ab:a3:ba:ae:e7:d8:84:0e:fb:8b:8f:b1:42:5a:e9:0b:
c1:58:22:21:64:6d:43:1f:72:5c:a1:92:59:d0:a6:ee:b6:4e:
6b:d6:5e:fd:b7:25:5e:b0:85:ad:3c:f2:6e:04:55:2c:db:01:
04:18:23:64:9c:f0:0b:2b:b2:32:49:78:59:ce:2c:00:48:d5:
5a:e1:93:ef:08:27:09:fc:60:68:a5:e7:cf:0c:9d:1b:b0:57:
d6:f8:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 13:24:13 2024 by rpki-client on console-ams.rpki-client.org