Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3b5d86e-d07e-3069-afe2-3eebef647ef0.roa
File: b3b5d86e-d07e-3069-afe2-3eebef647ef0.roa (raw, json)
Hash identifier: XIS4fVvx5B4wPAgFweXlbj8gE9nq+PfJADaZUSFm06c=
Subject key identifier: 40:47:07:F0:43:68:06:8C:3A:95:63:92:E6:23:D6:C0:E7:17:4B:F4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584762D65E32833B80BE995FB680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3b5d86e-d07e-3069-afe2-3eebef647ef0.roa
Signing time: Mon 30 Sep 2024 13:00:42 +0000
ROA not before: Mon 30 Sep 2024 13:00:42 +0000
ROA not after: Sun 29 Dec 2024 14:00:42 +0000
asID: 212238
IP address blocks: 172.111.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 09:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:62:d6:5e:32:83:3b:80:be:99:5f:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 30 13:00:42 2024 GMT
Not After : Dec 29 14:00:42 2024 GMT
Subject: CN=08d6cba4-4a7b-481b-867b-ae26b2e6766b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:a1:2e:c0:4a:e0:1c:b0:b3:26:a9:ac:77:
f2:13:7e:43:17:3b:d9:5f:9d:0d:4e:fa:52:06:2f:
34:12:bd:25:0e:9b:b7:ba:e4:74:e2:e2:ea:9e:3f:
43:52:9f:62:41:d9:d9:3c:1a:43:35:fb:f0:75:24:
af:e2:8d:63:cd:76:fb:96:3b:fc:9b:fd:5f:20:0e:
59:1f:88:8b:c0:e8:c6:c3:72:a3:43:b5:d7:3f:8c:
ea:82:38:3f:62:85:bb:ed:62:6c:dd:54:eb:e5:6d:
f5:7d:96:72:32:f6:80:1a:5c:3c:47:26:66:bc:2d:
50:1b:b5:39:75:2b:9f:0f:ec:b6:55:4f:a2:32:7b:
f0:a6:82:fd:df:77:82:ce:7a:18:bf:d3:ce:dd:14:
b9:a0:2c:a3:34:7d:af:5d:7e:19:a0:69:a0:dc:89:
23:c4:25:82:85:52:39:7a:c7:04:92:af:00:f5:01:
3f:57:86:05:f1:63:ab:22:d0:95:19:c0:ab:c6:c0:
86:09:1a:13:0b:04:60:bf:2e:34:fb:80:cf:45:bc:
6c:f1:1e:eb:64:27:df:16:d3:0f:1a:f7:64:05:cf:
bd:1a:74:6d:58:36:57:56:52:62:f0:39:b5:05:c1:
b3:62:0e:1b:5c:d5:69:5c:b7:c3:b4:3d:62:13:4c:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:07:F0:43:68:06:8C:3A:95:63:92:E6:23:D6:C0:E7:17:4B:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b3b5d86e-d07e-3069-afe2-3eebef647ef0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:f1:ea:db:a1:a4:55:87:58:72:64:f4:4b:f8:3f:87:f0:e4:
7e:bc:bd:23:b7:68:74:87:7a:41:07:66:12:e1:6b:d5:ba:23:
b5:53:11:85:0a:02:d8:15:9b:80:1c:92:81:89:72:9d:99:44:
84:f6:09:68:9e:b2:08:fe:6f:a0:ac:7d:37:99:f6:96:9b:ea:
11:6f:14:04:fe:92:6f:9c:41:f1:e6:67:86:df:b3:45:6f:bb:
b1:2a:80:0b:d6:e5:86:b7:e1:24:3c:71:ea:ca:65:c5:25:71:
32:6a:f8:1e:44:3e:a2:30:6d:94:b1:5e:48:8a:19:c0:5e:42:
83:0d:e3:e6:70:8d:85:16:04:b6:6d:4f:81:14:38:66:b4:38:
56:73:dc:fd:51:31:4e:b5:1c:b9:0a:d9:b8:f9:65:bd:43:3a:
75:89:7c:f1:c0:36:bc:fe:f1:a5:fd:20:36:0e:cb:52:d7:89:
db:13:c7:10:83:6b:dd:dd:7c:30:56:4e:6e:e3:6e:ce:f6:3a:
eb:eb:61:b6:49:53:6b:36:4f:5b:ac:22:72:c0:c1:e4:d1:5f:
3c:27:1c:77:e5:31:9f:fc:46:6b:3b:ee:90:c1:a4:56:67:b9:
6c:ec:84:d7:94:8d:d2:1f:88:5a:7b:5a:1c:11:c4:09:6b:25:
9d:36:e3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 12:59:00 2024 by rpki-client on console-fra.rpki-client.org