Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c63cfd10-0df1-3cdc-bbf7-f524cd651b17.roa
File: c63cfd10-0df1-3cdc-bbf7-f524cd651b17.roa (raw, json)
Hash identifier: gDf1476LZFV0tuN63gwyHp4w+Z4Z4iBJ9gqMgTCf0Mw=
Subject key identifier: A1:00:84:A3:E3:51:9E:D1:1B:F1:E0:D6:39:40:75:F6:12:A8:7B:33
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584429FEA671671E93A9A4504A80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c63cfd10-0df1-3cdc-bbf7-f524cd651b17.roa
Signing time: Sun 10 Dec 2023 02:00:16 +0000
ROA not before: Sun 10 Dec 2023 02:00:16 +0000
ROA not after: Sat 09 Mar 2024 02:00:16 +0000
asID: 9009
IP address blocks: 45.74.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:29:fe:a6:71:67:1e:93:a9:a4:50:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 10 02:00:16 2023 GMT
Not After : Mar 9 02:00:16 2024 GMT
Subject: CN=8bc25dbf-a9fb-4713-8318-c3b86f899731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:b3:8c:e1:eb:46:33:2c:c3:37:4e:5d:fc:
fc:47:2e:8b:37:68:f2:3c:46:c9:ae:b7:ca:17:29:
24:b6:fa:5f:1b:2c:76:55:74:79:a4:7d:67:e6:2c:
e3:17:56:dc:e3:90:99:42:6c:05:f6:ad:97:bb:f6:
56:0a:55:64:59:21:83:2a:31:34:a8:e7:83:1b:0d:
7b:c8:eb:94:ff:37:e7:97:c1:0d:62:8f:df:8d:e7:
0c:33:a6:07:19:9d:9c:dd:49:bb:a0:85:48:26:a1:
80:72:12:f7:9c:6d:6d:67:ef:de:22:60:a5:6e:eb:
d7:7b:f3:0a:64:f5:a8:18:b9:f9:6c:61:e7:54:b3:
af:a3:bd:eb:cf:2c:22:b7:8d:6e:2a:90:9c:9d:c9:
80:6a:12:58:12:a4:e2:b1:12:93:bf:11:ed:a3:92:
cd:cd:19:6f:cf:cc:1d:8b:67:5b:b4:08:ff:8a:c3:
79:58:85:e5:c2:1a:09:31:a7:1d:e9:fe:58:20:40:
60:d1:52:9a:7b:16:34:a4:8a:0a:4d:92:30:62:b7:
75:ba:1c:ca:4a:bf:59:9a:a8:12:87:85:37:53:be:
36:e7:6b:86:03:b1:76:25:bf:94:85:71:86:ff:67:
75:88:b6:6b:62:09:5e:be:b3:fa:9d:e1:7b:1f:23:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:00:84:A3:E3:51:9E:D1:1B:F1:E0:D6:39:40:75:F6:12:A8:7B:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c63cfd10-0df1-3cdc-bbf7-f524cd651b17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
45.74.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:29:93:30:45:f4:49:75:00:52:e6:64:72:66:7e:b8:3c:c0:
0c:1e:08:7f:ac:27:0d:0b:00:6d:40:a3:d2:3b:9e:06:89:1c:
96:c3:36:0a:60:64:c2:db:cc:15:fa:9c:42:f9:16:da:15:d9:
71:8d:d0:93:1a:88:3e:4a:06:4e:e1:50:ff:f3:46:dd:7c:a4:
91:17:a5:f3:f6:3d:17:4c:57:b7:54:35:0f:f0:43:64:5b:66:
10:72:74:b2:d9:80:2c:20:e0:e0:43:4f:43:e4:a6:6b:7a:fd:
b5:88:ea:ae:65:0d:28:9b:8a:f5:fd:95:bd:b3:c3:ca:bf:ab:
bb:4c:d9:7b:7b:e3:a1:5b:66:6d:cb:4f:aa:93:9b:55:70:31:
99:3e:2f:34:14:d4:52:6a:25:d6:4d:6f:21:69:24:04:8f:f5:
f5:ed:64:93:72:8a:9a:50:13:b1:7c:96:bb:d1:7f:03:6b:d6:
f0:9c:48:00:31:66:5b:42:63:29:42:5b:ae:04:d9:9e:6b:2c:
cf:7d:b9:12:7d:5d:49:24:c9:9b:16:13:92:48:0d:34:d5:f0:
d8:72:34:7e:40:03:5f:25:ae:31:5d:e6:07:df:41:7b:69:f7:
dc:f0:8d:f3:98:05:2f:7a:5d:27:01:99:77:fe:6a:c7:c3:7e:
6e:55:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 13:01:33 2023 by rpki-client on console-fra.rpki-client.org