Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d46b70d5-5e36-3dab-91c6-ebb7c3ae203d.roa
File: d46b70d5-5e36-3dab-91c6-ebb7c3ae203d.roa (raw, json)
Hash identifier: IAyKjqJaMcC903b4W36MfkG1SO7l8MQAP/kOaU3gTSQ=
Subject key identifier: FC:C3:7E:60:6C:F1:B0:0E:96:A4:AB:3A:E4:29:73:81:BC:07:5E:F7
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858477BF66A49CD47CB973B7A8078
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d46b70d5-5e36-3dab-91c6-ebb7c3ae203d.roa
Signing time: Wed 09 Oct 2024 13:00:42 +0000
ROA not before: Wed 09 Oct 2024 13:00:42 +0000
ROA not after: Tue 07 Jan 2025 14:00:42 +0000
asID: 9009
IP address blocks: 192.253.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 06:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:7b:f6:6a:49:cd:47:cb:97:3b:7a:80:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 9 13:00:42 2024 GMT
Not After : Jan 7 14:00:42 2025 GMT
Subject: CN=eef57ed1-6344-4f47-a74a-7dd4f4d222ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:fd:0a:f9:56:19:0d:af:be:e2:04:74:af:
bc:62:56:86:72:43:28:74:59:a2:7b:b7:f3:40:cf:
66:a7:71:e9:93:8a:77:ef:bb:0b:35:9a:4e:36:f4:
15:ba:ba:cf:37:f9:0c:f9:10:d8:a9:85:9b:e3:ab:
98:d2:7f:ab:d0:55:38:3e:85:53:09:6b:ed:01:54:
ae:9d:1b:a7:4d:a1:a0:e3:1b:a8:5b:0d:52:af:1d:
76:58:43:92:40:53:2d:04:ed:f5:69:53:f4:01:91:
30:f7:a9:18:25:20:18:7c:c9:6c:91:22:4c:74:28:
c6:8d:56:91:de:5c:a7:d6:55:bf:41:0e:58:56:a2:
1f:31:79:c0:d7:19:f5:94:68:34:50:bb:68:db:45:
dd:ea:49:f3:4a:37:dc:f2:7e:db:f2:c8:da:4b:09:
6e:6d:54:a8:07:fc:49:b8:36:0b:1d:17:d3:e5:4f:
76:e9:d8:fa:35:60:62:50:e4:40:36:b2:c0:a7:05:
2b:d9:9e:b8:34:13:c1:96:7b:0d:11:2a:d7:38:9d:
96:eb:db:d0:ad:70:b8:96:1d:34:c2:51:2e:b8:60:
da:c8:3e:f9:26:be:64:d1:56:ba:04:63:56:61:96:
8e:59:24:b6:42:81:ab:7d:41:9a:77:7d:6d:53:69:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:7E:60:6C:F1:B0:0E:96:A4:AB:3A:E4:29:73:81:BC:07:5E:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d46b70d5-5e36-3dab-91c6-ebb7c3ae203d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:84:61:0e:c5:a3:51:5e:9d:50:1e:9b:cf:22:9c:82:61:51:
84:f6:7a:e7:0d:62:42:ce:44:c3:e2:f7:00:7e:97:17:5d:ed:
0e:ec:2a:e7:dd:3e:08:ee:f1:fb:77:c1:b6:fb:25:83:a1:7c:
31:e0:5d:b7:84:20:ff:0e:7b:43:1f:40:60:f9:eb:c3:19:f7:
c7:09:84:f9:72:68:21:4b:f4:a3:95:ef:f1:d6:49:2e:82:16:
c1:fe:58:f5:70:15:4a:51:1c:63:63:50:14:48:a3:3e:aa:81:
3f:94:79:8a:5d:47:9a:c0:54:cc:dd:53:77:5d:ef:09:70:e0:
48:b1:b9:0d:46:e9:e9:1e:40:fd:06:6a:d2:10:56:2a:f2:61:
54:ee:a8:1c:bf:c6:e6:ea:96:19:8d:ab:7f:6d:ad:20:a8:a4:
49:b6:f3:95:19:51:ff:64:9c:f5:2a:30:0c:84:aa:04:e1:91:
c5:a1:52:30:81:09:d7:cc:ed:38:37:df:8d:84:32:2b:35:b0:
60:97:e1:a3:1d:5e:bb:3a:9e:42:82:2a:b3:81:02:ef:6a:88:
c4:ce:2f:5b:ce:06:8a:25:c9:6b:3a:8a:78:31:be:06:f5:32:
4e:67:29:58:5d:49:7b:5f:21:37:f1:85:11:bd:0d:a6:ed:60:
fa:ec:14:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 07:09:48 2024 by rpki-client on console-fra.rpki-client.org