Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4c1e682-2f27-3979-ae48-31189fe9c44e.roa
File: f4c1e682-2f27-3979-ae48-31189fe9c44e.roa (raw, json)
Hash identifier: Ux3JVApJ5FzwZwDUk2RUgVPK/p8Tz2SjQbh/7B5ALA8=
Subject key identifier: F2:D4:97:81:EA:5C:3C:75:B0:F6:B9:59:EA:66:4B:5E:4D:2A:0C:48
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858466BC48B5A56A1678CDDA17E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4c1e682-2f27-3979-ae48-31189fe9c44e.roa
Signing time: Thu 04 Jul 2024 01:00:26 +0000
ROA not before: Thu 04 Jul 2024 01:00:26 +0000
ROA not after: Wed 02 Oct 2024 01:00:26 +0000
asID: 3223
IP address blocks: 172.94.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 07:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6b:c4:8b:5a:56:a1:67:8c:dd:a1:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 4 01:00:26 2024 GMT
Not After : Oct 2 01:00:26 2024 GMT
Subject: CN=22f507d8-d327-4605-b393-820c6e736146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:1a:cb:05:f7:12:a4:1f:6b:51:71:91:05:
96:fc:98:0e:9b:e4:c0:cb:4e:25:c0:f5:d5:3c:2a:
36:78:d1:c7:6b:0f:24:72:25:4b:2a:40:ef:79:8a:
70:6b:53:d3:0e:50:df:5a:70:e3:76:f9:91:82:ee:
68:84:ea:ea:74:4f:ec:5d:a9:20:9a:5c:b1:f6:9e:
05:ab:4f:b3:80:9f:1f:ea:e7:bc:f9:65:87:34:19:
84:38:8b:1a:f0:ba:82:d4:99:d3:e0:f8:b8:0b:8c:
fd:3c:a6:61:3a:cd:1b:62:48:35:02:87:9c:48:e7:
6a:b6:df:76:1a:b9:33:c6:49:38:ed:dc:cf:3e:a0:
55:c1:2d:43:6e:74:0a:5d:9f:52:e0:af:35:5a:2d:
28:ea:f2:ad:67:be:63:bf:01:b5:c0:a8:cf:e6:6a:
1a:36:2e:88:42:12:0a:7a:da:2e:c8:64:0c:50:a1:
fc:a4:7b:3d:8b:02:b6:94:ca:84:72:22:a7:bf:0c:
00:24:08:c6:a7:ce:60:b6:ab:83:57:1b:27:66:2c:
28:ff:c7:04:8f:b8:76:f1:57:f4:70:3d:5f:3b:01:
69:45:31:c7:f1:f6:0d:c0:4b:0f:c7:12:02:4a:a1:
cd:79:38:c2:30:c4:88:b9:54:13:bb:37:7d:a7:33:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:97:81:EA:5C:3C:75:B0:F6:B9:59:EA:66:4B:5E:4D:2A:0C:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4c1e682-2f27-3979-ae48-31189fe9c44e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:55:b8:de:eb:d9:ee:e1:52:90:e7:3e:4b:91:28:b1:22:8e:
9e:34:a7:7e:48:35:81:b0:0f:77:e2:ec:90:99:9e:1f:fc:a8:
1b:2c:0b:01:bb:22:6c:fb:da:d3:c8:a2:b0:b9:d9:8e:f9:98:
17:48:d1:54:03:f1:8e:68:d2:b5:22:89:09:9d:45:f1:ae:6c:
df:56:1c:73:28:39:6f:58:e5:86:36:ec:4e:bc:bf:50:a8:c7:
4d:1d:f0:ef:bb:d4:c0:f9:7e:c2:dc:65:a5:b9:0f:30:4a:e9:
43:4a:2c:6f:e3:d4:f2:43:a5:64:be:44:1c:0b:1f:99:bd:43:
ca:6e:b8:93:af:38:27:59:66:6d:e8:63:e5:5e:aa:d7:8f:01:
5a:57:da:dd:81:82:f0:be:13:da:f6:52:06:60:99:44:fb:47:
ba:a4:42:0d:8a:ab:b9:53:27:fb:c0:42:07:81:90:1c:48:41:
c5:a9:81:ad:1a:0d:57:fa:35:b1:2d:a6:e1:58:1c:1d:78:9a:
a8:7b:fa:c4:23:3a:77:f8:8b:b4:10:bf:08:b4:0d:d5:ce:f4:
fe:ab:5e:0b:61:9e:cd:6e:1f:c9:4b:1e:a5:ed:d2:1d:e1:9a:
43:9a:27:b9:4a:a8:fa:4f:0b:ef:d8:52:ce:a1:ae:ca:cf:e5:
16:6f:b5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 09:57:39 2024 by rpki-client on console-fra.rpki-client.org