Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/b5a9f9bc-5d01-3aa3-a34b-a48a43f72e0a.roa
File: b5a9f9bc-5d01-3aa3-a34b-a48a43f72e0a.roa (raw, json)
Hash identifier: nA37jW8VSRVDcE+gGJVaorV0kRF76NbjoSweFq+f3ok=
Subject key identifier: 2A:73:30:45:47:D4:D4:C3:82:0B:5E:5B:E1:1E:B5:8D:D8:EC:0E:00
Certificate issuer: /CN=7d31536a-f667-4473-abbf-040b249fa39f
Certificate serial: 010D0C9F43285843D2E20D7FFC4BA5DF318A8540
Authority key identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/b5a9f9bc-5d01-3aa3-a34b-a48a43f72e0a.roa
Signing time: Wed 08 Nov 2023 21:07:25 +0000
ROA not before: Wed 08 Nov 2023 21:07:25 +0000
ROA not after: Tue 06 Feb 2024 21:07:25 +0000
asID: 212271
IP address blocks: 216.73.152.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d2:e2:0d:7f:fc:4b:a5:df:31:8a:85:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d31536a-f667-4473-abbf-040b249fa39f
Validity
Not Before: Nov 8 21:07:25 2023 GMT
Not After : Feb 6 21:07:25 2024 GMT
Subject: CN=3395d08b-232c-495e-a05c-0bfc278b6ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:74:dc:ba:cd:85:ab:d7:3d:d1:69:1a:d8:
16:b0:78:4a:38:a8:18:5d:15:0f:9a:df:10:15:dd:
d4:5c:99:9f:26:72:dc:f1:19:a1:5d:9f:78:b0:70:
c0:54:a4:c7:1f:b6:91:44:58:22:c2:2e:51:8a:e0:
38:b4:96:ce:1b:c4:96:9d:87:18:c7:86:57:fa:74:
9a:5d:c9:31:6d:b4:1b:d7:1c:0d:75:b8:a1:e5:97:
be:a4:10:05:da:7c:dc:b3:9f:32:ae:26:df:18:ad:
93:64:68:8a:02:17:8d:1a:c0:b3:38:81:5e:9d:22:
56:63:ec:06:37:73:3d:7d:70:96:4c:9f:bb:b0:d1:
2e:82:45:6a:fe:f2:ee:85:aa:41:5a:f7:06:fb:63:
8e:59:b4:14:ad:d7:f5:be:af:a8:5b:fa:79:c1:1b:
c9:00:cf:f9:50:d7:2b:42:c1:39:c2:13:7f:44:4c:
6f:03:8a:20:bc:0f:67:c6:96:2b:1b:a4:a4:73:2e:
3b:25:cb:dd:7f:8e:64:cd:34:5f:61:f4:45:9b:03:
18:bd:96:9a:cb:04:02:4d:7b:9e:f2:82:40:83:97:
1b:68:da:ee:88:ad:16:5d:61:7b:92:1e:75:65:4f:
ff:e9:05:b6:3a:d8:12:56:91:4c:d7:af:48:4f:41:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:30:45:47:D4:D4:C3:82:0B:5E:5B:E1:1E:B5:8D:D8:EC:0E:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/b5a9f9bc-5d01-3aa3-a34b-a48a43f72e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl
X509v3 Authority Key Identifier:
keyid:D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.73.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:4c:5f:3a:4e:7c:1f:0f:b1:fd:84:08:07:84:99:1f:f0:a4:
41:fc:11:15:10:b4:39:01:10:79:e0:91:c2:2e:09:ac:5d:b0:
53:a1:39:d0:21:dd:f1:fe:d8:d7:1f:09:5f:c3:aa:27:33:25:
92:79:28:a1:9a:2c:25:56:ca:2f:b4:ab:18:1b:c3:20:02:18:
90:19:d7:8e:a9:f3:6f:2b:b6:28:f6:98:a1:50:fa:bb:d4:6e:
5d:9f:52:0f:22:9a:e4:1b:a2:4e:fa:89:03:6f:c5:1e:59:bc:
5e:c8:52:f5:22:87:5f:f8:21:79:9d:1c:1f:c0:d7:87:8f:fe:
aa:fa:2f:bf:7c:14:d2:d7:b5:8c:c0:09:ad:0b:d0:ef:01:44:
9d:a9:73:b0:69:bd:9a:00:f3:88:b1:84:b3:2d:4d:c7:9c:16:
f4:71:1e:3f:78:7b:c4:c8:aa:14:e3:f6:a9:36:2f:42:f7:38:
91:2e:fd:7f:22:ca:5c:81:ab:7a:ab:fe:9d:ae:6e:ba:50:24:
c8:fa:24:3d:ff:9f:c8:9d:d1:07:07:7c:bb:22:ce:af:3c:21:
92:67:4d:c3:14:5f:83:63:e7:82:87:43:0d:ba:b5:34:f3:82:
c2:5a:c3:32:85:c7:5b:fb:8f:d2:40:27:d0:e5:6f:96:28:3a:
b6:bb:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 20:52:16 2023 by rpki-client on console-ams.rpki-client.org