Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b271f54e-4562-3903-9923-daf4d71d7d2d.roa
File: b271f54e-4562-3903-9923-daf4d71d7d2d.roa (raw, json)
Hash identifier: oVWPR0RKUeKjwLJoeYBz9hpLeO95AoNlZoEZUIcwZIU=
Subject key identifier: EF:A0:7F:83:61:8E:3A:50:F6:D2:19:93:12:8B:41:00:58:34:14:8F
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F43285846FE55A8A9A39032D5FCA916D0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b271f54e-4562-3903-9923-daf4d71d7d2d.roa
Signing time: Sun 25 Aug 2024 13:00:40 +0000
ROA not before: Sun 25 Aug 2024 13:00:40 +0000
ROA not after: Sat 23 Nov 2024 14:00:40 +0000
asID: 394487
IP address blocks: 96.2.221.0/24 maxlen: 24
96.2.222.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 17:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:fe:55:a8:a9:a3:90:32:d5:fc:a9:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Aug 25 13:00:40 2024 GMT
Not After : Nov 23 14:00:40 2024 GMT
Subject: CN=b94ec8d0-bb52-437c-940a-67165c1b65df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:ea:5f:e0:d4:19:ab:7b:01:a6:6d:c5:6f:
c9:85:12:f6:af:f1:93:ee:79:ee:c0:22:77:6d:cc:
04:92:1c:f1:0d:e3:e4:7b:39:36:83:64:d3:55:53:
4c:96:c4:d6:61:e4:f0:de:1c:81:0d:01:09:65:64:
89:49:7c:b7:9c:bd:f4:c0:95:f6:f4:af:f9:39:a2:
1a:ab:8f:15:a7:33:2a:e7:bb:6a:da:1f:2c:c8:9c:
6a:32:e4:b4:6b:9d:46:55:fa:dd:71:df:17:f0:41:
4d:51:12:d6:fe:37:46:d5:28:8d:ee:55:f5:88:0c:
7a:21:23:20:75:ba:ac:90:e2:7f:cb:db:e7:72:e8:
52:c9:2d:01:e9:16:4d:7c:0c:bb:52:29:d5:f0:3d:
29:24:64:29:af:f8:93:d4:d7:6c:05:70:26:3f:27:
dc:8e:19:09:b7:b9:dd:af:9e:f0:e1:95:ea:0d:7a:
3e:f4:0f:73:92:b2:5a:44:36:8f:05:9b:d8:9a:4d:
86:02:19:17:7d:e1:41:65:a1:ae:1f:2f:6b:5e:70:
c1:a4:71:d0:c2:8a:3c:a0:d7:24:f0:71:6c:54:63:
82:9d:97:e8:0a:6c:96:29:d2:4b:d0:84:3f:8f:8c:
f8:ce:08:e0:39:2c:56:34:a4:64:ec:7b:d7:ce:88:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A0:7F:83:61:8E:3A:50:F6:D2:19:93:12:8B:41:00:58:34:14:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/b271f54e-4562-3903-9923-daf4d71d7d2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
96.2.221.0-96.2.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:e1:6b:e7:01:5f:5e:41:af:4a:96:6e:65:55:76:0f:8b:e5:
01:1d:c2:b5:17:94:38:3b:88:3c:cb:d5:37:e1:ce:08:da:b2:
44:ca:2c:d7:52:68:09:cc:b1:a5:ae:2d:99:f7:d3:06:0e:e9:
9f:cf:6a:cf:78:6a:fc:dd:b9:d4:c6:a1:bb:a3:b5:39:57:1a:
98:bf:74:b6:7e:a3:c5:e4:75:c0:d8:4a:fb:f5:6e:0e:cd:4a:
64:da:ce:4d:fc:95:8b:15:66:a3:9a:43:94:ec:68:bd:09:42:
f3:f2:af:b3:2e:db:6a:93:3a:ae:9d:f8:9c:e3:55:9f:b6:96:
b4:0f:c4:f9:dc:a5:7d:67:bc:b1:0d:ff:72:7d:24:3d:81:da:
e6:6d:39:e6:83:6f:cd:36:f3:cd:a9:39:c8:57:ac:c1:97:39:
a4:bb:be:d0:6f:4d:60:86:4f:76:06:e4:50:11:a9:52:14:d1:
bf:6e:4f:48:b8:17:3d:e5:3c:e5:5e:51:c8:e4:83:65:0e:72:
b0:9b:7b:d5:98:bc:61:69:90:7e:56:75:b7:ac:14:b8:fb:f9:
3d:7e:c4:b1:a1:bb:22:c4:6e:b1:09:51:e4:2e:7e:d6:6e:44:
7e:71:a8:5c:91:89:4c:84:10:be:f5:e9:e1:35:71:12:96:71:
78:eb:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 19:47:55 2024 by rpki-client on console-fra.rpki-client.org