Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/cd00ca34-598e-3eb4-bc51-26affb535f9e.roa
File: cd00ca34-598e-3eb4-bc51-26affb535f9e.roa (raw, json)
Hash identifier: ufyyX/QCEH9VKgQmdkTuM4arz9U7APfL0A7I/nD26l8=
Subject key identifier: 07:AC:15:99:6B:6D:33:62:7C:DA:0B:11:79:66:2B:42:F2:FD:1D:1D
Certificate issuer: /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial: 010D0C9F43285842C4542C581D202241FE600AE0
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/cd00ca34-598e-3eb4-bc51-26affb535f9e.roa
Signing time: Thu 03 Aug 2023 23:13:18 +0000
ROA not before: Thu 03 Aug 2023 23:13:18 +0000
ROA not after: Wed 01 Nov 2023 23:13:18 +0000
asID: 834
IP address blocks: 208.99.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c4:54:2c:58:1d:20:22:41:fe:60:0a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
Validity
Not Before: Aug 3 23:13:18 2023 GMT
Not After : Nov 1 23:13:18 2023 GMT
Subject: CN=0feb447c-066e-4440-903f-92db89f844e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:2d:c2:0d:a4:9e:79:29:fd:8a:95:f3:44:
b3:ab:0a:9b:2c:7e:6d:7e:bf:74:0f:2b:79:82:1d:
f0:9d:95:b7:3b:e8:a6:20:4a:1d:85:2c:5b:33:91:
9f:67:0e:e7:96:0e:2e:d7:a1:c2:0e:ec:f9:9d:ed:
5f:4d:b9:15:c3:71:1c:bd:b9:77:a7:2e:5e:e8:0a:
9e:f5:3b:61:37:6e:7f:d9:32:f6:cf:4f:b2:bf:16:
5b:f9:6f:2a:e2:ad:fe:57:c3:33:19:6f:18:a9:43:
22:75:0a:f8:62:1c:ea:69:b5:84:77:a9:d7:0a:8d:
23:39:c3:71:62:b3:58:41:33:23:85:4a:6f:00:c4:
6a:ef:02:ae:01:8c:a4:bc:61:c3:63:fe:ff:bf:42:
ab:60:c3:88:99:af:fc:02:f0:d3:8c:cd:60:03:0b:
9f:e7:df:8d:ad:99:64:c4:5e:f7:e2:fa:23:16:23:
b9:b8:19:7c:aa:3c:82:fe:95:b7:73:21:c6:58:28:
a4:70:01:12:ed:73:64:90:94:cf:3f:c3:af:f6:35:
45:27:aa:f8:f6:08:8e:1d:de:e7:5c:62:60:97:17:
c9:0c:6c:c1:81:62:ba:58:c8:5c:dd:c4:57:e0:44:
92:4c:52:5f:8d:26:fa:b3:89:61:84:6e:12:05:40:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:15:99:6B:6D:33:62:7C:DA:0B:11:79:66:2B:42:F2:FD:1D:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/cd00ca34-598e-3eb4-bc51-26affb535f9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl
X509v3 Authority Key Identifier:
keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ad:e8:db:b0:33:fa:a8:87:41:c0:a0:1b:4a:e2:b4:b0:07:
12:75:bd:53:1d:71:6b:f8:b6:b8:30:23:db:b3:f1:6a:d9:3d:
1c:9a:e0:f3:00:fc:4f:01:46:22:ce:27:37:f5:ce:ae:08:06:
ec:c3:05:8e:68:fc:1e:94:b2:bd:39:29:1e:ec:62:63:72:5f:
1c:6b:9a:82:a1:7f:16:f5:8c:89:fc:ba:60:96:39:ce:97:a0:
11:79:b9:46:7e:c3:1f:80:da:d3:0a:b9:92:f9:3e:36:c6:56:
ab:f9:2b:b2:16:41:51:d6:21:8c:38:16:39:ff:7a:50:21:dd:
7e:ae:f8:bf:4b:02:f2:66:07:40:e7:1c:c5:2a:50:16:ae:ad:
cf:0c:63:73:5f:6e:52:47:4e:29:05:ea:b4:bf:da:f1:c7:61:
d0:4e:64:46:70:60:56:1e:64:ab:9c:6c:86:60:f9:37:07:19:
31:3f:79:53:2a:84:95:7e:e5:0b:d1:06:e4:cb:3a:49:2f:32:
38:8b:96:03:01:31:ee:af:b2:7b:6a:0b:b4:36:05:98:55:ee:
9f:fb:68:42:04:5a:9c:b1:b7:44:a7:88:1c:4d:93:01:26:cb:
0c:e2:c4:03:00:39:d5:c6:13:54:c8:5a:4d:80:9d:89:f7:42:
ae:ab:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 12:30:03 2023 by rpki-client on console-fra.rpki-client.org