Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/231d0e01-7462-32fe-ab91-2ded2b8a171a.roa
File: 231d0e01-7462-32fe-ab91-2ded2b8a171a.roa (raw, json)
Hash identifier: i6XsIp8JFALz5pngaQJgMQnjb2Xgv6HANYsRadXum+g=
Subject key identifier: 9D:BD:10:BC:58:54:1E:21:08:7C:80:B5:A5:2C:50:02:A2:02:2E:C7
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285846DFA00F12F1CC5BDE390D4980
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/231d0e01-7462-32fe-ab91-2ded2b8a171a.roa
Signing time: Wed 14 Aug 2024 13:00:38 +0000
ROA not before: Wed 14 Aug 2024 13:00:38 +0000
ROA not after: Tue 12 Nov 2024 14:00:38 +0000
asID: 13536
IP address blocks: 209.94.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 12:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:df:a0:0f:12:f1:cc:5b:de:39:0d:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Aug 14 13:00:38 2024 GMT
Not After : Nov 12 14:00:38 2024 GMT
Subject: CN=fca7f248-9e61-45ff-9754-ecf0b04aa6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:e1:b3:60:b3:7d:e5:15:c4:70:9d:6e:d0:
f2:c3:02:95:51:1b:f4:2d:52:e2:c4:95:cb:da:0d:
e3:97:a2:6d:30:31:4d:43:7b:92:d1:5c:9b:71:03:
af:0a:a4:93:bb:9e:9a:72:74:a9:a3:a1:ee:6e:cb:
8c:63:39:38:90:de:8b:9a:c5:49:33:11:d8:0f:6a:
de:ce:db:ab:78:21:46:0e:ef:be:7f:37:76:b3:fc:
12:82:44:b4:d6:5f:d7:d9:b6:a4:df:e9:f2:6c:2b:
58:90:b8:7e:64:f9:82:76:92:b3:b4:da:08:ab:f1:
31:71:b5:d4:ee:64:77:44:a2:b6:cd:1f:af:e2:0e:
30:80:f2:d6:ae:5a:9b:36:94:23:c3:9d:5d:50:24:
ab:77:a9:44:1a:d5:50:92:ba:0b:bb:63:c6:f9:a6:
ce:23:18:52:4c:a9:f3:82:fd:16:02:01:69:78:20:
7d:0e:98:89:e7:61:1b:de:9b:df:79:64:a5:74:3c:
9b:5f:72:ef:70:bf:51:0f:48:e1:d5:2d:8f:dc:81:
1d:8e:ea:3a:d8:e8:05:f7:cf:b3:9f:d3:12:e1:e0:
1f:02:cd:f0:71:28:0f:a5:82:2c:71:18:b9:c0:63:
85:15:f5:9c:b8:90:f3:83:1c:58:0d:08:39:25:92:
50:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BD:10:BC:58:54:1E:21:08:7C:80:B5:A5:2C:50:02:A2:02:2E:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/231d0e01-7462-32fe-ab91-2ded2b8a171a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.94.103.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:36:dd:7c:26:a9:8f:9e:a6:3c:2c:aa:d1:42:f8:ee:04:23:
d7:b3:ee:e8:89:d8:77:b9:a0:74:b9:3d:07:e0:c4:ee:1a:3e:
05:b4:fc:84:0d:84:22:1b:ee:d4:d2:d7:56:df:8e:c5:50:d5:
95:39:6e:3c:18:64:f3:6b:4e:30:00:23:35:8c:64:1d:b4:bb:
87:85:f9:b7:7a:90:1f:2c:a3:8f:bf:bb:49:0d:37:2b:18:85:
68:1b:15:d3:a9:dd:59:41:39:4e:06:ab:80:cd:16:55:51:80:
5f:25:26:2b:b8:47:f6:68:1c:d3:da:18:ff:4b:d2:17:58:bd:
3b:e0:31:12:7d:1f:d4:47:78:1a:c6:b6:4d:d6:42:7c:f9:4a:
b1:9b:62:a9:0a:55:f7:e6:3c:d3:db:ab:56:c0:0f:cc:06:6f:
88:be:b0:de:8c:b7:74:5b:bd:94:27:f9:a9:05:56:fc:ae:44:
6c:db:f3:3c:1f:dd:a6:85:09:dd:df:8a:4c:ae:5b:95:b2:f6:
c4:52:80:d7:80:a5:7d:ea:1e:24:8c:4f:13:f6:21:3e:11:c9:
80:99:4f:d3:60:2e:8c:b9:28:d7:56:df:6c:ac:ef:32:10:77:
80:1f:b7:ed:a1:ca:fd:59:ee:31:30:db:af:9b:1f:a1:0d:6a:
35:3c:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 15:59:07 2024 by rpki-client on console-fra.rpki-client.org