Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/1b5e1fa3-0011-3ebe-ba9d-f6f5e3d61571.roa
File: 1b5e1fa3-0011-3ebe-ba9d-f6f5e3d61571.roa (raw, json)
Hash identifier: pOCoKFmx8nShFaCZmtZUtCGQ79igzgydcfblryCkWvQ=
Subject key identifier: 21:97:8C:16:EA:49:92:03:65:A6:1C:10:5F:93:F1:76:4F:66:14:B6
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F4328583C333B49FB1A77E87001E04840
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/1b5e1fa3-0011-3ebe-ba9d-f6f5e3d61571.roa
Signing time: Wed 06 Oct 2021 04:00:00 +0000
ROA not before: Wed 06 Oct 2021 04:00:00 +0000
ROA not after: Mon 06 Oct 2031 04:00:00 +0000
asID: 53274
IP address blocks: 64.147.222.0/24 maxlen: 24
72.250.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:33:3b:49:fb:1a:77:e8:70:01:e0:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Oct 6 04:00:00 2021 GMT
Not After : Oct 6 04:00:00 2031 GMT
Subject: CN=347dd94e-3d64-4c54-ac6d-4ebf979d81b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:32:c8:a0:0f:56:3b:87:5c:66:44:02:01:
8a:b5:28:15:8d:62:59:24:f3:b7:80:33:ff:2b:96:
0c:9e:92:01:4d:20:c1:3c:6d:bf:fa:c1:db:92:fb:
a2:43:9d:16:c9:ae:43:49:af:92:12:35:90:0b:28:
cc:55:a8:ca:bc:f8:f9:39:08:8d:c8:d2:fc:67:8a:
57:0c:10:81:22:bb:fb:eb:1b:46:6c:d7:99:bb:9f:
b4:61:84:e9:04:c0:1a:d6:53:bb:06:c6:57:9d:6e:
12:55:e7:2e:15:84:4b:28:a6:21:7c:36:56:27:98:
6e:14:0b:78:83:7a:1f:7b:69:31:f1:f1:3b:64:6d:
12:c8:6d:8f:f3:bb:92:ba:d8:25:b2:e7:3f:1c:cd:
ed:0a:38:87:9d:21:23:64:f3:d3:a1:01:1f:81:da:
2d:93:0d:58:74:82:05:ab:ac:86:0f:fc:7d:73:f4:
b5:a2:75:9c:a3:d0:1c:5c:8e:d8:4a:56:3b:57:7b:
a7:4e:18:51:62:49:f4:c9:43:98:4a:08:ee:75:eb:
21:ee:a3:87:43:f6:80:21:d2:fd:5e:07:46:17:3d:
63:b6:ff:c6:f5:9f:d3:a3:80:28:66:92:82:f1:36:
70:64:8c:99:10:93:f7:ec:b5:24:f4:93:0b:c4:43:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:97:8C:16:EA:49:92:03:65:A6:1C:10:5F:93:F1:76:4F:66:14:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/1b5e1fa3-0011-3ebe-ba9d-f6f5e3d61571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.147.222.0/24
72.250.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:83:ba:88:b9:d3:11:14:7c:5d:8f:96:43:5f:8e:19:2d:f4:
c9:49:f5:54:75:d5:f1:56:f5:95:9b:79:62:53:47:84:bb:11:
00:69:7d:41:11:2c:6a:74:97:a2:5c:41:c1:90:66:37:68:8c:
dc:91:1e:21:15:ff:cb:6c:b6:cb:b6:df:98:84:8b:b8:60:e4:
cf:5c:d1:12:a0:50:24:16:d4:15:df:45:89:ea:f6:a6:37:af:
d8:44:fa:ac:24:f9:19:2a:b4:66:82:1f:54:42:72:f7:29:49:
7c:25:e3:5e:bd:a7:81:23:86:bc:2b:37:a0:f2:25:23:c2:b0:
da:05:36:52:3d:f9:47:36:97:f8:44:d1:9a:33:05:ba:6a:0f:
09:98:f0:26:7b:36:76:c3:84:96:a0:9f:b2:51:0e:0b:1e:44:
c8:57:7d:df:3d:78:88:17:f8:8b:50:24:2c:55:0c:7f:e1:f2:
c0:5e:bb:65:62:b8:47:59:0a:97:cb:87:f6:7e:85:c1:82:f5:
ca:8c:93:52:26:0e:89:70:82:2d:97:95:13:4d:25:80:fe:ce:
3e:f9:83:0a:4d:40:3c:94:4b:c5:6d:5d:b0:8f:89:26:b7:fd:
e8:fe:de:fb:83:c6:d2:10:53:3f:f1:4c:bb:41:00:cd:04:37:
5a:64:80:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org