Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/827d1434-859e-3658-b5f1-1bc7da8cfd3f.roa
File: 827d1434-859e-3658-b5f1-1bc7da8cfd3f.roa (raw, json)
Hash identifier: HWTFnH6S0hMLAfGMF5QiQ3yJBqO8Bl5+w4SlH9Hubv8=
Subject key identifier: 78:23:C0:69:F1:E6:46:77:FF:BE:F9:FD:54:73:3B:2C:75:40:96:73
Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial: 010D0C9F4328583B80A7A934CE6EBD85A2E07960
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/827d1434-859e-3658-b5f1-1bc7da8cfd3f.roa
Signing time: Wed 06 Oct 2021 04:00:00 +0000
ROA not before: Wed 06 Oct 2021 04:00:00 +0000
ROA not after: Wed 01 Jan 2031 05:00:00 +0000
asID: 62880
IP address blocks: 64.147.212.0/23 maxlen: 24
64.147.214.0/24 maxlen: 24
64.147.215.0/24 maxlen: 24
72.27.236.0/24 maxlen: 24
72.27.237.0/24 maxlen: 24
72.27.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 May 2022 16:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:80:a7:a9:34:ce:6e:bd:85:a2:e0:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Validity
Not Before: Oct 6 04:00:00 2021 GMT
Not After : Jan 1 05:00:00 2031 GMT
Subject: CN=4eb3156a-08b8-454b-8957-18a85eeeebcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5e:18:6c:23:10:54:84:3a:94:45:bb:ae:15:
75:86:91:e6:f4:de:07:70:aa:8b:8c:ad:c1:75:c5:
b8:bc:45:e5:56:5e:5c:be:40:76:a8:e0:1f:a9:c3:
c6:cf:cd:36:aa:c1:d5:5d:ba:f4:4e:64:bd:9e:2e:
5f:59:cb:e4:01:33:50:48:24:8b:5d:1a:06:0f:73:
7c:4f:6c:b1:6c:ac:f3:39:d0:ae:7e:86:ac:0f:d5:
91:02:65:c4:25:1b:12:d6:81:91:3a:42:00:9b:9a:
13:da:a5:45:4f:ad:96:b0:54:80:30:ad:d5:4b:63:
47:ce:b3:13:b4:85:e0:6d:0d:73:bd:cd:cb:83:24:
dc:c1:70:68:f7:21:b6:d8:17:19:54:1c:bb:5d:0b:
49:45:d2:9f:f5:c9:da:1c:a4:17:9d:ab:3c:83:e0:
d1:cb:6b:fa:6d:83:2a:86:6b:ad:43:16:0d:e7:2d:
4a:94:16:1a:f6:54:0e:77:2d:69:c1:4f:ca:5c:ea:
95:2c:fa:a8:10:27:0e:68:7f:18:67:91:58:8f:74:
6d:aa:f0:5c:53:46:e4:5b:c6:53:c3:1a:85:67:8e:
d3:08:f2:db:be:43:78:7f:5f:4f:24:77:84:10:cc:
5e:74:45:06:27:ae:42:63:db:09:20:c6:58:ed:9f:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:C0:69:F1:E6:46:77:FF:BE:F9:FD:54:73:3B:2C:75:40:96:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/827d1434-859e-3658-b5f1-1bc7da8cfd3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
X509v3 Authority Key Identifier:
keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.147.212.0/22
72.27.236.0-72.27.238.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:1f:43:8c:2e:40:23:02:5b:5b:a7:9b:e7:1e:ab:97:3f:f8:
95:97:68:f4:17:8f:48:39:b8:46:16:ff:47:69:90:6b:d0:3d:
f5:fe:b1:0c:ba:e3:8f:15:ac:97:c7:a8:34:f2:78:2b:99:75:
5c:6a:7f:f5:3f:38:a8:13:ef:88:af:0c:ee:fd:8c:95:fd:0a:
7e:22:03:22:5b:05:3d:db:98:b5:65:08:7e:d4:3f:cb:cf:8f:
65:3d:46:f3:ea:65:51:80:ed:88:34:b5:89:c5:57:a0:4b:4f:
20:a4:22:ed:96:21:23:e1:61:17:86:42:58:de:c3:6b:f7:8b:
69:39:49:0a:0e:a7:42:89:a5:68:b1:a0:d5:e1:81:8b:19:83:
3a:ca:77:bb:84:cc:4c:51:f0:23:ab:95:d0:c9:89:e5:55:a2:
a6:bf:79:9d:0f:94:4e:3b:e9:44:02:b4:ee:8d:90:0c:b5:64:
cf:1e:83:bd:45:e6:6f:17:47:1e:a7:45:91:f6:6c:b7:8f:45:
05:79:c8:d1:a2:fb:ee:e7:ab:60:a0:6b:a2:53:fb:de:27:a9:
b3:69:f9:3c:f3:5a:bb:29:43:ee:c7:8a:9f:de:76:77:fe:ad:
8c:ca:02:47:62:53:eb:1e:1c:2a:86:8c:b1:2f:80:fd:31:c1:
9d:29:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:04 2024 by rpki-client on console-fra.rpki-client.org