Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/3c470dd7-b8e6-3fa9-aee9-c2dcac508a9f.roa
File: 3c470dd7-b8e6-3fa9-aee9-c2dcac508a9f.roa (raw, json)
Hash identifier: jxT8uU+asF5dLAhj054aA1jYEv7LOEGBTuC+dzD0Ik8=
Subject key identifier: CC:48:9C:54:E8:B7:E5:26:62:BA:95:49:1A:89:5A:29:E1:A3:96:6D
Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
Certificate serial: 010D0C9F43285842C236E171F2FBE3BEDCBBAC00
Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/3c470dd7-b8e6-3fa9-aee9-c2dcac508a9f.roa
Signing time: Thu 03 Aug 2023 05:02:40 +0000
ROA not before: Thu 03 Aug 2023 05:02:40 +0000
ROA not after: Wed 01 Nov 2023 05:02:40 +0000
asID: 16509
IP address blocks: 208.99.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c2:36:e1:71:f2:fb:e3:be:dc:bb:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
Validity
Not Before: Aug 3 05:02:40 2023 GMT
Not After : Nov 1 05:02:40 2023 GMT
Subject: CN=c83567b8-133c-48da-a5c4-9fa42a5b700b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:28:75:85:6b:a0:5e:5b:1c:2c:08:c6:6a:
75:e4:c2:90:1c:ac:37:db:af:89:64:70:33:42:47:
37:14:fc:28:1b:f5:0f:7d:60:c6:b9:e0:4c:f3:fd:
be:7b:1c:ba:1c:da:3a:b7:0b:81:12:20:8e:4e:28:
de:5e:eb:50:46:50:da:90:07:2d:b0:13:08:58:6e:
e7:7e:30:58:15:4f:2d:2a:d0:14:5f:6b:f1:cc:28:
e4:cd:69:dd:43:fe:d7:7a:6d:b7:7e:88:2f:57:ad:
d4:39:7b:75:29:cd:a8:4d:20:2f:8f:2d:a8:83:8b:
9d:a3:5d:07:7a:db:03:da:0f:87:26:3e:4d:fc:7a:
11:05:71:21:dc:08:9f:97:3a:82:e5:37:2e:14:90:
9b:b4:0c:62:8a:09:2d:66:42:2c:81:35:96:ae:c1:
6f:d5:79:17:57:61:c4:8c:e0:65:93:12:1f:10:9f:
be:ec:f2:9b:2d:55:97:14:a6:9a:eb:5f:1c:ea:09:
dd:cf:29:50:e1:52:71:aa:9c:3f:49:26:67:48:d0:
9c:01:3f:c6:39:ae:39:e6:24:19:57:61:c9:e7:ab:
62:14:f6:3e:c2:d9:71:71:99:61:1c:d5:a1:f4:f4:
2a:ab:73:8b:b7:50:48:87:a4:7b:6c:62:bb:38:00:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:48:9C:54:E8:B7:E5:26:62:BA:95:49:1A:89:5A:29:E1:A3:96:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/3c470dd7-b8e6-3fa9-aee9-c2dcac508a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl
X509v3 Authority Key Identifier:
keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:fe:16:93:cf:9a:ca:51:62:7a:74:f1:65:6e:8d:98:35:5a:
46:65:6c:ed:2d:2a:84:86:5e:25:6d:21:a3:31:09:fa:5d:c9:
c2:7f:66:01:4b:d9:02:4f:69:4c:e6:1a:79:2b:47:2d:62:df:
71:c1:c1:52:98:27:ba:f7:47:f2:e1:c4:be:1b:cf:60:3f:a0:
36:17:a5:db:59:49:fc:a5:21:53:83:ad:d3:a5:d4:42:97:55:
d7:e1:a5:a1:aa:82:b6:41:bb:0e:8c:e0:76:03:1c:08:01:b3:
93:2f:f7:87:a0:1d:80:17:c8:83:7f:b0:90:cd:3b:2e:44:70:
64:14:b7:fe:e2:56:95:ef:76:56:93:ab:46:7b:39:66:6c:59:
6b:7a:73:97:28:af:a5:25:ed:55:3f:75:b1:87:fe:f2:9f:d0:
b7:63:5c:34:54:ca:7c:02:33:aa:56:df:73:76:08:ca:a9:f4:
b3:b6:49:e8:b4:2a:62:41:56:00:f5:7f:92:0a:12:e4:5e:72:
27:2d:ec:33:88:a2:19:7e:24:9a:04:99:35:39:69:42:ba:02:
29:f8:33:ac:0b:d6:27:55:ee:a5:c6:1c:c6:30:22:1c:ca:cb:
65:01:38:8a:1a:43:49:6a:0e:17:49:8c:fb:bd:89:88:26:25:
fd:76:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 05:07:49 2023 by rpki-client on console-fra.rpki-client.org