Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8fa0119-dc09-34fb-9175-05d3a0c7220b.roa
File: a8fa0119-dc09-34fb-9175-05d3a0c7220b.roa (raw, json)
Hash identifier: 3EFIWYRU0sYJIMtpmLPvSqwjGzONrF8BT9zbaNDNX0Q=
Subject key identifier: 34:AA:CB:D0:B9:52:DD:D2:A4:FD:25:C5:DE:C8:EC:37:39:D8:6B:DA
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285845C179158EACB44B67AA5D2800
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8fa0119-dc09-34fb-9175-05d3a0c7220b.roa
Signing time: Sat 04 May 2024 01:00:25 +0000
ROA not before: Sat 04 May 2024 01:00:25 +0000
ROA not after: Fri 02 Aug 2024 01:00:25 +0000
asID: 21859
IP address blocks: 107.151.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 04 Jul 2024 10:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:c1:79:15:8e:ac:b4:4b:67:aa:5d:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: May 4 01:00:25 2024 GMT
Not After : Aug 2 01:00:25 2024 GMT
Subject: CN=65fc028e-d4d9-4cd7-bd13-702fae0e55ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:c9:61:a4:e4:e9:8d:be:53:94:e3:2a:2c:
23:63:51:ae:31:f3:d6:36:34:84:03:88:5c:0f:55:
9d:09:99:c5:d5:c0:41:ce:49:81:8c:c5:52:7e:c7:
e3:4c:6e:96:61:af:a2:33:6f:5f:6b:cf:d7:fd:12:
e0:23:fd:07:13:40:9b:a2:03:6e:ed:fe:84:77:02:
13:b7:28:3e:a8:cc:a4:39:82:e3:34:05:25:82:17:
0f:e9:f6:f8:35:5a:40:7b:01:9e:ac:e3:65:22:f7:
0b:0a:4c:a3:3f:26:e5:72:88:3b:a9:16:b3:c7:f5:
65:ab:94:57:48:6d:eb:43:40:d0:b3:59:dc:29:e3:
1e:6f:40:59:c6:88:01:3a:3a:9b:08:2a:29:fe:99:
48:8e:74:1e:aa:57:bd:1b:ad:93:f4:d3:0f:21:8f:
10:37:b0:a8:3c:d3:7f:0c:1c:b5:1f:e0:1b:a8:fd:
06:1b:46:62:2b:cc:38:00:df:c5:6a:03:e0:7c:ab:
0e:e1:88:d0:ce:07:24:16:08:2e:a7:7f:5a:e4:84:
e0:7f:8d:cb:8b:88:d7:a6:b5:53:fb:fb:3c:06:86:
07:af:46:43:be:5c:95:13:6a:ca:64:1a:96:ff:3f:
fe:fd:3c:52:7f:46:97:40:23:76:31:d7:d9:2e:6d:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AA:CB:D0:B9:52:DD:D2:A4:FD:25:C5:DE:C8:EC:37:39:D8:6B:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8fa0119-dc09-34fb-9175-05d3a0c7220b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:ab:ee:fa:dd:97:ed:7a:c7:11:54:43:cc:c2:bd:75:bc:d8:
06:58:31:32:84:3c:bd:c8:eb:fe:43:3d:67:d1:73:ae:f7:fc:
7a:08:1e:29:2b:53:b6:da:01:af:df:35:a9:d5:0c:da:ae:99:
78:de:d6:76:b5:c9:b0:2a:99:ee:37:1f:7e:c9:e8:8b:18:08:
06:6f:9a:d9:57:14:b8:df:01:64:a8:2b:3d:c1:ab:4a:44:4f:
42:2e:97:f7:82:08:25:eb:50:95:22:7a:fd:3b:47:23:94:0b:
27:a0:c0:a7:2a:f3:35:e6:31:3d:d0:36:f6:6d:9a:cb:97:03:
5f:f0:78:08:cd:24:76:c7:50:12:66:77:0e:44:fd:64:44:c2:
74:2d:f4:fb:3c:6c:78:d7:a2:f5:f7:15:8e:40:7a:1f:10:96:
1c:74:b8:53:ba:c7:b0:6b:00:3b:46:fa:06:32:58:d7:2f:60:
74:58:ef:01:22:9a:24:ba:e8:d1:da:f4:05:64:9a:05:e7:c8:
05:15:8d:bb:25:e5:97:93:ec:ee:8b:89:2b:78:95:5b:0b:82:
04:d7:c7:5e:ee:10:3e:b8:bc:ee:a8:4c:9f:b4:52:14:b3:de:
3b:f2:b1:a1:a6:ce:f4:9f:98:f5:7b:20:25:0a:36:82:04:03:
84:c8:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 12:18:41 2024 by rpki-client on console-ams.rpki-client.org