Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7636e0a6-428a-30da-8582-3be69c5e1935.roa
File: 7636e0a6-428a-30da-8582-3be69c5e1935.roa (raw, json)
Hash identifier: 9p1zXWHv2SdkrHAghFn6jmsQi2Q9XgvrvXNPbJLOBoY=
Subject key identifier: 41:F6:3F:70:16:76:FA:4F:EC:6A:1F:0D:52:C4:1A:A6:01:93:68:FC
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F43285843719FC1628DF19E54625B3E80
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7636e0a6-428a-30da-8582-3be69c5e1935.roa
Signing time: Thu 05 Oct 2023 01:00:24 +0000
ROA not before: Thu 05 Oct 2023 01:00:24 +0000
ROA not after: Wed 03 Jan 2024 02:00:24 +0000
asID: 36352
IP address blocks: 64.20.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:71:9f:c1:62:8d:f1:9e:54:62:5b:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Oct 5 01:00:24 2023 GMT
Not After : Jan 3 02:00:24 2024 GMT
Subject: CN=94ab94dd-9033-42a6-b12f-c73c16722d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:40:81:ba:79:b1:72:f6:78:cd:60:b7:6a:
44:43:53:8a:41:a7:fe:22:de:8d:25:84:bc:08:14:
4b:31:f7:f0:2b:d4:a1:8a:04:06:26:1a:18:68:3b:
bf:58:33:e0:ef:61:45:d6:20:e0:e9:09:e7:fd:72:
18:5e:39:a8:d5:1a:1c:81:23:f4:db:54:9a:76:49:
4a:0a:66:56:c4:fa:31:6c:77:da:8f:29:75:3b:19:
cd:43:78:0f:c8:99:fc:e9:4d:9c:14:20:07:ac:e2:
df:e6:af:fb:7c:aa:c3:f8:ef:84:16:17:19:02:26:
8e:ac:85:b8:86:14:16:5f:4c:01:97:2d:c9:19:09:
e2:ff:2d:56:26:c1:52:c6:d0:2c:66:b5:3d:26:da:
f7:8a:2b:a6:af:47:82:e2:79:1c:f2:53:0d:78:2e:
a1:36:59:fe:82:a6:67:11:4a:7d:84:c9:93:4d:87:
ba:2f:a9:83:71:10:c2:7e:9a:ed:27:64:15:e3:bb:
4b:1c:97:11:07:43:13:95:ad:09:47:c3:a3:f1:9a:
82:d9:78:d4:d5:49:91:57:37:b8:c6:e6:ad:a5:c5:
88:fc:4a:17:86:e3:cf:41:13:55:c3:94:b8:ac:f0:
84:b7:b6:20:62:74:b2:45:1c:d6:f0:d8:af:92:9c:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F6:3F:70:16:76:FA:4F:EC:6A:1F:0D:52:C4:1A:A6:01:93:68:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/7636e0a6-428a-30da-8582-3be69c5e1935.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:fa:b9:e7:7a:6e:23:e5:10:36:50:c8:3d:ce:6e:26:56:7f:
9f:68:79:83:6c:66:9c:c1:2e:fe:ec:98:7d:58:c0:4f:d5:55:
9a:fd:6e:89:24:52:44:0e:fb:68:41:08:ba:18:11:d1:1c:0a:
19:69:2b:b0:44:1a:23:8b:0b:3a:05:53:b8:d7:ac:e3:39:ab:
66:c8:94:f2:77:54:a5:72:99:0f:ff:43:9d:ce:d4:5f:21:51:
2b:57:9f:4e:cb:a8:6d:d9:a9:6f:bc:73:88:09:fb:73:0c:71:
93:e7:81:20:14:2f:e0:1f:6e:00:47:31:87:e8:79:b2:a0:49:
8e:98:5c:67:cc:b6:3e:ce:c8:22:7d:46:28:e0:cb:6a:13:6c:
48:85:c6:78:a2:8e:14:0d:28:5b:fe:da:20:bb:55:0b:c4:1c:
31:26:ea:60:a7:af:59:7a:52:4a:29:00:f1:76:75:98:9c:df:
3e:ad:bd:1c:39:4b:1f:38:79:ab:a7:f6:a9:35:83:ec:c5:08:
e5:7f:ec:1d:59:38:c3:31:5e:fd:91:94:d2:18:40:72:22:91:
6d:88:5c:11:b0:7a:6a:11:09:fc:36:21:18:e1:ad:92:68:fe:
5f:da:72:51:b9:c3:32:73:76:cd:55:ab:28:de:cf:b4:ee:4a:
a9:c8:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 23:01:12 2023 by rpki-client on console-fra.rpki-client.org