Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/614464a6-b4c0-3670-86dd-f904053bf6e3.roa
File: 614464a6-b4c0-3670-86dd-f904053bf6e3.roa (raw, json)
Hash identifier: cRaCDw1/lCg6qvwplN3rbAn8j9f0zifO6k5AzjcDAec=
Subject key identifier: 57:C8:92:EF:22:92:36:86:97:DB:56:F4:C1:23:04:36:20:9F:09:8D
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F43285846586D501C17DB0842E63470D8
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/614464a6-b4c0-3670-86dd-f904053bf6e3.roa
Signing time: Thu 27 Jun 2024 02:44:24 +0000
ROA not before: Thu 27 Jun 2024 02:44:24 +0000
ROA not after: Wed 25 Sep 2024 02:44:24 +0000
asID: 7029
IP address blocks: 209.250.3.0/24 maxlen: 24
209.250.12.0/24 maxlen: 24
209.250.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 21:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:58:6d:50:1c:17:db:08:42:e6:34:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Jun 27 02:44:24 2024 GMT
Not After : Sep 25 02:44:24 2024 GMT
Subject: CN=a77b5c86-8b60-4ade-b786-a666c88c9716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ef:78:69:16:3d:b4:4e:13:5b:9f:62:1c:ac:
f4:1f:5f:7b:10:4c:8f:2e:d8:a9:54:9f:50:f5:d0:
f8:09:df:69:e9:83:62:78:8d:97:53:1d:f2:59:d9:
88:82:31:f1:77:52:85:ad:05:55:9d:59:ab:9d:5a:
53:37:31:e4:75:a9:9c:bd:91:fb:1f:dc:44:4d:a8:
9a:5f:ff:8d:7f:3d:e1:19:55:98:5b:7b:24:90:41:
e9:74:aa:38:fa:cb:52:6e:8b:06:5b:7f:43:f1:bf:
65:9b:56:1a:62:6d:34:e9:8f:d9:ce:f0:3c:10:1b:
b5:44:6c:28:2f:dd:f9:8f:f5:76:4b:2d:0f:68:63:
ac:db:5d:de:4b:9f:8d:80:f8:21:c9:4c:f2:65:5c:
71:b4:54:77:75:cd:65:46:89:4f:c2:4b:00:84:74:
d2:a4:b8:bf:71:d0:5e:7c:99:0d:f4:94:51:23:67:
67:f2:c7:3f:9c:c4:6b:87:b6:a0:51:4e:f8:92:e4:
d9:50:23:d4:e7:99:8f:7c:4b:11:10:13:fc:be:48:
8d:8d:e1:e8:69:04:3f:b7:9f:c4:cd:b9:19:28:19:
bb:6e:5c:c1:a2:a6:c6:5a:08:c6:f9:9f:58:6b:71:
c3:64:1f:a7:17:34:93:cb:1e:74:da:50:7d:84:8d:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:92:EF:22:92:36:86:97:DB:56:F4:C1:23:04:36:20:9F:09:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/614464a6-b4c0-3670-86dd-f904053bf6e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.3.0/24
209.250.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:63:39:f1:02:36:6d:66:fa:c1:41:09:5d:86:27:08:b5:61:
37:a0:f6:73:01:e4:ea:9e:8c:5b:eb:f5:16:b2:ca:37:23:38:
f0:23:c1:0f:e3:d2:59:5b:95:93:14:d6:cd:a7:4a:36:c2:41:
f7:0d:8d:68:6a:98:75:77:06:fb:6b:91:79:dd:05:9c:06:f4:
f6:7e:eb:aa:19:1c:5b:b3:23:88:4c:c4:ab:a2:77:db:98:2a:
99:7b:59:c3:76:06:9e:37:3c:ba:e0:4d:57:cf:ec:bd:40:02:
92:20:86:c8:bb:94:a5:ce:f0:02:38:82:78:f9:78:57:ea:60:
13:bd:b8:98:0b:0e:f4:0b:c0:d9:c5:ad:56:b9:4a:53:9a:09:
58:c1:16:82:22:6a:eb:7f:33:d7:55:71:9a:2e:86:11:0e:f0:
90:da:25:4b:a4:5c:fa:1b:f6:77:da:58:8b:91:e8:98:54:5b:
af:e7:85:9e:cb:1d:1c:6d:a1:56:2d:31:26:7a:bc:56:d4:3d:
91:ed:be:24:07:cf:fc:7f:39:d2:bc:63:d6:1e:4f:04:7c:cd:
ae:f8:79:29:08:85:37:2b:cb:73:81:12:50:61:8a:ed:03:7e:
a5:47:ff:3c:d7:bf:5b:62:19:15:e2:6a:84:b2:51:d5:b7:59:
eb:d3:d5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 00:50:36 2024 by rpki-client on console-fra.rpki-client.org