Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/b3aeb60c-f4f5-3e95-86f1-d754fec67b11.roa
File: b3aeb60c-f4f5-3e95-86f1-d754fec67b11.roa (raw, json)
Hash identifier: 4HZL3ZFALfpw/Oq9N2JdtB5zx+iUY3HSFucXp+6wqwY=
Subject key identifier: EA:0E:99:6B:8B:68:0A:DD:66:8E:05:F0:C1:D4:69:29:12:11:D0:2B
Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial: 010D0C9F4328584433C40D717845A4D855D03C80
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/b3aeb60c-f4f5-3e95-86f1-d754fec67b11.roa
Signing time: Wed 13 Dec 2023 14:00:20 +0000
ROA not before: Wed 13 Dec 2023 14:00:20 +0000
ROA not after: Tue 12 Mar 2024 13:00:20 +0000
asID: 6079
IP address blocks: 209.250.26.0/24 maxlen: 24
209.250.28.0/24 maxlen: 24
209.250.21.0/24 maxlen: 24
209.250.29.0/24 maxlen: 24
209.250.24.0/24 maxlen: 24
209.250.25.0/24 maxlen: 24
209.250.8.0/24 maxlen: 24
209.250.31.0/24 maxlen: 24
209.250.9.0/24 maxlen: 24
209.250.11.0/24 maxlen: 24
209.250.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:33:c4:0d:71:78:45:a4:d8:55:d0:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Validity
Not Before: Dec 13 14:00:20 2023 GMT
Not After : Mar 12 13:00:20 2024 GMT
Subject: CN=b85f7913-c286-45aa-b7d6-dd13481e5807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:88:91:49:7d:5b:b6:40:a2:4d:bc:91:0a:37:
0d:5c:0d:92:73:3d:10:47:4e:f5:0e:76:3f:39:78:
9c:de:35:0e:3b:75:21:6c:cf:13:65:f3:94:9b:f3:
8e:45:d6:07:a6:b3:c5:17:c3:d5:f1:90:eb:46:10:
53:83:36:f4:c8:57:83:49:89:40:28:70:ee:06:48:
99:21:0c:ec:87:a4:43:49:59:89:02:71:a1:59:54:
dd:62:15:b5:24:d2:da:88:1f:37:90:d7:ed:be:e4:
0e:cd:df:80:4a:c1:66:65:fd:64:98:c8:d1:48:b8:
f2:4c:05:5c:7b:18:58:ff:06:22:7a:40:b6:5c:4f:
dc:c9:5a:eb:87:19:91:d5:75:a9:5f:4a:47:bf:f7:
54:f2:e0:d8:b6:05:54:7c:ab:9c:70:18:23:4a:a7:
c8:70:e3:61:05:f2:02:3a:1a:3a:e0:84:3c:17:66:
9f:e7:49:6f:58:06:2c:34:f2:7d:54:99:8a:ba:e8:
44:7e:ad:bb:51:0c:62:ba:d3:c3:e7:a4:44:32:75:
ae:1d:18:a1:c2:f2:2d:a3:a6:c3:ce:73:23:b6:e7:
ea:1a:4d:79:bc:6c:06:3d:e9:f1:af:87:02:7f:d7:
99:29:87:04:5a:d2:8a:cb:ff:5e:99:bf:4f:b2:05:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0E:99:6B:8B:68:0A:DD:66:8E:05:F0:C1:D4:69:29:12:11:D0:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/b3aeb60c-f4f5-3e95-86f1-d754fec67b11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
X509v3 Authority Key Identifier:
keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
sbgp-ipAddrBlock: critical
IPv4:
209.250.8.0/23
209.250.11.0/24
209.250.21.0-209.250.22.255
209.250.24.0-209.250.26.255
209.250.28.0/23
209.250.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:71:9b:79:15:01:9b:7a:ab:bd:e4:38:79:49:a8:4d:60:3e:
ac:aa:7e:9c:48:0e:17:f3:7d:5f:47:95:fc:f6:f2:fe:38:35:
63:f0:64:68:fd:14:b1:09:ac:58:50:16:69:c0:d4:f0:e6:f2:
c1:c7:84:50:d8:40:58:73:94:ed:87:be:60:63:31:51:f6:a7:
2a:a7:66:90:1c:57:f5:00:85:83:d0:c1:ca:88:1f:36:42:92:
7b:eb:bb:a0:cd:34:65:c3:c0:cd:e8:3b:25:bc:27:c6:fb:e1:
2c:90:63:94:10:fc:5f:55:35:e6:7a:56:f3:1d:ce:f5:ea:b9:
1d:6b:08:b1:52:98:60:39:f1:3c:dd:6e:73:60:4b:b2:78:60:
ee:0f:fb:91:fd:4d:c4:ea:b4:09:30:49:db:af:aa:f9:7a:9a:
f8:cc:3f:11:84:89:44:e2:7d:bc:fa:d3:3f:76:59:96:84:00:
4b:cd:c6:1b:93:2d:95:3b:c9:6b:3c:fd:69:25:d4:fe:17:2f:
6c:1b:d7:fb:4c:8c:5d:f7:b8:69:1a:32:5d:26:7d:e0:b6:c3:
aa:aa:4a:95:c2:c2:26:b4:ed:84:40:cb:b3:0d:c6:d1:a9:15:
aa:7b:af:90:51:85:c1:cc:72:fc:e4:c3:5b:20:22:66:65:b9:
2f:24:52:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 04:57:56 2023 by rpki-client on console-ams.rpki-client.org