Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/445e9cd7-f4f0-3f6a-92c8-564d50b4952f.roa
File: 445e9cd7-f4f0-3f6a-92c8-564d50b4952f.roa (raw, json)
Hash identifier: sCU4bMkjoGxIRrRYfvZVn57ZdinvsHcodAGPRYgm2jM=
Subject key identifier: 2B:96:B1:2C:B5:A7:FC:61:31:16:43:8F:B5:4B:7A:A6:91:58:3B:64
Certificate issuer: /CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Certificate serial: 010D0C9F43285843D4D05F1DEC6E6614F3074B40
Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/445e9cd7-f4f0-3f6a-92c8-564d50b4952f.roa
Signing time: Thu 09 Nov 2023 13:43:25 +0000
ROA not before: Thu 09 Nov 2023 13:43:25 +0000
ROA not after: Wed 07 Feb 2024 13:43:25 +0000
asID: 212238
IP address blocks: 207.167.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 17:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d4:d0:5f:1d:ec:6e:66:14:f3:07:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Validity
Not Before: Nov 9 13:43:25 2023 GMT
Not After : Feb 7 13:43:25 2024 GMT
Subject: CN=448118b0-c48c-459b-882d-dae654a0aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:ed:f2:3f:a5:24:45:cc:2b:3f:de:95:63:
b0:d8:12:50:a8:12:97:30:20:85:f7:d8:4a:02:7e:
79:56:48:c6:0d:39:c4:06:cb:64:a5:f1:c4:50:e1:
7d:1c:2b:fb:44:48:4c:db:37:72:62:60:67:d6:25:
1b:92:a7:6e:1d:ee:13:d8:e0:99:84:96:d1:d5:cb:
0a:8d:e6:90:92:0f:b7:e7:8d:74:15:ba:bc:1c:4e:
3b:6b:0f:f0:29:d7:05:f5:d1:e7:11:0f:53:ab:96:
87:29:67:3c:23:e6:2b:2b:f1:8a:00:89:bf:4a:09:
47:f1:5f:7e:e5:d3:d7:95:bc:5a:99:27:b0:21:64:
63:a6:7e:64:36:89:a1:d0:d3:be:72:74:d1:f4:66:
4b:69:b5:ee:9c:ac:e2:87:13:a8:f9:15:68:5b:fa:
41:26:04:e9:06:7d:37:7c:ca:bb:b6:a5:34:47:da:
bb:10:8e:b2:9d:6c:fe:96:fc:17:6d:6c:e6:c0:e2:
d4:5e:35:bc:fd:04:01:12:64:c1:cc:b2:5a:2f:56:
4f:9b:bb:5e:8a:94:f1:71:d0:4f:50:68:7f:b6:87:
3a:89:25:94:ea:b2:e2:13:e5:b3:e5:d3:d2:cc:a0:
fc:69:b1:ff:f8:e3:44:09:d2:a1:32:4d:1f:05:81:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:B1:2C:B5:A7:FC:61:31:16:43:8F:B5:4B:7A:A6:91:58:3B:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/445e9cd7-f4f0-3f6a-92c8-564d50b4952f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl
X509v3 Authority Key Identifier:
keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
sbgp-ipAddrBlock: critical
IPv4:
207.167.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:e0:ce:b6:c5:15:f5:9f:a1:9a:69:91:04:f8:d8:0f:73:fb:
4b:fd:7f:d3:93:0e:2b:d3:0c:05:85:3e:b8:a5:f7:10:c2:f3:
cf:56:2b:f5:9e:27:12:b8:a5:d9:5b:ad:d5:ad:43:a3:de:ca:
28:ad:60:fc:b1:68:53:8d:f5:1d:71:ed:14:c1:d2:f9:13:b3:
13:41:ea:e2:4e:1d:01:8a:e8:eb:97:07:9b:0b:ac:f8:07:1d:
ce:a5:e1:31:f0:13:c0:d8:1c:fb:c7:34:1d:e5:84:9d:09:40:
6d:0d:35:82:e0:18:53:5c:9b:fa:37:a2:12:d4:62:59:41:28:
10:89:5b:31:1c:8e:e4:58:19:f8:76:c3:86:ca:b7:22:37:a7:
1e:b5:e2:10:31:de:ce:0a:d0:0c:cb:6f:c7:d4:05:cc:e0:ae:
05:45:a4:90:60:c8:ff:ff:e3:31:24:12:de:55:36:c0:72:f3:
76:4f:ae:ee:47:29:da:b2:86:eb:ed:fa:3f:2c:72:b4:7a:54:
35:a1:1e:aa:6a:a0:de:83:5d:43:10:b4:5b:6d:de:ae:41:3e:
fa:fd:5f:4c:77:c7:eb:4c:8b:74:f5:07:5c:87:76:9d:97:a7:
8a:c1:ba:a7:29:f9:db:ec:9c:83:8e:1e:3e:9a:eb:db:56:92:
89:9e:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:58:27 2024 by rpki-client on console-fra.rpki-client.org