Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/bc2af012-49ae-3a69-af61-437c4201b03e.roa
File: bc2af012-49ae-3a69-af61-437c4201b03e.roa (raw, json)
Hash identifier: vQFrMtxkhOcfy6iuxOW6yd9M9QIL3RrtOP91uwRITps=
Subject key identifier: 44:58:CC:45:38:4C:C0:63:7F:4B:80:94:07:F1:1D:EE:02:5F:D9:9E
Certificate issuer: /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial: 010D0C9F43285847DB62A1D02809FAC5EF2B36A0
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/bc2af012-49ae-3a69-af61-437c4201b03e.roa
Signing time: Tue 12 Nov 2024 17:20:43 +0000
ROA not before: Tue 12 Nov 2024 17:20:43 +0000
ROA not after: Mon 10 Feb 2025 17:20:43 +0000
asID: 399970
IP address blocks: 149.112.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 17:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:db:62:a1:d0:28:09:fa:c5:ef:2b:36:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Validity
Not Before: Nov 12 17:20:43 2024 GMT
Not After : Feb 10 17:20:43 2025 GMT
Subject: CN=0683237c-bd65-42d5-8cb9-cfd79c7a759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:6b:ef:40:ab:62:77:5b:f1:59:1e:52:cd:
b1:4a:b0:ac:35:91:0a:9f:3c:78:09:38:0a:34:d0:
f9:8c:37:97:c2:ac:b6:08:a7:4b:e1:9b:72:85:77:
5b:00:b0:ea:f5:ea:27:21:6e:61:37:7d:74:d9:5d:
1c:cd:cf:62:68:cb:b8:13:6e:b2:8c:b9:9c:10:55:
00:30:37:18:c6:e1:f7:93:0d:78:1e:5e:e8:db:17:
46:f0:82:66:51:3c:5a:5a:f8:2d:d3:f6:81:3e:bd:
c3:34:f9:53:8f:ad:9e:31:26:fa:95:af:c6:98:72:
79:9f:08:50:5c:8f:fd:66:f3:66:af:40:b4:04:13:
51:c7:10:09:2e:94:8c:5b:6c:c5:3c:70:e3:27:c9:
96:92:c5:48:84:f0:4b:06:d8:cd:1c:bd:f5:20:e4:
0c:55:c6:11:8b:7a:8f:4b:5e:f6:f5:53:fd:4c:8d:
fa:b4:39:e9:2d:20:c0:3f:51:39:a4:01:1f:0c:d2:
07:44:5a:ee:6b:de:80:91:f7:c4:23:4b:d7:5d:ac:
71:66:5a:a8:f8:85:6f:11:9f:f8:e2:3e:7f:36:bc:
fe:34:50:da:97:ef:a1:0a:a8:a3:f9:c6:1a:83:1f:
e9:e8:78:fb:8f:80:89:99:bc:e1:db:38:ed:b3:97:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:CC:45:38:4C:C0:63:7F:4B:80:94:07:F1:1D:EE:02:5F:D9:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/bc2af012-49ae-3a69-af61-437c4201b03e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
X509v3 Authority Key Identifier:
keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:e7:f7:1b:12:dd:a4:45:0b:25:e9:92:36:b2:ce:78:7d:22:
3c:1b:38:9b:94:2e:c6:42:1b:d4:f2:89:a8:6a:af:d7:bb:51:
b7:e8:b2:37:36:ce:ab:96:8e:a0:b8:14:b7:64:6a:f5:f5:4c:
d3:f8:0c:89:39:2c:ef:0b:d0:ab:2a:98:e6:78:06:38:16:60:
72:96:2c:75:cf:22:85:90:aa:4d:f8:fb:c0:36:f6:42:9f:0e:
61:df:7c:99:43:bd:29:c5:f3:e9:fe:76:4d:70:6b:e9:76:c0:
b7:73:e8:dd:c8:f4:de:e9:9c:2b:2f:ff:c1:26:cc:63:11:61:
24:fe:0b:99:a6:40:2f:e9:df:1f:53:a5:14:e7:41:35:73:67:
90:a6:fa:7c:75:ae:25:5b:b4:bd:b9:83:53:e8:f8:55:1c:a8:
61:dc:43:d6:cf:ad:85:39:13:37:ef:36:b9:ae:94:97:80:1a:
13:95:27:df:97:b1:3d:fa:fa:42:6e:d8:8f:cd:57:40:71:7c:
1c:3e:d3:f1:75:54:cf:d6:aa:2c:9d:d2:ef:d0:8a:2e:3b:63:
c0:23:96:21:c0:5e:ad:dd:49:5b:4c:1b:d2:78:db:df:88:ab:
52:ba:35:b9:94:6a:da:72:ee:6f:53:12:d7:0d:cc:c3:a0:45:
58:1d:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org