Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/69768e02-5f3d-329a-be6b-ed60cd0b65b0.roa
File: 69768e02-5f3d-329a-be6b-ed60cd0b65b0.roa (raw, json)
Hash identifier: 2CE/I7mePvXcTMsPakl9+KXNLwPWS5OgyUSbCmHWLpk=
Subject key identifier: 73:A6:39:93:C2:2D:82:AF:A0:09:90:6A:6B:B6:AA:96:EB:99:76:38
Certificate issuer: /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
Certificate serial: 010D0C9F43285846ABFA46FA4033D1D55022CBA0
Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/69768e02-5f3d-329a-be6b-ed60cd0b65b0.roa
Signing time: Sat 27 Jul 2024 01:00:28 +0000
ROA not before: Sat 27 Jul 2024 01:00:28 +0000
ROA not after: Fri 25 Oct 2024 01:00:28 +0000
asID: 213219
IP address blocks: 23.159.120.0/24 maxlen: 24
2607:5fc0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jul 2024 17:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:ab:fa:46:fa:40:33:d1:d5:50:22:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
Validity
Not Before: Jul 27 01:00:28 2024 GMT
Not After : Oct 25 01:00:28 2024 GMT
Subject: CN=c9bc4ed9-fe23-44f0-8feb-33c109657d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:7d:b8:16:44:15:e0:c1:27:dd:5c:cc:92:
63:b0:6f:70:52:05:30:bb:bf:70:4f:1b:1a:c8:c8:
b8:0f:18:8c:d1:71:2b:93:54:4d:00:70:31:02:f5:
5d:f8:03:72:cc:2e:0f:7a:63:ee:82:79:8b:07:a1:
74:3b:5c:09:b3:09:78:b7:da:03:04:00:7b:c8:ea:
4b:8b:c7:e8:0f:bf:18:ae:9d:a2:13:4e:a1:f2:37:
3c:ef:56:41:ea:bb:fd:dd:42:e3:a2:57:d1:2a:a3:
fc:6f:fc:d3:2f:57:7d:37:d7:5c:55:14:97:a8:4e:
05:40:43:00:ee:aa:01:24:cf:cf:97:7c:61:2c:3c:
fa:57:e6:5e:40:e7:f6:f9:06:d9:87:d2:cc:29:f9:
31:08:b1:34:39:76:5b:ca:db:e5:d0:e9:9e:fb:df:
83:22:5e:c2:33:88:ab:ad:39:1c:52:37:36:46:b7:
32:cb:a5:e0:d3:b9:13:3e:9a:72:ce:d9:cd:f4:e3:
04:11:51:b0:e4:4b:e3:67:29:08:a9:c9:f6:8f:16:
4d:a1:ea:16:29:b3:e9:3a:40:66:b1:52:61:a7:91:
c5:36:2a:2d:2f:8b:79:ea:31:92:3c:1c:cb:7f:ec:
90:d5:66:12:7a:d1:d6:3b:72:64:f0:cb:85:f2:10:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A6:39:93:C2:2D:82:AF:A0:09:90:6A:6B:B6:AA:96:EB:99:76:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/69768e02-5f3d-329a-be6b-ed60cd0b65b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl
X509v3 Authority Key Identifier:
keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.120.0/24
IPv6:
2607:5fc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:b7:ac:36:a7:21:88:2e:0a:14:6d:a2:91:f2:54:f5:b5:c8:
39:99:12:23:6b:ad:36:57:eb:fc:51:6a:88:16:05:aa:e7:fb:
cd:39:25:9a:8f:1a:9d:bd:3c:10:0c:95:38:5d:3d:f6:b2:8c:
f6:09:9f:fe:b1:0a:f8:7e:51:a6:79:0d:cf:2c:3d:2e:6c:97:
e8:9a:67:8c:be:ab:4a:e6:4d:91:11:81:bf:0e:60:2c:93:ba:
4a:15:c5:27:0c:68:00:48:26:a0:b0:95:c2:25:8e:84:0b:e5:
bf:b4:67:8d:bd:67:9f:b8:52:73:f4:4e:42:dd:28:6f:cb:e4:
2f:e6:4f:d2:b5:6e:6d:f8:ad:ad:57:8a:ee:92:d9:26:18:67:
3c:49:2b:18:4e:55:b8:b8:e3:d8:b6:16:27:35:a0:5b:f9:dc:
3e:31:76:9d:fc:53:31:4f:b1:b6:92:9f:55:19:f2:21:48:a7:
9d:0f:14:cc:8f:36:92:46:f1:73:6a:60:04:ba:3b:d2:ec:dd:
b8:66:2c:48:08:68:77:db:b9:d1:34:d7:88:73:5c:a8:53:93:
47:c6:13:05:4f:db:22:b5:3d:70:22:8f:b5:ef:fd:09:8f:e3:
20:09:1b:39:fc:ec:2e:a3:8e:f3:c8:a8:02:0e:04:ea:8c:5c:
54:d7:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 19:59:40 2024 by rpki-client on console-ams.rpki-client.org