Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2690f938-03d8-3275-83ce-2bd9d796373d.roa
File: 2690f938-03d8-3275-83ce-2bd9d796373d.roa (raw, json)
Hash identifier: tTXdDaluW7JtnKNB0x9p+lzBd37df/I4D6nVFEzHNTo=
Subject key identifier: 7E:70:9A:36:44:73:77:9D:BE:C6:67:FD:1C:7B:9B:77:43:60:C3:42
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285844A740CB3DEF45A7CA18345900
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2690f938-03d8-3275-83ce-2bd9d796373d.roa
Signing time: Tue 23 Jan 2024 22:49:41 +0000
ROA not before: Tue 23 Jan 2024 22:49:41 +0000
ROA not after: Mon 22 Apr 2024 21:49:41 +0000
asID: 19955
IP address blocks: 209.221.32.0/22 maxlen: 24
209.221.36.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 21:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a7:40:cb:3d:ef:45:a7:ca:18:34:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Jan 23 22:49:41 2024 GMT
Not After : Apr 22 21:49:41 2024 GMT
Subject: CN=f073477e-2db2-4a68-8461-267cca396f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:ad:df:1c:c9:d0:f8:a3:89:20:9c:fb:6b:
a8:32:56:54:5b:28:cc:16:4b:ac:95:54:60:54:e0:
eb:de:29:f9:1f:74:82:b7:b9:60:56:32:62:43:6e:
26:71:b7:ed:67:07:aa:fb:20:35:36:e9:cb:b8:5d:
c0:a8:59:66:8c:be:43:82:2f:00:5a:75:f9:d1:2b:
9c:0d:5a:50:9f:de:58:4c:95:fd:f8:47:a4:ae:af:
50:e7:ad:47:f5:de:bd:ef:13:f8:1e:1e:86:c3:fa:
b6:72:fd:b8:0b:ce:7e:16:b2:2a:79:d5:b2:49:c3:
eb:a2:c7:27:8e:29:8b:87:8b:da:71:98:33:27:21:
58:61:42:fb:6e:41:a8:9a:16:c5:78:c9:29:e1:5c:
72:22:c6:57:33:01:04:6e:6c:f0:32:24:ff:d9:9d:
13:2c:26:99:80:af:f4:fd:e2:19:d2:8d:a1:6d:34:
37:2f:df:5a:da:14:55:08:bf:eb:b4:58:e3:f1:bc:
40:62:cb:cc:c1:ce:51:ba:86:a7:8d:75:96:97:8f:
ab:88:18:ac:a2:52:b5:2f:71:21:c5:07:ae:cb:7d:
db:ce:43:ab:24:88:a0:c6:fc:99:2e:33:9d:b6:21:
77:e0:d0:5a:7e:42:7a:e8:da:8b:73:b7:07:8f:53:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:9A:36:44:73:77:9D:BE:C6:67:FD:1C:7B:9B:77:43:60:C3:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2690f938-03d8-3275-83ce-2bd9d796373d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
209.221.32.0-209.221.37.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:d8:32:36:11:a8:bd:72:80:9a:64:a8:96:7f:81:30:4f:38:
2d:aa:ae:2f:86:5d:20:6a:c4:c1:d0:39:ef:b6:c4:fb:ec:8b:
a7:8b:34:85:08:d7:8a:b5:c4:e9:2a:b6:08:04:f5:d3:ee:b7:
d9:c1:11:b9:8d:8b:ba:5d:25:a3:c5:ee:03:06:8c:7e:58:ee:
45:a1:ce:74:fd:30:25:0c:63:8a:74:29:87:42:4e:4a:06:6c:
d7:09:d1:90:bd:80:2d:0c:40:80:ab:82:ce:7a:cf:a5:4d:5e:
e1:4b:2f:57:45:11:ec:48:aa:b8:25:a7:b7:fc:48:1f:8e:0c:
a2:1d:68:97:ee:8f:18:50:36:9d:59:3f:d0:1a:72:3b:a8:78:
81:49:48:9d:1b:eb:37:cc:35:21:25:da:2c:6a:9d:76:8a:ec:
da:27:b7:af:12:d7:85:47:73:b5:23:ae:c4:89:56:f6:63:1a:
1c:87:5e:ed:b6:9f:7a:54:b4:34:72:50:08:b0:bc:f6:bc:57:
f1:1f:a8:5d:8e:ac:90:f9:6a:0d:07:01:79:df:04:46:3a:4c:
79:5d:55:20:c5:fa:87:30:79:56:42:3d:9e:77:20:e1:8f:f0:
78:91:d2:99:ba:23:cd:46:83:a8:53:18:01:f2:0c:cb:c4:b5:
c0:68:71:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 22:02:58 2024 by rpki-client on console-fra.rpki-client.org