Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/e4c46554-4c53-3eaf-a68c-171a8383e7de.roa
File: e4c46554-4c53-3eaf-a68c-171a8383e7de.roa (raw, json)
Hash identifier: eYNiuYFS55acb35kwEfDjalvPxgbjy4YRgZ74YvPUOI=
Subject key identifier: B1:32:FB:DE:55:45:46:6B:01:C7:F8:61:7B:DE:BA:04:89:A3:64:AD
Certificate issuer: /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial: 010D0C9F432858447D026F0C9F1BF4F09F0B6680
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/e4c46554-4c53-3eaf-a68c-171a8383e7de.roa
Signing time: Mon 08 Jan 2024 19:40:05 +0000
ROA not before: Mon 08 Jan 2024 19:40:05 +0000
ROA not after: Sun 07 Apr 2024 18:40:05 +0000
asID: 39521
IP address blocks: 23.144.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7d:02:6f:0c:9f:1b:f4:f0:9f:0b:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Validity
Not Before: Jan 8 19:40:05 2024 GMT
Not After : Apr 7 18:40:05 2024 GMT
Subject: CN=09cdb71b-2c3b-41ee-a935-9f50b7cc2688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:bf:ff:da:31:ac:c5:58:08:3d:dc:9f:d6:
99:e6:55:8b:c0:25:4b:ac:84:56:fd:6a:20:51:8c:
07:0d:81:ea:8f:d5:e9:30:70:e2:51:5e:37:ec:26:
d4:a7:c8:4e:b0:27:6f:e8:a6:9c:0d:f2:cd:c9:96:
92:a8:f8:45:b6:fa:53:91:92:a6:c8:0d:af:78:2e:
ed:be:eb:df:ad:cc:bd:e8:5e:29:cf:d8:af:7a:bd:
46:59:d9:4b:e8:86:a6:f4:9d:43:56:0a:21:11:00:
f6:98:2a:47:c9:28:78:8d:66:ae:d3:22:b9:65:96:
b0:55:b8:28:f6:4e:52:4b:bb:d3:dd:45:44:14:1c:
fb:af:b1:5b:b1:69:6d:80:24:8f:c6:a3:48:76:d7:
69:d2:b8:38:cc:fc:21:8c:2b:29:f2:fb:86:0e:29:
e7:ca:70:73:c7:0f:fc:ce:57:35:d2:7f:e3:4c:f0:
f9:de:46:5c:dc:61:a1:37:1d:e8:87:7c:f2:8a:0b:
59:5e:68:66:f5:78:31:53:cf:82:6b:bb:00:f2:4b:
f3:c3:3f:b6:b3:61:40:b4:f6:81:36:db:6a:26:c7:
6c:2e:cd:29:fa:86:c5:ef:a3:34:b9:bb:af:d5:bd:
0a:3e:75:cd:dd:98:0a:26:50:64:2a:09:ce:a1:d1:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:FB:DE:55:45:46:6B:01:C7:F8:61:7B:DE:BA:04:89:A3:64:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/e4c46554-4c53-3eaf-a68c-171a8383e7de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
X509v3 Authority Key Identifier:
keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:24:14:ab:36:86:a5:cf:be:d2:27:74:f7:00:57:33:b5:79:
35:d9:8e:1c:a0:5c:9b:d9:48:d3:f7:8e:b5:f8:eb:44:91:c1:
6f:72:f2:18:fb:86:d4:56:95:eb:12:eb:0b:d3:d0:7a:a7:d3:
45:58:32:89:e2:d4:e7:53:a1:ea:f8:db:2c:04:12:8a:93:3a:
d4:a1:86:85:57:70:10:e7:fd:31:8a:47:80:13:40:7a:88:54:
55:00:c0:46:fc:3b:31:32:86:fc:db:d2:ec:75:5f:63:19:2b:
5e:ac:58:f8:c5:69:5e:8a:24:79:c7:9c:7c:9e:5e:68:05:60:
78:60:a7:e3:4b:5f:ea:c0:db:66:97:60:c8:37:f3:5f:64:7f:
33:d2:e1:44:88:71:4f:ef:d5:89:92:f6:38:25:4d:fb:cc:b3:
11:23:a1:43:f7:11:15:f2:9a:b2:5b:8e:71:9d:b3:2d:7b:bf:
59:04:71:c4:bd:fd:fc:04:be:34:0b:bf:18:8a:67:00:d8:54:
2d:eb:09:cd:e7:29:79:07:d4:34:c9:ec:08:64:09:7d:ca:a2:
21:ce:99:41:2d:95:b8:0f:a8:42:9c:b2:59:78:e3:cb:81:d6:
2d:01:b8:5e:68:83:e8:1b:cc:f7:b9:d6:ff:ca:5b:39:3f:7a:
59:ff:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 16:40:13 2024 by rpki-client on console-ams.rpki-client.org