Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/229d8efb-195f-365d-9bc4-d212484e5c7e.roa
File: 229d8efb-195f-365d-9bc4-d212484e5c7e.roa (raw, json)
Hash identifier: sXlf2mrPZNw/miSdXLiZK0p0JIZXeGFgA9mYFbREFwY=
Subject key identifier: E8:C3:1C:37:11:1C:5A:7F:0C:A8:75:10:01:DB:DB:2D:6E:5E:52:E4
Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial: 010D0C9F432858433672DD4C0519559390B42500
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/229d8efb-195f-365d-9bc4-d212484e5c7e.roa
Signing time: Wed 13 Sep 2023 20:17:17 +0000
ROA not before: Wed 13 Sep 2023 20:17:17 +0000
ROA not after: Tue 12 Dec 2023 21:17:17 +0000
asID: 109
IP address blocks: 173.39.128.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:36:72:dd:4c:05:19:55:93:90:b4:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
Validity
Not Before: Sep 13 20:17:17 2023 GMT
Not After : Dec 12 21:17:17 2023 GMT
Subject: CN=aef3280f-baf7-45be-a50e-d1c349201d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:18:5e:ee:24:a3:ee:0a:1f:40:b2:fb:54:
89:d0:84:45:3a:e7:92:62:52:43:1a:75:c2:86:28:
1a:fa:8b:be:4a:33:70:17:59:ba:26:9a:d2:26:4e:
de:4b:d1:53:65:1a:48:d9:5b:3b:f2:87:17:75:a3:
88:f5:f1:c2:09:be:c2:e0:a1:52:5f:72:f4:a0:b1:
ab:c9:e5:4f:03:a1:8f:c8:21:33:27:92:fc:f2:a2:
fe:d9:81:19:50:3c:30:5e:b3:6e:ed:08:57:e2:9d:
0b:ca:65:d5:5d:a1:2a:ae:18:31:46:e5:fd:b4:8d:
db:7b:86:20:aa:14:c0:2c:1e:e3:24:2d:da:cc:07:
8b:32:88:a9:98:56:77:b0:72:70:28:c5:f5:6a:11:
96:83:9c:d6:58:c7:96:b1:ec:e4:fa:66:7a:74:01:
1c:1e:38:75:1e:5d:47:32:ba:50:5b:e1:31:68:c6:
48:9f:d1:35:ab:14:2d:72:5f:8d:3a:0b:5e:c2:37:
0e:8f:9c:95:52:e0:10:04:63:8d:31:d3:ae:48:17:
8b:1f:b7:b8:52:5a:7a:3f:0e:bf:ba:62:3c:0d:df:
fc:1d:27:3b:4a:81:f5:e3:f7:7e:49:52:79:19:34:
32:f8:fa:8a:f8:ed:42:91:85:5a:16:65:04:ab:c5:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:1C:37:11:1C:5A:7F:0C:A8:75:10:01:DB:DB:2D:6E:5E:52:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/229d8efb-195f-365d-9bc4-d212484e5c7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
X509v3 Authority Key Identifier:
keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
sbgp-ipAddrBlock: critical
IPv4:
173.39.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:50:94:e3:a5:46:2b:04:22:05:af:80:27:f9:aa:3d:b6:6c:
83:b5:47:a0:7a:40:cb:87:4a:be:b6:99:87:4c:68:8d:9d:9d:
74:99:4f:e5:89:f2:f4:33:b8:31:86:0c:4a:17:5b:d6:35:8e:
dd:0c:73:e3:f6:57:9d:ef:ad:50:ab:63:6e:64:c9:00:aa:2b:
35:47:ba:23:ef:0b:dd:2a:01:f3:54:4a:fd:ff:e0:46:be:77:
7a:4a:b7:83:6b:56:7b:52:6d:1e:7b:93:38:8a:8a:20:72:09:
e9:e8:93:69:34:a4:7f:98:f0:96:25:e3:33:04:ae:92:27:b4:
1b:25:a7:6d:dd:ea:09:20:6f:f0:48:97:e0:97:1c:74:8c:08:
6f:7a:3d:05:22:65:cc:51:41:d7:b4:b4:ca:fb:23:03:4f:20:
16:9b:da:c2:1e:cf:bb:90:63:3b:21:c6:61:23:46:de:ed:f0:
0a:88:46:26:e1:1e:3e:3f:7f:cf:3a:17:e6:83:c2:46:50:82:
fc:5f:ba:dd:62:bd:66:65:ec:5e:58:4b:52:8c:01:7c:6a:ff:
32:ea:75:c4:ed:08:cf:77:67:16:b2:12:da:18:73:0a:58:1d:
86:79:af:de:26:03:e2:8d:b3:aa:41:db:c5:80:b1:cd:f8:b7:
85:5a:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 21:23:28 2023 by rpki-client on console-fra.rpki-client.org