Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/4979523b-171b-3331-8f65-2145fa58ed26.roa
File: 4979523b-171b-3331-8f65-2145fa58ed26.roa (raw, json)
Hash identifier: 3p+AmJXk/3Qn9MijtIdXz6ddttTRZQXt8EgCtOi531c=
Subject key identifier: 34:89:BD:FC:BF:0D:57:37:65:25:45:50:B3:EC:0B:54:4A:E2:9D:B3
Certificate issuer: /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial: 010D0C9F43285844C654FC82E8A6A9631CCFDC88
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/4979523b-171b-3331-8f65-2145fa58ed26.roa
Signing time: Sun 04 Feb 2024 02:00:25 +0000
ROA not before: Sun 04 Feb 2024 02:00:25 +0000
ROA not after: Sat 04 May 2024 01:00:25 +0000
asID: 9009
IP address blocks: 170.205.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 18 Feb 2024 22:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c6:54:fc:82:e8:a6:a9:63:1c:cf:dc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Validity
Not Before: Feb 4 02:00:25 2024 GMT
Not After : May 4 01:00:25 2024 GMT
Subject: CN=3a2f961c-fb6b-40b0-8fbe-6469e55416fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:cf:46:11:97:52:15:0a:3a:2c:5d:21:c0:
77:98:f7:e3:ff:b2:8f:6e:d4:4c:6d:80:45:e6:3b:
e6:56:6c:29:45:d8:ee:ac:5c:3d:83:57:52:ed:ce:
24:89:fe:2e:10:9a:c9:13:bb:e9:31:94:ab:9e:04:
20:f4:3f:6b:80:f2:e3:0b:a7:a0:7c:83:b7:e4:95:
a0:c7:ee:c1:01:50:38:bb:77:16:55:ea:94:8d:26:
33:a6:38:23:ea:ca:74:b0:f8:6c:4e:a2:84:e6:b2:
2e:48:55:3c:f6:57:d9:2d:51:a5:4c:82:09:85:9e:
fe:82:6c:8e:b6:b8:3a:b3:01:8c:bb:5f:82:1c:0a:
60:d3:d3:09:52:fb:ac:ea:bd:d1:fc:f9:ea:08:5d:
4c:c1:4a:e2:10:52:f2:a2:3b:94:2a:a8:09:36:dc:
ec:67:5f:bf:dd:e5:81:c8:39:66:33:88:2d:10:fb:
43:cb:09:cb:84:2b:d1:30:f2:22:9b:ea:22:70:c0:
68:84:a4:36:8a:03:1d:e9:94:1c:8a:c1:0d:c6:17:
76:64:ec:a6:63:5e:58:2b:3f:cf:91:c1:0c:b3:c6:
62:41:2e:3e:34:c4:ae:50:04:b3:62:eb:b7:0d:08:
f1:e2:97:44:ea:49:4e:11:0a:a7:eb:fe:29:60:a3:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:89:BD:FC:BF:0D:57:37:65:25:45:50:B3:EC:0B:54:4A:E2:9D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/4979523b-171b-3331-8f65-2145fa58ed26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
X509v3 Authority Key Identifier:
keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:ec:e6:33:2d:a1:3e:94:8e:0d:07:39:ee:88:e1:48:42:68:
e1:a9:b3:aa:4e:51:52:b4:76:51:05:d2:87:6f:29:96:4a:13:
e4:0c:88:47:05:dd:a5:2a:e7:51:1a:d1:2d:d7:3b:bd:a4:44:
fc:17:dd:7f:45:bc:d9:be:12:e1:9a:f4:8d:d6:89:73:d1:75:
20:9a:7e:0f:05:6a:c9:0f:35:4c:43:e6:6d:1b:54:c4:e5:89:
d7:39:99:dc:b2:2b:11:c6:30:e1:f4:44:86:c1:34:b5:ab:a3:
77:fc:1a:67:75:e8:f4:db:d5:27:93:13:7b:f9:09:f0:fb:c2:
49:bb:44:06:4c:f6:47:b2:d4:6c:e0:03:19:22:4b:9a:ea:6d:
ee:c5:91:2c:ba:19:3b:e9:bd:14:a6:4d:2d:ba:77:d1:72:0a:
3f:e5:c9:a6:98:1a:0b:07:da:f2:6d:61:b7:90:58:39:51:80:
7b:20:ad:c7:73:73:ca:42:a4:29:90:1f:01:63:28:9c:8b:79:
8d:fc:67:65:d7:28:07:42:fd:e3:ec:4f:54:72:12:02:aa:8a:
f7:6d:02:47:30:35:7e:23:6f:0e:2c:2d:c1:9b:e5:fb:b9:cc:
43:b3:7a:ea:84:ba:fb:80:06:38:52:33:fc:f1:5b:58:e1:92:
ac:c6:9d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 02:33:48 2024 by rpki-client on console-fra.rpki-client.org