Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/43380983-a8d1-323b-93b7-64328ea0d916.roa
File: 43380983-a8d1-323b-93b7-64328ea0d916.roa (raw, json)
Hash identifier: sUEBCMUQer6fUlaequ4N8eXWhtOWWdkPxioACf/Dvks=
Subject key identifier: A8:58:C2:11:82:39:E4:21:96:9E:12:21:8F:97:55:A6:C5:5C:1A:D0
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F43285844202A28D2FE8CEB52CBF64A00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/43380983-a8d1-323b-93b7-64328ea0d916.roa
Signing time: Wed 06 Dec 2023 13:29:57 +0000
ROA not before: Wed 06 Dec 2023 13:29:57 +0000
ROA not after: Tue 05 Mar 2024 13:29:57 +0000
asID: 5650
IP address blocks: 74.91.49.0/24 maxlen: 24
172.85.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:20:2a:28:d2:fe:8c:eb:52:cb:f6:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Dec 6 13:29:57 2023 GMT
Not After : Mar 5 13:29:57 2024 GMT
Subject: CN=1d26ca5d-6187-461b-a1a2-adc9bb48adef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:7b:db:86:27:33:43:cb:98:8c:54:a2:cc:
08:c7:6c:5e:01:3c:ef:6f:d7:ad:a1:4b:41:60:66:
36:a0:b7:19:7c:85:cb:5c:4f:97:4f:83:b2:a1:2e:
02:c7:fd:37:3c:1d:60:b2:1c:ff:77:36:c3:e4:63:
dd:ef:7c:87:12:01:35:71:55:3c:6b:ea:fe:04:3f:
c3:6d:c3:46:b9:9f:bc:3e:14:8b:10:fd:32:e9:8a:
89:9e:62:a7:e0:09:8d:6f:53:2a:75:cd:34:34:3e:
ea:52:a0:d5:9e:17:71:ee:cc:99:85:34:f7:75:33:
6e:81:6f:10:73:be:cb:cc:d7:ef:c0:dc:19:a3:42:
fc:87:b2:52:f0:28:8c:3d:3f:5d:b5:0a:27:b5:db:
44:3f:a3:5b:a9:7a:29:63:35:32:8a:20:98:4e:3f:
bd:72:92:4b:23:c6:4c:b4:d9:f3:05:99:9f:b9:13:
18:6f:bf:67:cc:99:0e:d1:89:25:b0:6d:f9:af:c7:
90:9e:26:4e:dc:98:3b:44:45:5b:68:b4:22:76:71:
72:ed:8d:40:1e:82:28:ed:ce:0c:7c:0a:8d:b0:de:
59:6f:94:2b:c2:3b:8d:e9:61:30:d8:67:aa:55:d9:
84:7b:63:05:68:51:1f:3f:b1:fd:17:e8:96:4f:66:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:C2:11:82:39:E4:21:96:9E:12:21:8F:97:55:A6:C5:5C:1A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/43380983-a8d1-323b-93b7-64328ea0d916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.91.49.0/24
172.85.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:e2:6c:cc:55:05:07:f4:d7:1d:cf:2a:47:9d:68:01:76:61:
d2:a8:8a:e7:5c:6f:30:ee:56:6d:81:d0:29:ff:2f:d1:4e:b4:
e0:3c:e8:38:86:0d:bb:6e:bd:7c:1e:e5:8f:63:d5:d2:22:a3:
4c:24:d1:db:d7:46:10:cf:5a:61:d3:55:09:09:27:ba:fa:65:
13:c1:f0:44:b9:6b:49:5b:31:26:5e:2f:53:c6:58:63:e8:4d:
50:5d:67:b2:4d:91:06:3a:a0:2c:91:e7:e5:98:67:52:4a:f0:
6f:e0:72:a2:76:37:92:74:e1:5c:28:b0:55:62:02:0b:a0:15:
4b:34:22:1a:4a:10:6a:64:f6:d3:5c:98:1b:7f:73:dc:a5:c7:
02:b2:ff:cf:9a:f3:4f:c8:12:50:bb:b8:73:ed:9b:cb:52:df:
f8:d9:61:67:2d:3b:4a:50:9c:fb:cc:9f:97:39:9f:e5:cc:bb:
10:4a:a9:f6:a3:12:0a:5e:97:f6:84:aa:55:6f:0c:d7:84:2d:
9a:67:64:85:09:7a:08:9d:07:b6:46:7a:ed:4c:09:77:a6:1f:
24:00:19:a8:25:ac:bc:20:ff:92:82:b0:cb:44:a7:75:ea:86:
fa:de:cc:36:2f:e4:67:12:82:84:21:67:dd:dd:7b:19:e4:4b:
4d:59:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 11:55:31 2023 by rpki-client on console-ams.rpki-client.org