Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807324d0-72ad-4a0f-8a9f-89343c9c5a63/d69d2594-e24b-3b22-a71f-bdcfeb9d7c15.roa
File: d69d2594-e24b-3b22-a71f-bdcfeb9d7c15.roa (raw, json)
Hash identifier: MxpOI/nvSyA0vuEawQm7UlrtQPMqRuZK389LETZ2oBA=
Subject key identifier: 28:95:86:B5:F5:E3:2A:67:0E:E2:57:F4:9B:BB:D7:59:49:25:39:47
Certificate issuer: /CN=807324d0-72ad-4a0f-8a9f-89343c9c5a63
Certificate serial: 010D0C9F432858472CD94B0F305AC06944E3BE00
Authority key identifier: 94:88:B5:51:87:EA:8E:BE:03:12:52:BB:59:A3:1D:C8:A4:AB:01:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807324d0-72ad-4a0f-8a9f-89343c9c5a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807324d0-72ad-4a0f-8a9f-89343c9c5a63/d69d2594-e24b-3b22-a71f-bdcfeb9d7c15.roa
Signing time: Wed 11 Sep 2024 04:53:20 +0000
ROA not before: Wed 11 Sep 2024 04:53:20 +0000
ROA not after: Tue 10 Dec 2024 05:53:20 +0000
asID: 1224
IP address blocks: 141.142.0.0/16 maxlen: 16
198.17.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 14:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2c:d9:4b:0f:30:5a:c0:69:44:e3:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807324d0-72ad-4a0f-8a9f-89343c9c5a63
Validity
Not Before: Sep 11 04:53:20 2024 GMT
Not After : Dec 10 05:53:20 2024 GMT
Subject: CN=a7201767-5135-4281-8540-a4ae33736fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0c:34:32:54:ba:3f:24:72:10:1e:ef:6a:2f:
bd:18:ec:24:66:39:c1:5e:e8:0e:a3:58:07:68:c3:
5e:48:ba:62:46:f9:ee:eb:db:1b:26:4b:02:9a:3c:
ad:9c:1d:f6:f1:09:cf:37:bc:60:e5:76:e8:65:cd:
68:4a:95:7a:e3:f3:65:be:66:7e:d6:51:5e:d6:be:
e0:2f:3d:00:a1:ff:a1:1e:a4:dd:1e:dd:ac:63:03:
4e:ec:8f:be:71:06:f1:37:a9:00:5f:39:69:7d:66:
7c:80:ce:99:7b:90:fb:35:38:5b:3f:ee:93:85:4e:
a4:db:6d:3b:97:ca:77:58:dc:c7:96:a6:c9:2d:32:
1d:c6:57:1f:e1:73:59:ab:60:49:64:13:76:0e:b7:
07:a8:cc:7e:6c:1b:22:a9:36:28:41:55:88:fc:bb:
4b:17:5f:19:44:36:18:ee:4e:d7:94:87:d5:27:86:
e9:28:9a:23:42:06:9a:8a:9a:4e:3c:16:26:fb:68:
bd:69:73:7c:68:f1:57:de:a1:99:ce:f3:00:f4:da:
0d:06:1f:e3:a5:23:b6:dd:9b:81:4c:c2:40:e2:c1:
9f:85:38:06:7a:e8:f3:38:6c:81:22:f2:6f:e9:1b:
97:e5:0a:4a:e5:15:e3:cb:2e:e0:26:a5:9c:6e:57:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:86:B5:F5:E3:2A:67:0E:E2:57:F4:9B:BB:D7:59:49:25:39:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807324d0-72ad-4a0f-8a9f-89343c9c5a63/d69d2594-e24b-3b22-a71f-bdcfeb9d7c15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807324d0-72ad-4a0f-8a9f-89343c9c5a63/807324d0-72ad-4a0f-8a9f-89343c9c5a63.crl
X509v3 Authority Key Identifier:
keyid:94:88:B5:51:87:EA:8E:BE:03:12:52:BB:59:A3:1D:C8:A4:AB:01:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807324d0-72ad-4a0f-8a9f-89343c9c5a63.cer
sbgp-ipAddrBlock: critical
IPv4:
141.142.0.0/16
198.17.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:7d:63:0d:d3:0f:3b:a1:5b:21:13:fc:f6:34:70:36:3d:60:
2d:79:de:5c:24:61:d0:f1:23:00:9b:a3:20:25:2a:08:d4:7f:
bc:e5:24:b2:ec:38:e9:19:9f:5f:f7:4b:8b:ec:db:da:f9:d4:
af:94:33:3e:c5:80:02:71:6c:c0:a5:6a:e7:e7:72:b9:03:73:
34:b2:5d:e7:65:d3:f0:3b:3f:bb:2a:b1:40:dd:a0:5e:9f:c0:
12:b6:1b:a3:19:18:be:fe:47:4d:90:59:3a:0e:25:07:7b:81:
28:66:a5:45:04:d0:74:58:61:88:fd:ed:a8:fb:bf:1d:e5:13:
84:02:58:5e:e6:72:31:c9:b1:2e:2c:ba:66:75:bd:22:54:8d:
8d:7f:68:b1:1a:4f:28:d7:35:60:f0:2c:2c:84:9a:e6:f4:0a:
71:69:af:10:96:67:51:f0:cf:0b:e5:1b:55:7b:bf:8e:0d:e6:
6f:f4:c7:3b:2d:33:e9:f6:98:e9:6a:a7:20:cd:73:7a:e1:72:
e4:1b:bd:23:34:ee:d9:84:9c:64:e2:d4:3a:64:a0:1d:13:dd:
f0:56:11:5a:03:f2:9b:f0:f1:5b:a8:50:ac:c6:d1:4a:39:f9:
bf:60:46:4d:14:ac:19:f9:b6:07:bb:f4:3b:12:df:eb:e7:28:
65:89:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 17:40:32 2024 by rpki-client on console-fra.rpki-client.org