Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/d6f7cde3-0887-3ec4-9807-320c861d9c02.roa
File: d6f7cde3-0887-3ec4-9807-320c861d9c02.roa (raw, json)
Hash identifier: HA+Q+970vKS27fpFNOJviOEN1DE8aHIuv6+txj56vck=
Subject key identifier: 87:64:6A:08:E4:B1:E8:F9:63:97:BF:FE:E2:9D:0B:F7:2F:4E:1A:B4
Certificate issuer: /CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3
Certificate serial: 010D0C9F43285847C75EDDE6475BB37DDC52B640
Authority key identifier: 0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/d6f7cde3-0887-3ec4-9807-320c861d9c02.roa
Signing time: Tue 05 Nov 2024 13:16:57 +0000
ROA not before: Tue 05 Nov 2024 13:16:57 +0000
ROA not after: Mon 03 Feb 2025 13:16:57 +0000
asID: 393990
IP address blocks: 192.33.167.0/24 maxlen: 24
192.160.255.0/24 maxlen: 24
2620:120:8000::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Nov 2024 14:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:c7:5e:dd:e6:47:5b:b3:7d:dc:52:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3
Validity
Not Before: Nov 5 13:16:57 2024 GMT
Not After : Feb 3 13:16:57 2025 GMT
Subject: CN=26435b50-c2fd-4076-992c-724671e65902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:fd:46:4c:b6:e4:fe:9b:35:68:01:e6:aa:
90:6e:40:23:6c:5b:f9:df:03:5a:02:19:30:9e:e6:
87:77:58:44:57:54:90:11:79:3b:f3:f4:0b:a4:aa:
b6:9d:6a:b0:58:23:d0:a2:2b:72:1f:9c:6f:ba:2b:
ee:4e:a0:16:ca:89:4c:d7:bb:4a:76:92:33:13:22:
fa:ed:ca:34:dc:83:ee:6a:78:9b:52:48:35:2a:7c:
ae:ec:43:72:be:b9:b8:d1:11:59:e6:39:c1:ef:f4:
a3:84:ac:c8:a0:41:cf:27:26:55:8e:52:8d:0a:3e:
01:0a:fc:50:12:40:ad:1c:44:11:b7:0c:a0:c7:27:
99:d4:31:ec:73:63:41:01:fc:c1:d9:02:aa:b4:43:
17:67:91:e7:ef:96:56:3f:64:69:83:d9:65:8b:b5:
d6:b8:42:e4:9a:81:0a:d5:49:ff:69:2f:e8:b3:8a:
fc:2d:58:e6:ea:75:05:2f:bb:74:7d:ec:af:fc:4c:
5a:62:52:bc:9a:b4:c2:8b:92:c0:8d:4e:90:10:14:
62:12:e9:c2:81:6c:ba:f1:0a:13:e1:79:34:5b:23:
b9:b5:f6:e2:79:99:ad:a2:37:57:f8:b0:04:44:06:
3e:9f:67:36:ec:1a:7c:e5:06:e8:31:56:64:56:07:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:6A:08:E4:B1:E8:F9:63:97:BF:FE:E2:9D:0B:F7:2F:4E:1A:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/d6f7cde3-0887-3ec4-9807-320c861d9c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl
X509v3 Authority Key Identifier:
keyid:0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.33.167.0/24
192.160.255.0/24
IPv6:
2620:120:8000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:5c:ba:78:9e:35:d7:97:b2:cf:25:f7:f7:a3:6e:61:c0:0c:
b4:e5:4a:17:31:85:35:52:33:d3:96:ca:3f:96:b3:80:c2:3b:
66:b4:53:e4:ce:75:db:4c:0c:f0:dc:cb:b3:67:d8:e2:fe:b7:
b3:56:ec:80:25:c1:33:37:1e:1e:f3:ea:d7:0d:a6:23:1f:80:
f1:e0:97:53:07:7f:85:83:e9:da:e3:4f:38:f5:6e:bd:9b:9e:
b2:2d:05:2b:7f:ec:42:5e:1e:77:47:42:8e:e3:47:df:5d:66:
82:04:8b:8a:0c:6d:98:6f:c4:42:32:4e:2f:06:19:de:69:ce:
bd:18:19:16:70:7d:af:cc:84:a6:8a:7f:d5:f6:36:4e:43:43:
6f:da:d6:e0:0f:61:08:72:14:48:ad:f6:12:06:ea:2a:7b:e4:
3c:df:56:2c:b1:60:94:59:d9:ad:3b:49:c6:c7:a4:ec:70:ff:
23:9f:d6:7d:2d:93:fe:41:7f:ea:2d:7d:1d:46:69:47:bd:cf:
4d:6c:4f:4a:2a:88:32:fa:03:66:f1:58:19:2e:c2:4a:df:b7:
40:df:ad:c2:6e:d4:60:8d:4f:59:3d:19:43:ec:92:8f:b2:b8:
c1:d4:8a:3c:d3:25:1e:43:70:0b:1f:79:4c:4b:fb:01:03:41:
ed:c6:4f:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org