Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/3aacd805-0a7c-398e-b271-d05b4a37d51f.roa
File: 3aacd805-0a7c-398e-b271-d05b4a37d51f.roa (raw, json)
Hash identifier: bMEfRCTMJ6gUWwotn1qdsTN4oIEuggsdn+tBA5RxfyY=
Subject key identifier: F4:59:4B:EB:53:4E:A7:D2:BD:CA:E5:DD:46:A3:AF:37:8A:C8:FF:C9
Certificate issuer: /CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Certificate serial: 010D0C9F43285847915D86D47E8E722078F37440
Authority key identifier: B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/3aacd805-0a7c-398e-b271-d05b4a37d51f.roa
Signing time: Thu 17 Oct 2024 05:00:36 +0000
ROA not before: Thu 17 Oct 2024 05:00:36 +0000
ROA not after: Wed 15 Jan 2025 06:00:36 +0000
asID: 7046
IP address blocks: 162.27.158.0/23 maxlen: 24
162.27.165.0/24 maxlen: 24
162.27.166.0/23 maxlen: 24
162.27.168.0/23 maxlen: 24
162.27.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 05:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:91:5d:86:d4:7e:8e:72:20:78:f3:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Validity
Not Before: Oct 17 05:00:36 2024 GMT
Not After : Jan 15 06:00:36 2025 GMT
Subject: CN=1dd6a5cf-fc92-4dea-af80-f67acd5824df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:ee:7c:8d:7a:50:87:10:46:5d:64:07:d7:
cf:df:0b:89:c3:59:22:91:0f:2e:d9:df:90:ae:3f:
c6:c8:ac:d1:aa:69:9a:a5:4d:4a:ce:bf:5d:5e:a1:
ba:c3:f3:38:e6:57:cd:4b:a2:5d:85:cd:b4:fa:94:
ee:37:88:09:7a:c0:9c:56:96:31:6e:a6:c1:de:d4:
83:7a:ea:de:e7:89:cf:e0:4e:6a:bc:7f:7d:cd:54:
36:46:23:0a:e2:4a:dc:7e:df:d1:05:59:8b:d7:ed:
90:ec:73:92:46:df:ce:33:fd:e5:1e:9a:ad:3b:f0:
a5:55:37:81:a3:66:2b:58:eb:81:d3:54:22:b3:90:
24:49:35:bc:c5:00:40:03:ae:2d:60:da:52:97:87:
e8:24:ea:38:8d:1d:a4:a2:68:66:2d:6e:26:64:19:
5f:06:de:23:b7:c8:95:a5:6e:3b:a9:4e:11:f1:41:
bc:9c:2d:e5:f0:5f:a8:0a:ba:34:54:29:d9:06:77:
d5:2f:70:c6:08:0b:7d:d7:d8:89:0a:d7:89:54:35:
6e:d9:89:3b:91:1c:35:91:90:a4:ad:93:73:32:c1:
15:fa:43:80:66:7f:5c:8e:d7:01:85:86:ab:ec:23:
56:ad:69:dc:da:75:fe:8f:f2:72:ad:85:82:32:28:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:59:4B:EB:53:4E:A7:D2:BD:CA:E5:DD:46:A3:AF:37:8A:C8:FF:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/3aacd805-0a7c-398e-b271-d05b4a37d51f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl
X509v3 Authority Key Identifier:
keyid:B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.27.158.0/23
162.27.165.0-162.27.169.255
162.27.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:88:a3:7d:52:78:1e:27:c6:a1:47:f7:ee:e5:43:09:11:40:
0d:92:74:2e:fd:13:6b:5e:d9:e3:f2:9b:d3:60:14:30:b3:47:
ee:d5:29:79:bf:0d:d6:94:f0:d8:8b:8a:43:1f:21:fd:e4:a8:
08:c1:f0:8e:56:35:ac:70:3b:1e:1f:38:26:2b:64:94:a1:6b:
92:f6:0d:6c:ef:d4:b9:9f:94:be:2f:e6:0c:b7:f0:20:9c:03:
c4:14:fc:c9:5d:b0:06:55:07:e1:24:d3:c9:38:3a:9e:72:6a:
72:a1:f8:f3:ef:2e:93:48:c4:f9:9e:69:08:8f:c5:de:6a:10:
f6:fd:a7:20:3f:39:e7:f9:86:47:4d:5a:29:c3:50:04:c1:dc:
e0:05:4d:57:67:3e:ea:66:95:d2:68:c6:a9:0c:ce:93:1f:02:
56:c8:32:ce:2a:c2:36:ed:49:72:f7:4d:81:99:ab:3c:60:39:
81:fd:ed:63:c0:fd:7a:b6:b4:53:fb:ac:4a:2a:98:7c:f0:ae:
75:4e:1a:1d:52:c8:36:01:c8:ea:14:7f:57:e3:e7:be:bc:be:
41:df:73:b6:ff:52:f8:9f:98:eb:54:8d:5c:8b:f6:0b:32:f6:
82:15:ee:24:85:39:22:9b:5b:f0:7a:d6:20:03:99:b5:51:80:
02:72:d4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:44:51 2024 by rpki-client on console-ams.rpki-client.org