Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/6996298c-11ad-3de4-ab93-29b801dc1bc1.roa
File: 6996298c-11ad-3de4-ab93-29b801dc1bc1.roa (raw, json)
Hash identifier: IE4B6zheffXN3qjYGpF2SdFGlRmoc82CmHuMPGqDn5Y=
Subject key identifier: F1:D3:AC:9A:6B:74:EC:E0:45:7E:5A:6B:89:A0:41:A2:F3:60:C0:10
Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial: 010D0C9F43285847CE10F9EE54C10E405C06B640
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/6996298c-11ad-3de4-ab93-29b801dc1bc1.roa
Signing time: Thu 07 Nov 2024 22:50:40 +0000
ROA not before: Thu 07 Nov 2024 22:50:40 +0000
ROA not after: Wed 05 Feb 2025 22:50:40 +0000
asID: 401395
IP address blocks: 192.157.36.0/23 maxlen: 24
2602:f7db::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Nov 2024 01:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ce:10:f9:ee:54:c1:0e:40:5c:06:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Validity
Not Before: Nov 7 22:50:40 2024 GMT
Not After : Feb 5 22:50:40 2025 GMT
Subject: CN=0beac975-47f2-4696-aa77-d8fc98ec4f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:75:a7:14:f7:f9:ed:44:8e:f1:33:72:15:
92:5c:56:a7:38:f4:df:f9:ba:43:8a:aa:f0:09:b0:
43:e8:8a:e1:ea:bd:d3:db:40:7c:38:7f:55:9e:3e:
9d:cf:31:d7:33:c6:c5:50:ac:34:a7:9b:d3:54:95:
58:2b:3b:f8:20:4f:cb:dc:3e:30:e3:e7:e7:4c:c2:
0a:a9:98:18:60:ad:cb:b2:bc:9e:2a:54:3a:9d:0c:
f2:02:19:8b:92:e5:13:4b:9f:9e:24:27:fe:29:39:
02:ff:23:81:0e:f0:1b:1e:5c:fb:4a:d0:fc:4a:37:
32:87:57:e2:54:06:58:ea:8b:2d:f7:5b:2f:4a:51:
3f:70:03:fe:40:27:37:79:39:f5:89:29:e1:7c:4b:
75:4a:55:2a:a1:d8:cf:f7:44:47:2b:79:f5:90:ed:
be:49:2b:af:94:2e:97:5b:80:da:03:b6:64:de:22:
47:42:bf:77:b6:5c:54:3c:81:86:c9:6d:0b:b4:b1:
64:82:14:03:33:ea:8a:c4:66:a1:4e:42:f6:4c:d6:
6b:67:21:54:45:ac:6a:12:f6:c8:d0:c1:fc:e0:e4:
62:76:c0:a4:63:7d:90:2a:46:c7:3f:e8:d4:f0:fd:
25:52:a8:55:d9:fa:5f:2a:70:32:9b:ff:37:1c:a9:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D3:AC:9A:6B:74:EC:E0:45:7E:5A:6B:89:A0:41:A2:F3:60:C0:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/6996298c-11ad-3de4-ab93-29b801dc1bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
X509v3 Authority Key Identifier:
keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.36.0/23
IPv6:
2602:f7db::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:54:2b:50:21:05:de:ec:2c:04:6b:bd:a2:55:2e:9f:3a:8d:
48:d5:5d:48:d9:d3:ba:cc:d5:37:e7:b1:6d:70:1a:13:d9:1c:
be:13:c4:4f:09:ab:a7:16:74:f1:24:ed:3c:2d:d9:07:9f:5e:
df:1e:cf:80:87:ec:54:e4:be:c9:5e:99:34:12:7f:cb:0d:82:
9f:f8:a5:94:2f:fe:09:69:a2:c0:38:6d:bd:6b:e0:6c:b7:33:
69:22:78:99:82:3d:eb:8e:5d:47:2f:b5:6b:e6:66:53:e5:f4:
ac:d5:89:e4:6e:07:0b:15:23:26:9a:e7:e7:51:40:73:f6:82:
27:85:6e:5d:ae:b6:e2:74:53:29:0a:bd:1d:95:db:cf:60:6f:
93:e3:72:e4:8b:3f:59:10:d0:cd:a1:37:0c:6e:e3:ce:d8:c0:
c4:61:58:7c:7e:c3:cf:fc:ab:e7:47:94:a4:c8:96:b4:79:f3:
03:88:fe:87:c8:9e:a1:4c:32:6f:d6:6b:7a:e9:64:a8:11:64:
0b:c2:e4:73:4a:42:bb:9c:01:14:d1:e8:64:7e:e9:ee:db:6a:
03:46:05:58:3d:bb:f6:bc:24:40:4a:91:24:bd:f9:0f:87:e1:
78:f1:a2:bb:cd:f9:88:9c:82:df:bc:e2:f5:0c:e5:a1:fe:4c:
f7:89:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 04:11:44 2024 by rpki-client on console-ams.rpki-client.org