Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/adac65f0-358b-3e2e-a311-908cf5124482.roa
File: adac65f0-358b-3e2e-a311-908cf5124482.roa (raw, json)
Hash identifier: VNdQ+Ms49hyKT/yIOtHJ8aApu1ReVWUTjqKi76WvGrk=
Subject key identifier: 48:49:CC:6F:9A:B8:BB:9D:32:A6:27:A2:E2:4F:AD:D2:92:4D:B3:D4
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB9451DF0056CE9EF9100
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/adac65f0-358b-3e2e-a311-908cf5124482.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 192.154.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b9:45:1d:f0:05:6c:e9:ef:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=226da775-4c08-48b6-8868-26ece1773f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:cf:e4:ed:ed:61:14:fb:cd:e9:af:58:a7:
9f:0d:84:80:21:25:b5:e0:75:34:92:bc:3a:45:f6:
22:4c:ed:a3:6e:50:28:88:60:6e:83:ae:53:d4:c4:
1d:5f:1c:ad:11:14:33:c9:24:4e:43:c3:17:01:91:
e6:1d:fc:bb:ac:a9:13:fc:ae:38:8f:65:1a:f8:c4:
83:47:82:b8:b8:b5:bd:26:5e:84:1b:43:49:f1:41:
20:7d:6d:ae:21:dd:d7:f8:e8:15:94:29:c1:eb:ed:
51:97:8c:90:2d:78:11:57:56:bf:b0:d1:d7:80:e2:
54:30:84:76:48:fc:51:97:82:5d:49:d5:db:34:96:
76:93:b9:5e:62:e9:c5:59:76:e4:2c:6d:78:06:f7:
35:47:da:1e:e5:ae:a0:52:83:7a:fb:bf:b8:0f:3b:
1c:e5:16:7b:1f:e5:48:de:dd:a5:fa:b5:b6:c3:b2:
4c:2f:61:e8:f1:38:b9:44:ff:3c:c6:70:cd:06:1f:
cc:c1:30:3a:7b:d7:73:15:0b:28:f1:36:2b:51:be:
65:90:a0:49:19:d7:2c:0a:27:0f:2e:26:1d:66:19:
08:dc:d4:a7:61:e9:ef:2d:c1:8d:30:ec:2e:e9:09:
98:3e:81:6b:fd:2c:b6:77:86:36:3d:22:20:56:c5:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:CC:6F:9A:B8:BB:9D:32:A6:27:A2:E2:4F:AD:D2:92:4D:B3:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/adac65f0-358b-3e2e-a311-908cf5124482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:6e:0d:d3:9d:32:7d:b4:a3:eb:35:47:59:1e:b7:9f:98:58:
87:d2:9a:3b:0c:ff:46:47:61:c5:fd:8c:d6:80:6d:91:39:d9:
15:22:e2:44:98:96:47:15:d2:36:66:fe:f7:ea:6a:36:d3:02:
3e:a8:c0:8f:1a:1e:f8:5b:95:45:26:87:0f:4a:9e:27:ed:ba:
8c:51:08:d0:54:64:9b:45:e9:67:e4:da:12:94:8b:7a:a3:e4:
7b:6e:4a:3d:87:f3:98:5b:ea:23:94:f9:8e:e5:2d:c6:a9:b1:
26:b6:d2:ab:27:03:b8:c6:7a:c6:a6:9c:d8:13:a4:8f:f7:06:
74:42:c1:fa:73:81:a8:b0:05:07:91:80:6b:dc:06:69:2a:47:
35:3d:d8:b7:d0:6c:44:10:4a:8d:28:1f:ec:95:4a:11:98:02:
02:94:20:22:09:2d:b4:42:40:b1:d2:6a:7f:3e:af:d7:22:20:
d1:e4:d0:ed:92:78:18:61:48:36:3a:b2:aa:d9:45:17:04:54:
70:cf:1c:b9:57:06:fd:b0:5f:3a:62:2b:5c:87:99:da:aa:07:
24:e5:b2:a6:16:73:63:58:c5:67:2d:de:20:41:27:8f:e8:04:
86:c6:05:da:93:61:7e:be:21:50:fa:e0:16:3e:7b:00:d3:61:
75:21:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:58 2024 by rpki-client on console-ams.rpki-client.org