Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/8fad5de3-3c17-31e1-a859-fc1151b1239c.roa
File: 8fad5de3-3c17-31e1-a859-fc1151b1239c.roa (raw, json)
Hash identifier: 4CKySvEhanxpdidOHXIQdNEPuQe+92HqnEdpSEpEVw4=
Subject key identifier: 77:55:85:FA:00:6F:3E:17:D8:D6:7B:BF:32:FB:2F:22:88:64:D2:AC
Certificate issuer: /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Certificate serial: 010D0C9F43285846C7E51B945068A2978A5CE980
Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/8fad5de3-3c17-31e1-a859-fc1151b1239c.roa
Signing time: Tue 06 Aug 2024 01:00:28 +0000
ROA not before: Tue 06 Aug 2024 01:00:28 +0000
ROA not after: Mon 04 Nov 2024 02:00:28 +0000
asID: 40100
IP address blocks: 208.68.156.0/24 maxlen: 24
208.68.157.0/24 maxlen: 24
208.68.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 20:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c7:e5:1b:94:50:68:a2:97:8a:5c:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Validity
Not Before: Aug 6 01:00:28 2024 GMT
Not After : Nov 4 02:00:28 2024 GMT
Subject: CN=c2fd9614-6db2-460b-b964-c8aaa5283b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:34:ff:22:d5:43:a9:69:94:ff:f5:15:eb:
89:5e:7c:65:e1:8d:dc:5c:c6:55:02:24:9f:66:00:
ed:67:f9:50:41:2e:96:b7:5e:0f:29:9a:4a:f3:d6:
73:cc:f2:e3:01:04:c1:f6:7c:21:38:c8:3c:0c:f3:
ff:0c:8d:df:78:ea:15:0f:0f:65:f8:a4:dc:79:b8:
d5:69:8e:24:7f:40:c4:92:72:f1:ff:0f:48:67:7c:
f5:9c:ca:f8:b1:0b:4b:1f:64:9f:b3:aa:fe:f1:c8:
8e:98:a0:45:37:8e:80:2f:cc:3b:11:e5:ce:ab:1d:
55:ce:8d:3e:2c:ae:68:64:59:d7:32:a5:a7:e7:cc:
70:9e:90:ac:0a:6e:bc:a4:e5:22:7d:35:53:6a:70:
39:37:ea:51:1e:cc:89:d2:ce:b0:5c:d6:e6:d4:b7:
30:7c:62:1e:e5:67:65:61:3e:75:d4:d9:58:37:22:
73:a0:a2:71:a6:29:93:b6:98:ae:dd:c2:aa:62:e1:
9a:c0:61:24:58:94:ac:4d:24:c4:78:1e:ae:38:24:
27:45:59:24:1d:3e:d0:76:fd:34:64:b4:63:2c:b4:
6a:b3:a8:bc:b7:64:da:01:3f:0b:fc:bc:2a:9e:65:
1c:d9:23:b1:c5:ba:42:f3:f9:6c:8e:cd:15:dd:fc:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:55:85:FA:00:6F:3E:17:D8:D6:7B:BF:32:FB:2F:22:88:64:D2:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/8fad5de3-3c17-31e1-a859-fc1151b1239c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl
X509v3 Authority Key Identifier:
keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.156.0/23
208.68.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:04:c4:8a:ad:2b:47:87:ba:9f:49:e2:41:b8:90:d6:9d:ec:
6a:aa:0c:c9:61:9b:b6:82:9b:cd:75:ba:75:d9:bd:a6:fa:81:
07:3f:38:09:ab:6f:b5:35:40:38:40:7c:8b:84:2a:d7:74:b9:
11:38:3b:41:d2:70:12:1b:af:9b:be:c8:3d:e3:cb:fd:10:99:
c2:62:3f:39:a8:d8:db:9e:1a:24:8e:5d:48:e3:2d:16:ef:04:
f6:3e:53:51:58:11:0b:29:d4:f0:e4:f0:a8:b9:5c:cb:9f:0a:
14:79:69:98:bd:7b:8c:83:84:cb:f4:47:db:60:dc:72:a4:9b:
4b:07:37:6a:1f:31:3a:56:5d:cc:3b:5c:da:05:ae:a2:b2:e6:
76:18:c5:55:56:1a:d5:0c:e2:ea:37:5d:aa:8e:f2:71:65:53:
78:b6:36:f2:33:a1:e3:b2:62:c0:67:da:e6:71:de:a1:2e:9c:
43:ab:ae:c3:a3:9f:d2:3c:e0:14:50:00:4f:6b:6a:6b:f0:bb:
14:e0:c5:a8:63:f9:1f:06:f8:8a:3b:ef:3f:51:8e:61:38:16:
72:94:18:53:06:30:43:5b:f9:91:4a:17:55:52:c1:ce:d8:4e:
6c:2b:fa:23:08:ae:26:1b:cd:df:3a:e1:75:1d:0e:31:b6:c2:
c2:9e:aa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 21:49:30 2024 by rpki-client on console-ams.rpki-client.org