Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/99f84058-ee33-3751-b15a-84e511815cd7.roa
File: 99f84058-ee33-3751-b15a-84e511815cd7.roa (raw, json)
Hash identifier: EN/T/rf638M7TcYF6rHz461nx+1lDAFFsKxvPcXmIaE=
Subject key identifier: FB:31:AD:53:B1:06:58:90:A9:31:C2:87:E5:DF:59:A6:2E:77:DC:8E
Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial: 010D0C9F432858477230DCA71BCADC0A8F2E9BC0
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/99f84058-ee33-3751-b15a-84e511815cd7.roa
Signing time: Sun 06 Oct 2024 01:00:31 +0000
ROA not before: Sun 06 Oct 2024 01:00:31 +0000
ROA not after: Sat 04 Jan 2025 02:00:31 +0000
asID: 399575
IP address blocks: 206.204.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:72:30:dc:a7:1b:ca:dc:0a:8f:2e:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Validity
Not Before: Oct 6 01:00:31 2024 GMT
Not After : Jan 4 02:00:31 2025 GMT
Subject: CN=7d9d7942-a023-428d-9b54-c08230e7c48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:59:f9:f0:cf:bd:b3:82:25:d5:d0:38:16:
06:10:5b:cc:eb:3c:3c:b1:bb:20:81:48:35:e6:bb:
8a:94:64:ed:90:15:bf:79:b3:16:2e:e7:56:98:86:
81:11:d0:b0:a4:9f:fb:a9:e3:d6:fb:49:34:f3:61:
61:db:1b:49:73:a2:ab:96:52:2c:49:7e:3b:5a:83:
1a:4f:7b:f1:14:1b:2b:4a:87:a7:a3:e1:a5:4f:b2:
35:a5:fb:05:f7:7a:d3:1e:7c:ad:b2:b3:08:5c:3b:
f3:23:5d:e5:bc:43:e1:aa:6e:20:d4:91:f1:a3:d0:
25:ea:89:33:2d:58:53:c0:73:d4:93:53:35:e7:81:
3e:58:02:84:94:6e:d8:30:ed:16:34:c4:76:d9:cc:
aa:98:b8:54:61:71:16:8d:85:56:40:45:95:d0:78:
3b:e6:be:d0:0e:77:c0:c5:c2:26:7c:61:3c:56:00:
6f:7d:16:af:f5:93:89:fc:b6:80:90:d6:68:c1:82:
da:20:7b:fa:60:f8:b4:bb:16:ba:e1:9d:e6:1b:7e:
98:0e:f6:66:5c:07:e7:6d:12:47:18:7b:ca:53:37:
df:1b:47:72:02:d6:11:e8:98:c1:d2:f5:f2:1c:45:
ad:63:5a:bf:fd:84:ef:0f:d6:3c:da:e6:b9:6f:4f:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:31:AD:53:B1:06:58:90:A9:31:C2:87:E5:DF:59:A6:2E:77:DC:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/99f84058-ee33-3751-b15a-84e511815cd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
X509v3 Authority Key Identifier:
keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
sbgp-ipAddrBlock: critical
IPv4:
206.204.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:4f:aa:ba:7c:02:c3:45:5d:4a:f9:b7:a7:82:8e:61:f3:bf:
f2:88:df:ea:07:73:e3:39:84:cd:55:8d:9b:40:d1:9f:ed:70:
5d:75:7b:41:14:33:d6:3d:63:cb:5a:24:01:ab:dc:85:b0:19:
c6:3e:07:ea:6c:a5:26:52:bc:e8:d0:f2:ae:df:6c:6c:d3:60:
8b:8a:43:9c:80:c0:37:ba:da:cb:30:ed:ab:8c:37:7e:a7:4c:
78:2b:f0:5e:ca:b4:cd:59:49:b8:32:c4:11:d3:c1:ab:c9:d3:
e8:4b:80:12:8c:af:8c:8a:7b:15:67:7d:98:f2:6e:97:e0:fe:
e0:42:b4:5d:46:fa:72:34:ce:5c:1d:13:f8:2e:fa:b6:47:19:
63:2a:96:a2:17:13:3d:7b:a1:ff:a1:61:31:fe:61:ad:79:48:
3c:e9:fd:10:68:f5:bc:77:69:f5:42:10:36:3c:ff:33:86:13:
87:19:30:44:dc:80:78:1f:73:81:a0:47:f9:bf:71:b5:fc:5f:
a4:de:a4:92:92:e3:f8:dc:13:32:c2:cd:e3:11:b2:43:40:e9:
d0:44:38:bc:10:cc:04:e5:d9:3d:e1:ee:96:87:90:68:29:fa:
ea:00:05:d4:ef:4c:6c:f0:cf:e6:08:84:94:75:77:c8:d4:db:
b7:86:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 21:22:06 2024 by rpki-client on console-fra.rpki-client.org