Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f4cb87b5-cb27-3dba-909d-3e58ce32be98.roa
File: f4cb87b5-cb27-3dba-909d-3e58ce32be98.roa (raw, json)
Hash identifier: aRXQRYbwZd+mS01/EA96sCWXHIvk61egrd+Ven7bPmA=
Subject key identifier: F9:63:D8:31:17:55:4E:03:06:AA:12:68:2E:56:75:CD:60:36:7A:7D
Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial: 010D0C9F432858477230DC6AEE8C0A5519E1B500
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f4cb87b5-cb27-3dba-909d-3e58ce32be98.roa
Signing time: Sun 06 Oct 2024 01:00:31 +0000
ROA not before: Sun 06 Oct 2024 01:00:31 +0000
ROA not after: Sat 04 Jan 2025 02:00:31 +0000
asID: 399575
IP address blocks: 206.204.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 18:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:72:30:dc:6a:ee:8c:0a:55:19:e1:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Validity
Not Before: Oct 6 01:00:31 2024 GMT
Not After : Jan 4 02:00:31 2025 GMT
Subject: CN=d742d012-ea17-4ee4-806b-cf1d61719c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:68:f4:e1:e8:d6:85:e4:ef:67:b4:33:85:
69:07:f8:83:80:af:22:4c:22:69:59:dc:f8:8a:97:
b2:e6:f0:51:e2:ac:9d:aa:31:44:4d:89:be:97:21:
da:0f:00:28:a6:87:a7:13:c7:e5:3f:bf:b6:3d:08:
d8:eb:f0:4a:72:66:f2:3e:53:65:3b:42:be:98:fc:
9a:f0:f5:9c:73:8e:87:99:ca:30:f1:d7:d6:04:f8:
3e:b1:ba:6a:a9:0f:c6:61:cc:9b:17:d5:76:06:1d:
18:c3:90:c2:fe:34:be:f6:0b:85:0f:b7:43:78:1d:
9b:22:c3:af:5a:a2:23:1d:7c:c3:cb:71:d9:6f:7f:
ed:a0:dd:c6:8a:6d:e3:84:c8:5a:9d:7b:e2:e6:bb:
83:09:56:99:6f:c7:9b:0c:d5:be:a7:92:f9:31:45:
11:54:74:2e:cd:3c:30:10:dc:14:13:c4:1b:e2:73:
57:c9:9e:89:8c:4a:e8:72:88:0d:91:6c:e0:59:5b:
db:67:9f:5a:19:5b:11:d2:52:89:7b:6d:c7:38:ac:
5b:65:59:34:26:e3:0d:46:61:08:22:82:3d:b4:80:
4d:2a:3a:bf:55:2b:63:df:60:a6:10:29:bd:c6:35:
5c:a0:71:61:32:d1:46:0d:e0:b2:d9:0f:d8:e9:27:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:D8:31:17:55:4E:03:06:AA:12:68:2E:56:75:CD:60:36:7A:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/f4cb87b5-cb27-3dba-909d-3e58ce32be98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
X509v3 Authority Key Identifier:
keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
sbgp-ipAddrBlock: critical
IPv4:
206.204.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:b7:b0:07:db:58:a8:e4:86:e7:64:2f:6f:d5:8d:36:e7:05:
fc:7c:00:36:dc:fe:e4:0f:d9:21:f3:63:86:98:af:a6:3a:28:
91:5b:ad:52:91:8c:42:1e:33:c9:b0:b3:09:5f:2a:f9:2a:b3:
33:ca:62:98:6c:2f:bc:44:ad:1c:06:04:c4:97:d6:8f:d9:32:
c2:18:0c:85:5f:81:27:fa:9b:94:8d:27:f0:c4:2e:78:34:09:
63:df:5c:e1:22:af:47:03:cd:14:dd:87:b1:77:45:fc:56:67:
74:bc:a7:4d:f7:ec:75:d7:37:a9:e2:1b:cc:e4:9c:94:0b:c3:
20:c8:aa:e5:5f:4b:e3:a4:52:52:f3:67:23:cb:4d:cb:5a:a3:
ed:bc:ff:ee:f8:cc:8b:d7:16:fb:7b:69:66:03:37:6d:d1:68:
39:b4:42:a0:85:1c:84:ef:55:bc:8a:90:ab:ed:da:ce:32:50:
e5:fa:63:1f:74:bb:8d:c9:a6:ed:ce:fd:e7:ce:88:5c:1e:f1:
26:59:95:5a:42:63:c5:f2:9f:2a:10:8e:f8:0f:25:eb:6c:54:
d3:8b:97:14:e2:a5:97:30:2e:8b:ab:30:b6:52:e9:1b:f9:fc:
14:a4:e8:21:c0:57:35:45:b4:41:ed:38:df:72:6a:69:fa:78:
ec:ff:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 21:45:15 2024 by rpki-client on console-ams.rpki-client.org