Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/dd5dc660-ac45-367e-8fd1-68814cf5f217.roa
File: dd5dc660-ac45-367e-8fd1-68814cf5f217.roa (raw, json)
Hash identifier: +Q02ivWfd9irVB9chDgEEcrWCQT8IqflNhZVUQtutgk=
Subject key identifier: 8D:09:A3:7E:25:CC:A0:2F:0E:2A:49:30:05:2D:B0:07:E0:B3:DE:4C
Certificate issuer: /CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
Certificate serial: 010D0C9F43285846793A83CBDC6CD70E4DC788C0
Authority key identifier: ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/dd5dc660-ac45-367e-8fd1-68814cf5f217.roa
Signing time: Mon 08 Jul 2024 20:43:43 +0000
ROA not before: Mon 08 Jul 2024 20:43:43 +0000
ROA not after: Sun 06 Oct 2024 20:43:43 +0000
asID: 16509
IP address blocks: 204.16.216.0/21 maxlen: 22
Validation: Failed, certificate revoked on Tue 16 Jul 2024 22:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:79:3a:83:cb:dc:6c:d7:0e:4d:c7:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
Validity
Not Before: Jul 8 20:43:43 2024 GMT
Not After : Oct 6 20:43:43 2024 GMT
Subject: CN=d169506a-1d32-4f22-9c4d-1d57afc71bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:91:7b:65:64:f8:2a:23:6e:dd:56:2d:9b:
bd:08:bc:a2:d6:2f:cc:d9:d3:d4:75:33:e8:b5:54:
17:df:a2:83:09:c1:2a:60:09:a0:38:43:71:0d:67:
5e:cb:6a:79:a9:9d:63:fd:42:45:cd:fe:ff:26:73:
55:a4:ba:51:dd:a8:3d:c4:88:95:5b:80:d8:03:c2:
c6:a5:6a:f3:37:2c:c4:46:9c:58:71:d9:5e:66:d7:
95:0c:81:4f:42:93:e4:27:53:d3:f5:23:f2:59:66:
64:18:65:f5:cf:e6:70:f6:6b:c1:81:d7:3f:76:2a:
7e:c2:c5:64:cc:45:e1:97:1f:b2:5c:e0:5a:9f:ad:
ce:cc:29:8e:32:87:21:d6:e9:13:b3:3d:7f:a4:20:
0a:a4:ab:25:e2:6e:66:20:c1:d1:4a:e5:9b:c7:53:
3e:00:b4:d7:d3:5a:67:8d:76:f6:45:bf:ff:09:ee:
d2:d6:10:24:f2:8c:64:e0:e8:e1:c9:9e:01:55:ec:
ad:28:e1:3c:c4:4a:3a:f0:55:00:bd:9d:98:31:fd:
42:88:f4:89:47:01:92:c9:72:02:b2:c9:0f:2b:cd:
63:34:5f:ad:27:92:6d:22:cd:26:5a:f9:aa:b5:95:
b2:e1:d4:e8:64:fe:be:99:bf:c4:62:cf:54:d3:1a:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:A3:7E:25:CC:A0:2F:0E:2A:49:30:05:2D:B0:07:E0:B3:DE:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/dd5dc660-ac45-367e-8fd1-68814cf5f217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl
X509v3 Authority Key Identifier:
keyid:ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
sbgp-ipAddrBlock: critical
IPv4:
204.16.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:76:bc:e1:2a:11:84:60:9f:e7:92:db:41:19:0e:a1:06:40:
b1:e7:c1:82:56:88:96:85:56:6a:e8:6d:cd:6e:d1:da:65:ea:
1c:68:fc:14:e4:53:58:c2:4a:7b:1a:7b:ba:bb:2d:ca:d9:dd:
c7:f0:49:de:ee:d3:10:b7:18:40:28:d7:de:0a:c0:ac:39:86:
41:d8:d5:1e:f9:18:59:63:66:44:db:61:44:cd:ce:7f:39:36:
69:36:e6:de:2c:56:42:8c:02:89:41:56:d7:c6:ac:16:9b:67:
3d:a8:75:93:36:2c:79:a0:30:37:e2:22:10:60:1a:4d:e3:1f:
6a:0b:27:a2:b4:f1:7c:ad:f6:da:73:68:26:ff:d7:59:bd:6d:
1d:f3:e2:46:ec:25:2e:ba:d8:3f:cc:53:2e:7f:b3:83:3d:c7:
bc:06:82:3e:87:b0:6b:6a:db:07:84:f8:2e:23:f4:7c:6c:36:
e0:8c:38:58:62:d0:b0:10:df:65:31:0f:56:14:a6:b4:08:61:
34:06:8a:76:4f:1b:b5:4f:c1:b8:68:41:69:13:da:d0:ad:60:
fd:51:da:67:7a:22:a2:6b:8d:91:45:cb:b6:f0:41:11:d4:04:
5d:6f:86:a1:88:b5:8b:cc:d1:98:91:76:3f:9f:63:31:a6:24:
5e:94:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 01:58:22 2024 by rpki-client on console-ams.rpki-client.org