Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/5c4039e2-2a57-3448-9291-2a623ecc18c1.roa
File: 5c4039e2-2a57-3448-9291-2a623ecc18c1.roa (raw, json)
Hash identifier: HwQEpe7mxCgbLVNRYE6rz8DDn0vrG/0FEq/IqQcvN7o=
Subject key identifier: D9:24:F6:EE:B6:2B:CC:14:A6:7D:0D:CC:7E:D9:F1:48:69:0F:B3:21
Certificate issuer: /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial: 010D0C9F43285845B828CA3F97E72EE4D3A33680
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/5c4039e2-2a57-3448-9291-2a623ecc18c1.roa
Signing time: Tue 30 Apr 2024 16:57:00 +0000
ROA not before: Tue 30 Apr 2024 16:57:00 +0000
ROA not after: Mon 29 Jul 2024 16:57:00 +0000
asID: 398020
IP address blocks: 23.133.48.0/24 maxlen: 24
23.133.49.0/24 maxlen: 24
66.205.243.0/24 maxlen: 24
209.142.76.0/23 maxlen: 23
174.136.212.0/22 maxlen: 22
2602:fde8::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 May 2024 03:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b8:28:ca:3f:97:e7:2e:e4:d3:a3:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Validity
Not Before: Apr 30 16:57:00 2024 GMT
Not After : Jul 29 16:57:00 2024 GMT
Subject: CN=fdf3910d-139b-4995-b4e3-4a31255537de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:3d:a9:3a:c9:07:40:13:09:6f:98:c0:8c:
21:82:e2:9b:56:60:97:9f:02:33:ba:fc:56:07:99:
70:14:e3:32:95:e3:2d:cd:ce:35:b1:8d:ca:61:fd:
b9:d2:da:e8:9e:22:28:01:7e:ef:51:62:c1:f5:61:
d3:81:2d:d4:f8:b4:47:e7:90:24:e4:86:28:7d:f8:
24:5a:b6:91:94:65:4e:e5:b9:70:b1:18:0c:53:96:
38:da:1c:0f:61:c3:62:0f:3e:35:ec:08:0b:78:e2:
76:d3:dd:ab:2a:e8:47:8a:32:bb:3f:1f:1e:8d:46:
81:8d:84:53:b7:e4:77:c3:c5:77:35:10:18:42:18:
cc:d3:bc:bf:5d:f6:58:86:d9:10:bd:f3:ea:49:2f:
12:7a:c5:b1:5f:f5:e8:f6:93:ad:06:17:37:de:79:
7d:90:ae:b8:00:fb:8d:b9:d0:fb:a6:57:23:53:1b:
ca:e1:a7:df:9d:cc:d9:48:05:70:5c:32:fb:32:3f:
1d:44:44:dc:4e:84:b6:7d:ba:44:ab:cc:74:84:ec:
d4:58:47:ae:cf:8f:92:1c:3d:0d:8c:e6:5c:b0:bc:
0a:15:cc:4a:1e:fa:15:80:3c:ba:35:a8:39:7b:37:
5c:7b:87:bf:5d:3e:51:9c:b6:71:de:65:f6:e5:b1:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:24:F6:EE:B6:2B:CC:14:A6:7D:0D:CC:7E:D9:F1:48:69:0F:B3:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/5c4039e2-2a57-3448-9291-2a623ecc18c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
X509v3 Authority Key Identifier:
keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.48.0/23
66.205.243.0/24
174.136.212.0/22
209.142.76.0/23
IPv6:
2602:fde8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:a9:31:5c:bb:1d:02:1f:9b:6c:32:ca:e1:f2:53:da:0c:16:
95:53:be:d8:6c:40:f5:0b:b4:f9:2b:d6:d0:0d:24:48:eb:ac:
47:7a:de:ff:bd:ed:01:7b:ce:f0:c4:71:91:24:fc:67:d5:47:
57:b8:96:87:a9:9c:5a:6f:15:7f:f4:6a:9e:c7:a1:2b:ca:35:
ac:69:d2:38:61:d6:f7:a1:44:64:08:30:f4:f9:d4:8b:58:45:
75:3e:a6:45:4e:3a:4a:88:5e:85:a7:df:ca:86:ab:9c:42:9f:
03:56:60:56:61:53:08:f0:cb:c6:a3:c1:e3:cb:3f:e4:53:3c:
ed:5e:93:42:62:88:d9:e9:8b:af:a7:39:2e:6d:18:d8:c8:48:
e8:58:b0:6b:6d:fb:40:58:84:7f:48:52:5a:8e:4e:f7:e7:2f:
d9:4e:ca:a0:dd:64:83:fa:54:16:a0:ce:56:59:e8:53:6e:ca:
87:56:d4:ce:d6:12:5b:29:61:30:44:e4:7e:d4:f6:ab:9b:41:
e0:92:fb:2e:bd:c4:c7:ce:fd:66:11:47:5d:6f:d9:d5:e4:76:
10:80:61:44:7e:b0:fa:5e:71:97:f5:fb:26:46:e0:4e:17:76:
90:29:6e:93:c8:29:d2:f2:51:fc:96:2c:7e:bc:09:40:6d:9b:
1c:ff:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:15 2024 by rpki-client on console-fra.rpki-client.org