Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/a8edc5c5-7dd1-3429-806b-a0e58e8d5ad0.roa
File: a8edc5c5-7dd1-3429-806b-a0e58e8d5ad0.roa (raw, json)
Hash identifier: cz0xVYVTRyeRI9SWAKnsDMAbOySD+9uzFM6fsTvP4Q8=
Subject key identifier: AD:EA:02:A9:55:83:E6:47:2E:27:6B:02:F7:F1:4A:55:D0:E7:8E:D6
Certificate issuer: /CN=d51683a9-b5b7-4347-877e-9bc1487de10d
Certificate serial: 010D0C9F43285846C51A754846FEDD809AAAC720
Authority key identifier: 51:AA:E5:91:FE:0F:F0:77:E6:E1:74:DA:BF:FB:13:24:75:A0:93:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/a8edc5c5-7dd1-3429-806b-a0e58e8d5ad0.roa
Signing time: Mon 05 Aug 2024 01:00:29 +0000
ROA not before: Mon 05 Aug 2024 01:00:29 +0000
ROA not after: Sun 03 Nov 2024 01:00:29 +0000
asID: 21925
IP address blocks: 104.245.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 16:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c5:1a:75:48:46:fe:dd:80:9a:aa:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51683a9-b5b7-4347-877e-9bc1487de10d
Validity
Not Before: Aug 5 01:00:29 2024 GMT
Not After : Nov 3 01:00:29 2024 GMT
Subject: CN=5d40f93b-7d02-493c-a60b-b285af9036ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:01:b3:b6:d5:2a:bf:52:64:a2:1d:d9:0d:
ee:db:f4:62:f1:64:d4:dd:ba:46:d2:2a:85:71:27:
83:35:d5:c5:a1:2d:15:0c:77:2b:98:fe:c7:cb:d8:
99:2d:a8:06:5a:3f:96:92:8b:d4:f6:55:cb:b9:86:
7b:b9:a5:4b:5c:02:9f:d2:0e:2b:dc:52:04:4e:76:
10:c2:0d:94:ca:d1:56:87:8b:41:f7:a8:97:16:cc:
bd:46:b5:c6:42:07:07:9b:67:e7:b2:c4:e1:d5:cd:
ca:81:b2:be:b1:13:1e:24:f9:07:73:07:e4:d9:cb:
b7:81:0b:8f:c3:b3:81:ef:7c:85:62:1b:ef:c2:3a:
3d:66:3f:34:3f:40:73:84:ec:95:c9:f5:8c:69:96:
f1:3a:f8:06:13:77:70:68:5e:7f:60:0e:18:ae:92:
b1:d1:c8:dc:48:0c:9f:d0:74:ad:c5:95:97:c6:2d:
90:95:9d:cc:5f:a8:58:51:5f:7c:3e:7c:af:04:c6:
bd:31:07:22:f7:64:77:34:7d:70:28:84:e1:27:1b:
3f:6b:c3:3b:1f:ba:fc:ae:ec:71:6a:70:f6:7f:c4:
b1:28:43:ec:04:02:6c:e0:6d:8a:96:3d:8a:04:aa:
61:27:a8:1c:9a:85:76:6f:7a:67:f7:93:2e:77:18:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EA:02:A9:55:83:E6:47:2E:27:6B:02:F7:F1:4A:55:D0:E7:8E:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/a8edc5c5-7dd1-3429-806b-a0e58e8d5ad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d/d51683a9-b5b7-4347-877e-9bc1487de10d.crl
X509v3 Authority Key Identifier:
keyid:51:AA:E5:91:FE:0F:F0:77:E6:E1:74:DA:BF:FB:13:24:75:A0:93:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d51683a9-b5b7-4347-877e-9bc1487de10d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:06:98:84:0d:68:02:84:0e:68:a2:32:10:8a:53:d5:4c:7d:
84:3c:75:75:1a:c8:7f:b4:8e:f9:40:9e:bf:4b:8c:76:6d:2b:
0b:71:74:08:fe:2b:80:71:6c:88:7d:a1:1a:75:5c:a9:35:7c:
70:c5:13:6d:20:51:39:56:da:53:92:00:a1:f1:0b:7d:7b:24:
b9:d6:28:94:c4:ca:fb:51:ce:10:39:d4:95:28:d8:32:ff:31:
2e:1b:68:e8:e4:dd:fb:0a:db:86:81:38:20:57:05:2b:f6:d9:
f4:25:e5:cb:80:32:86:e2:aa:70:e2:ed:18:dd:73:c8:3b:25:
15:28:3e:5d:c8:1c:24:db:0b:ab:db:93:f3:01:e5:97:66:b1:
8f:8a:98:69:2e:5b:95:f1:d5:8f:15:5f:4d:a5:e6:60:f1:eb:
13:7f:43:e9:d1:96:d0:ec:36:9d:d9:eb:62:65:f4:23:ad:98:
da:34:b0:1d:dc:aa:eb:c5:50:47:e1:f0:1e:55:5e:a2:cf:8e:
d0:77:3d:70:fd:96:e7:7f:be:54:a6:cc:7d:41:54:27:6e:45:
e2:71:56:2e:0f:49:1d:e7:e3:8a:07:28:89:e5:63:ba:3a:72:
c3:93:30:b7:16:68:2c:22:cb:8a:99:a1:dc:3f:33:87:84:fd:
e3:95:e2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 20:33:06 2024 by rpki-client on console-fra.rpki-client.org