Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/63ece318-f1ac-34b6-a0a0-b40ac5a08784.roa
File: 63ece318-f1ac-34b6-a0a0-b40ac5a08784.roa (raw, json)
Hash identifier: TqNtjvbcndtfsZJtXuK+oQT3r3BLpn/M8WRWP+aku/M=
Subject key identifier: E0:45:C8:F1:F2:31:27:7C:D3:4A:CB:0D:D6:4F:B5:6F:B2:48:28:16
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F432858477230DDF62706F72BA594D880
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/63ece318-f1ac-34b6-a0a0-b40ac5a08784.roa
Signing time: Sun 06 Oct 2024 01:00:31 +0000
ROA not before: Sun 06 Oct 2024 01:00:31 +0000
ROA not after: Sat 04 Jan 2025 02:00:31 +0000
asID: 834
IP address blocks: 199.48.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 01:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:72:30:dd:f6:27:06:f7:2b:a5:94:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Oct 6 01:00:31 2024 GMT
Not After : Jan 4 02:00:31 2025 GMT
Subject: CN=f8a2669b-09c1-47fd-8b10-b5ec2a94f5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:89:3f:69:b7:4a:5d:ba:64:e2:49:75:18:
c8:67:be:64:32:6b:5d:de:21:9e:e3:c8:f8:56:e5:
64:01:78:4d:bb:42:98:33:cd:9b:73:3f:69:88:2f:
d2:8a:19:47:cc:ae:7c:c7:4f:84:92:66:37:54:6d:
67:d7:9f:8d:8e:98:3b:c6:45:7a:29:b7:fc:8f:33:
e4:7e:6e:e5:19:33:6a:e8:1a:67:a6:d8:96:b4:68:
5e:e7:61:7c:46:c4:53:73:4c:a3:14:17:a6:34:e7:
fb:99:95:7f:59:bf:d6:96:8b:9f:77:43:07:5f:66:
39:5b:07:1d:3f:16:3a:5b:23:4e:2c:be:ee:45:bd:
71:ae:90:ed:ad:4e:1e:aa:57:c2:f5:3f:b0:34:45:
7c:0b:b8:34:36:5c:51:4e:74:18:52:80:66:61:fc:
0c:ec:2c:3d:14:fb:9d:9e:69:2d:17:9d:a6:bb:d0:
4d:74:72:c4:19:60:b1:14:e5:c6:f6:fa:ff:d2:42:
4d:98:13:65:7c:29:32:ac:bc:5d:f6:6f:d8:5c:e3:
0d:6e:e1:6a:d5:d0:45:6d:51:e0:5d:bc:3b:b3:59:
49:4c:50:17:d0:74:6c:b8:ad:ef:1b:b0:7d:10:bf:
05:a1:93:25:c4:dd:d0:56:0a:96:9a:30:dd:98:4b:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:C8:F1:F2:31:27:7C:D3:4A:CB:0D:D6:4F:B5:6F:B2:48:28:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/63ece318-f1ac-34b6-a0a0-b40ac5a08784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ab:37:44:2e:fb:1b:4c:9e:76:7b:25:3e:33:53:61:4f:69:
08:85:82:1c:44:be:b0:fb:cd:2d:52:e7:01:cb:16:7b:ef:ee:
29:ee:a3:b1:79:6c:ca:20:35:22:7f:03:e2:6a:24:86:40:d8:
73:fd:df:be:30:62:84:45:0d:ab:dc:76:9f:10:46:ff:75:fc:
62:c1:c8:c3:7b:a9:5c:1d:11:3b:b7:7c:3e:4d:b0:0a:70:be:
19:55:31:76:2b:c0:13:8c:1b:48:51:84:0b:16:63:db:97:6c:
11:4e:a3:72:24:db:6e:de:66:cb:3a:47:94:53:0d:c5:4c:13:
0f:65:e1:2d:fc:57:12:b9:f5:11:cd:f7:15:5d:ed:fc:88:ee:
10:13:3a:b0:ff:c0:90:11:fd:26:f7:d7:3b:25:95:47:92:b4:
46:f7:9c:5d:e7:0c:f1:87:a8:cc:e1:e5:d3:1d:a5:9a:32:92:
7e:a0:7a:29:64:82:78:3b:78:c6:c5:18:16:0d:2d:c6:27:e6:
8a:2e:2c:31:08:50:20:71:fd:ff:79:7f:01:9d:06:5e:f5:10:
73:fb:46:d4:00:91:84:45:a2:c4:d2:8a:25:04:12:9b:66:40:
2e:a9:8f:58:e5:95:f3:da:ef:39:39:d7:0a:7a:09:4e:cb:34:
ea:73:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 04:45:21 2024 by rpki-client on console-ams.rpki-client.org