Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/8ffa9875-b96f-3a34-b61d-7a5fec853d4a.roa
File: 8ffa9875-b96f-3a34-b61d-7a5fec853d4a.roa (raw, json)
Hash identifier: CuH7B120kWP4zfqRG32Qu9i7QzEZRK+BJZHLknxKQ6U=
Subject key identifier: 11:CB:DC:22:72:63:29:BE:26:5B:4D:E6:D1:88:34:BE:61:93:32:F7
Certificate issuer: /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial: 010D0C9F432858466BC48A94F8ADC229E84FA768
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/8ffa9875-b96f-3a34-b61d-7a5fec853d4a.roa
Signing time: Thu 04 Jul 2024 01:00:26 +0000
ROA not before: Thu 04 Jul 2024 01:00:26 +0000
ROA not after: Wed 02 Oct 2024 01:00:26 +0000
asID: 3257
IP address blocks: 134.195.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 10 Jul 2024 10:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6b:c4:8a:94:f8:ad:c2:29:e8:4f:a7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Validity
Not Before: Jul 4 01:00:26 2024 GMT
Not After : Oct 2 01:00:26 2024 GMT
Subject: CN=eef68f81-10fe-4746-9918-260eebc8ebf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:58:0e:dd:5a:01:01:aa:a5:a8:0e:55:07:8c:
f2:7e:4f:9d:27:62:f8:39:e2:d6:9c:37:8f:76:b7:
a0:f0:ce:34:67:a3:e6:f2:a4:6f:cc:ae:b7:de:71:
b7:b2:82:88:ea:c0:79:81:19:79:21:6e:5c:3b:64:
80:ca:0f:ef:1f:03:e7:0e:75:d5:52:fc:c0:e4:60:
db:a9:7e:22:b7:2a:4d:8a:97:f7:73:86:0b:0d:89:
1d:34:2c:d3:8a:d3:a4:99:6a:3b:4f:b1:06:1b:51:
14:fd:81:2b:5d:ad:c2:ee:ea:c5:b1:35:c8:8e:20:
70:99:64:00:b7:fc:db:42:f8:0c:15:1b:7b:e6:85:
11:d1:23:87:5f:d8:5e:4d:a5:42:8c:78:a7:af:e7:
c9:1c:f8:09:70:30:2d:9f:e6:8c:55:b1:fa:6a:b5:
27:09:69:41:27:46:3f:e4:a6:77:33:8c:0b:b1:31:
89:27:5a:48:ab:5b:ab:81:4f:06:a4:79:4d:df:e6:
e5:3d:7c:4c:c9:be:a6:63:c0:f5:3a:95:4a:b7:8b:
55:89:94:42:25:56:70:5a:10:d4:d8:9a:00:3b:d3:
d1:75:b4:b6:e6:bf:8f:51:e2:4b:b3:9d:b8:bd:6e:
b6:19:ca:f4:f3:76:cf:28:44:19:d4:9f:04:d5:1a:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:DC:22:72:63:29:BE:26:5B:4D:E6:D1:88:34:BE:61:93:32:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/8ffa9875-b96f-3a34-b61d-7a5fec853d4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
X509v3 Authority Key Identifier:
keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:a9:19:14:ff:78:91:43:f4:8a:f6:6b:b6:a5:16:7f:0c:71:
41:55:53:72:e0:fa:1d:7a:9a:f4:92:32:d9:1f:49:7c:7d:d3:
bd:2d:e1:62:3b:7a:d1:6e:1c:d9:3a:b4:2d:94:ef:fc:ba:63:
a0:e2:8e:ef:14:d6:f7:82:90:b0:2f:31:eb:41:96:39:64:eb:
ab:2a:a4:70:0e:e5:97:75:f4:ac:53:35:f0:a8:d8:34:54:57:
6a:58:df:be:e6:24:8d:13:64:bb:ee:bf:89:c8:32:84:fb:89:
92:47:ac:b3:ed:6f:43:4c:3c:89:50:8a:20:09:c6:a9:29:e3:
8a:16:3d:04:5a:75:91:7f:59:63:85:6d:22:18:c9:bf:8a:19:
dc:7c:79:2d:4f:bc:f3:bc:17:23:9f:0c:af:5a:d9:ab:e0:e5:
f7:0f:77:b6:9c:88:62:b3:c6:3d:ae:26:b8:33:7b:9a:e0:3e:
37:2e:21:15:6b:79:37:a9:63:c8:80:08:3e:34:a0:78:ac:c9:
f8:93:c4:4c:6a:c1:af:dd:07:cf:1f:37:06:bb:2d:d8:4f:b5:
f2:9b:98:97:86:82:e6:99:1f:ba:b8:66:be:b7:f8:51:d0:bd:
b2:00:aa:4a:09:f2:90:79:89:b8:ea:29:4b:39:4b:63:5a:ae:
e0:b5:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:03 2024 by rpki-client on console-ams.rpki-client.org