Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0024cb53-3aea-30c9-bb57-cd85efc2e663.roa
File: 0024cb53-3aea-30c9-bb57-cd85efc2e663.roa (raw, json)
Hash identifier: AvTOyu90OBchOnmOWM8fCQjKoI46oqvpbKv5VF1Hlj8=
Subject key identifier: 01:BC:DB:6E:BA:89:4C:B6:A7:31:49:E9:F1:46:21:0E:2F:49:73:FB
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584746EB67388D57FFB4E5FAD420
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0024cb53-3aea-30c9-bb57-cd85efc2e663.roa
Signing time: Fri 20 Sep 2024 13:00:42 +0000
ROA not before: Fri 20 Sep 2024 13:00:42 +0000
ROA not after: Thu 19 Dec 2024 14:00:42 +0000
asID: 149440
IP address blocks: 172.120.13.0/24 maxlen: 24
172.120.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 17:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:46:eb:67:38:8d:57:ff:b4:e5:fa:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Sep 20 13:00:42 2024 GMT
Not After : Dec 19 14:00:42 2024 GMT
Subject: CN=f5fd4174-9fa6-4357-84b9-72c2fc366c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:41:a5:38:46:53:64:4c:c2:97:ac:cc:55:
7a:7a:47:65:63:c7:ce:b1:72:5b:28:38:3b:bb:88:
3f:c3:b6:04:57:1d:1f:27:e2:70:48:dd:96:20:34:
ea:46:8e:7a:28:10:55:42:4c:44:8c:36:fa:64:f9:
2e:a8:9c:f2:f9:1f:aa:70:e7:7d:96:18:88:dc:ae:
a8:b7:ed:14:4c:69:42:a1:0c:9d:33:6b:6d:fb:93:
f9:bd:5e:7e:39:f8:0a:ba:cd:db:64:0b:e0:fe:10:
27:5d:fc:17:5a:13:f4:67:d0:8c:1c:8f:f4:26:37:
78:85:79:f0:71:94:12:dd:8c:57:fa:52:70:a4:cf:
4f:98:ca:13:41:ba:2f:44:87:7e:de:cb:68:59:5e:
73:0c:ad:65:09:74:62:00:59:0e:ed:45:eb:56:91:
60:65:4e:06:4e:a1:19:d1:b3:28:3e:5a:dc:36:00:
07:cb:59:37:f7:cc:22:2a:3f:61:c6:85:9a:7c:1e:
df:61:4f:3d:22:c9:60:ac:fb:c3:56:a5:17:51:30:
5d:87:30:14:ac:d9:fc:49:a6:bb:51:ea:92:dd:d7:
13:39:15:e3:3f:94:7f:4c:3b:91:fc:4f:50:cc:35:
9f:e6:c2:b6:6d:0c:fe:24:3e:62:f5:38:00:66:46:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:DB:6E:BA:89:4C:B6:A7:31:49:E9:F1:46:21:0E:2F:49:73:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0024cb53-3aea-30c9-bb57-cd85efc2e663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.13.0/24
172.120.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:2f:40:cc:ea:b7:c1:32:fe:08:b4:f3:b1:ab:3c:c1:7e:cd:
5b:6d:69:f1:f2:e0:f4:52:be:df:5b:59:59:d5:d3:e8:d2:dc:
bd:47:dd:ac:ee:d1:c2:aa:e2:94:ab:97:ac:39:83:44:ea:29:
96:43:4e:b6:dd:77:be:2e:31:e4:2d:8f:ee:aa:f9:09:d9:9b:
1e:a0:85:25:4f:42:f1:9e:68:df:59:55:f7:d3:1c:cb:68:47:
3b:3a:0f:f8:4e:7f:25:27:59:91:9b:2a:8b:08:ff:90:80:5c:
8f:43:2a:8d:e9:ec:d6:71:8e:d7:1e:55:5a:97:d3:fd:b6:b1:
48:1e:8b:02:f7:17:51:51:ee:fc:54:33:4b:18:6f:40:fb:93:
2c:a7:31:84:c9:aa:7a:2b:86:04:33:60:36:17:15:26:36:60:
a8:b9:cb:4a:e7:05:de:2f:ec:c1:b9:c1:7f:7b:85:79:fd:d3:
f0:6c:fd:6d:c9:17:de:76:0c:2c:52:d0:9f:b0:67:08:6c:a0:
f3:30:37:00:99:ed:dd:cd:0a:fb:f4:0b:ae:6c:e5:09:e8:52:
d4:42:e4:df:56:05:97:21:fc:91:73:45:45:ce:60:8f:95:cb:
d3:f7:2a:53:aa:3f:fb:be:f2:d3:c1:be:59:24:3d:b0:b6:3a:
51:0e:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 19:54:06 2024 by rpki-client on console-ams.rpki-client.org