Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29a529ca-a56c-3a77-823a-76ccb1c6d9ae.roa
File: 29a529ca-a56c-3a77-823a-76ccb1c6d9ae.roa (raw, json)
Hash identifier: 6t1BIeZy5E8/LobhkK52TjLt2PivdthW5cwLyUPs00M=
Subject key identifier: 34:63:A3:8C:EF:41:B5:4E:77:9E:E8:EA:4A:B9:BA:FC:FA:66:3C:2C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584767062938569187C163299280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29a529ca-a56c-3a77-823a-76ccb1c6d9ae.roa
Signing time: Wed 02 Oct 2024 01:00:31 +0000
ROA not before: Wed 02 Oct 2024 01:00:31 +0000
ROA not after: Tue 31 Dec 2024 02:00:31 +0000
asID: 6939
IP address blocks: 172.120.9.0/24 maxlen: 24
172.120.15.0/24 maxlen: 24
172.121.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 13:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:67:06:29:38:56:91:87:c1:63:29:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Oct 2 01:00:31 2024 GMT
Not After : Dec 31 02:00:31 2024 GMT
Subject: CN=35cbeb2c-6aa5-4001-8004-fff30314f962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:10:4a:b5:45:30:a6:37:f5:33:ce:45:04:
f1:41:cf:fd:6e:e4:59:1f:22:31:1b:ac:6e:d7:2d:
41:7a:a4:f1:84:e2:10:f1:a2:4b:83:ea:63:98:2b:
a8:31:3d:be:41:7f:f7:36:70:93:2f:0d:02:17:2e:
d5:79:3d:4d:e8:9e:b9:4d:3e:1e:ce:c0:44:3e:8d:
c6:19:e5:11:00:47:ae:e5:27:19:ff:aa:6a:b7:a8:
bc:12:5f:b5:ba:16:cc:ca:ff:23:93:cc:d1:c0:b3:
73:d7:d6:34:fe:43:19:3f:69:e9:44:3f:4a:2e:45:
ab:51:76:52:e6:2b:9e:74:36:de:5e:c1:b5:b9:89:
82:e3:57:d8:64:c8:13:b3:a6:69:6f:5b:61:3e:ef:
1c:85:16:c2:25:c3:70:2e:c0:a9:a1:ae:6a:2e:36:
bf:d1:55:52:0e:4c:fc:49:2c:48:f6:b1:84:50:b8:
1c:3e:ff:bf:f9:24:f2:c1:4d:1e:e7:69:29:9a:91:
1e:99:cc:fa:09:0e:d7:c1:b3:94:8f:e1:52:7e:78:
80:cb:43:55:53:14:e1:65:ff:35:fb:e2:a0:13:cc:
e3:e8:1c:b4:99:f0:1a:0a:83:d3:f2:ac:70:dd:e8:
55:b5:48:8b:61:80:ef:47:5d:2e:9f:3b:f3:e0:2c:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:63:A3:8C:EF:41:B5:4E:77:9E:E8:EA:4A:B9:BA:FC:FA:66:3C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29a529ca-a56c-3a77-823a-76ccb1c6d9ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.9.0/24
172.120.15.0/24
172.121.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:87:f1:24:64:44:29:76:87:92:d0:02:ba:e0:f4:6f:af:bc:
ed:a7:6c:46:92:10:ee:9c:80:2d:1f:9b:37:84:19:57:2d:f7:
00:af:ca:8b:ba:30:85:bd:9e:de:ff:63:b7:1b:bc:4d:45:79:
95:f6:71:ae:52:dd:a7:d9:a2:a5:cd:e5:6b:c6:5d:6f:f2:7b:
cd:91:fd:be:c7:e3:bf:12:cc:c0:a4:fc:0a:7b:47:f1:6f:26:
cb:6c:48:81:39:16:4a:5e:4f:68:d2:0e:95:4a:73:48:d1:1b:
51:2c:a3:00:d5:d0:df:60:47:e1:d8:62:71:05:4c:a2:d9:c4:
44:d2:5b:43:ae:a7:45:6c:58:25:f2:44:0a:c0:36:17:6a:76:
8c:23:b8:78:48:9b:ba:d1:d8:7f:95:ad:ec:08:cc:94:cf:fa:
1d:f6:4d:f4:12:58:8a:7d:f9:e5:d1:34:4f:eb:d9:2e:84:f1:
92:6e:2d:1a:ca:56:f9:b0:33:e4:69:44:f5:19:7f:f5:5f:00:
81:21:db:38:0d:f6:b1:dc:13:c2:eb:b8:f6:eb:78:fd:cd:7f:
6c:2e:d3:6c:80:a5:2e:08:a5:7c:de:c5:20:ae:83:7a:cc:ac:
ba:5a:ba:e7:bc:10:2b:1c:13:0e:6a:ee:42:30:c3:4a:84:19:
09:1e:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 17:21:25 2024 by rpki-client on console-ams.rpki-client.org