Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f17557f-53b3-3663-bcf7-6cdac667fad4.roa
File: 8f17557f-53b3-3663-bcf7-6cdac667fad4.roa (raw, json)
Hash identifier: 6Oc5LyHavLG14KX/kzixdYDUz1ELMvFU5ayCQ166XdY=
Subject key identifier: 51:D3:30:EC:38:41:04:36:B0:F6:D7:11:BD:E7:AF:A1:3F:10:A1:8C
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858458C6DD698A23813EE1EBE2500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f17557f-53b3-3663-bcf7-6cdac667fad4.roa
Signing time: Mon 15 Apr 2024 01:00:26 +0000
ROA not before: Mon 15 Apr 2024 01:00:26 +0000
ROA not after: Sun 14 Jul 2024 01:00:26 +0000
asID: 397630
IP address blocks: 172.252.231.0/24 maxlen: 24
172.252.224.0/24 maxlen: 24
192.177.93.0/24 maxlen: 24
172.252.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 06:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:8c:6d:d6:98:a2:38:13:ee:1e:be:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 15 01:00:26 2024 GMT
Not After : Jul 14 01:00:26 2024 GMT
Subject: CN=bd47a4fc-f9c6-4eb6-922f-af588cbcc983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:8e:09:51:6e:6b:3f:cf:9a:04:24:d5:2d:
0a:c8:87:df:fd:f5:0a:20:5c:b7:be:1b:60:64:12:
42:45:27:de:6c:99:5d:cd:6e:cc:30:16:2e:f4:33:
e4:e2:ee:0f:41:36:d7:86:ff:f3:89:02:7e:6c:14:
c7:54:28:4f:a9:72:86:28:c0:fa:3b:f7:d6:f8:29:
86:8d:4e:c2:e3:6b:8f:9d:f5:60:84:8f:43:d4:1f:
9e:56:b6:b0:c6:f3:86:c8:63:bc:31:9d:1c:86:af:
0b:3a:6a:2d:df:d2:eb:37:3f:c1:bd:1a:11:58:9d:
b1:c2:eb:53:a1:8d:db:38:83:2a:2a:87:e9:a7:71:
19:8b:f2:44:19:69:e4:d6:d5:e5:e6:13:54:87:0b:
1b:2f:f4:66:ff:e7:69:62:b5:b4:5b:93:e5:f6:a5:
83:fe:fa:91:8e:87:83:fe:cd:72:86:7d:9b:d7:d4:
f4:7e:70:8c:c4:62:3c:72:42:f5:be:c7:d1:de:56:
ad:8a:b0:32:18:5d:24:97:b0:16:fb:9c:2e:7d:0e:
ab:ad:82:5c:a1:14:c0:7b:56:b8:ec:6d:58:55:bd:
76:fd:d9:24:f0:62:9c:8f:17:be:95:58:40:9b:c6:
2d:18:16:56:e4:a7:ad:64:0e:fc:b9:f1:06:39:b7:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D3:30:EC:38:41:04:36:B0:F6:D7:11:BD:E7:AF:A1:3F:10:A1:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f17557f-53b3-3663-bcf7-6cdac667fad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.1.0/24
172.252.224.0/24
172.252.231.0/24
192.177.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:25:9f:e4:d3:5c:6d:80:ed:32:2e:9e:85:aa:9c:0e:45:de:
23:9a:16:dc:a8:63:62:4f:e6:94:0c:d8:dc:62:70:d7:14:e6:
f1:6c:9a:b8:1c:e6:b3:93:0d:60:a8:03:c4:27:c9:c4:cf:b1:
bd:eb:ad:af:25:c6:32:f4:d4:8b:da:54:ce:e5:b5:f1:8d:57:
ef:45:a7:38:ba:7e:a6:17:43:1d:0b:38:e9:67:9a:98:c3:05:
c4:40:4b:23:91:0f:87:dc:64:27:9d:d6:71:9a:f1:ef:3b:1d:
a8:8f:16:77:1d:34:8e:ec:8d:b7:5f:44:18:a2:34:85:b1:1d:
0b:e0:dd:94:26:fd:71:c0:b6:aa:03:d8:66:e9:24:9f:b3:95:
af:02:17:43:7a:1d:13:37:d7:3d:68:d5:af:ac:0b:8a:25:e5:
05:5c:93:7d:82:0b:f2:e7:83:8a:6b:3c:84:fa:27:0c:c5:49:
c1:1d:9a:4d:29:71:1c:58:35:ec:67:8c:b2:e5:43:67:96:52:
f7:dd:9c:4d:be:0e:5b:44:31:3f:64:0f:0c:63:5a:7a:e0:23:
50:2b:15:23:ca:35:99:a4:bd:a0:e8:66:8d:b1:59:5b:81:61:
37:5e:20:3d:08:f9:7a:38:76:1a:40:4e:41:f6:9c:cb:b0:50:
26:c6:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 09:55:39 2024 by rpki-client on console-fra.rpki-client.org