Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5d80be3-1a23-3966-be78-ca9f8978e1c6.roa
File: a5d80be3-1a23-3966-be78-ca9f8978e1c6.roa (raw, json)
Hash identifier: klCN9JIVAPXVVLKibstnHlLyKSmUpd9y5lU7iTZPuF8=
Subject key identifier: A7:A2:78:FF:7B:57:C5:4C:D2:EB:60:F3:91:B2:93:DA:7D:D6:08:34
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285846BCBA67A61B39DB31D7DC7200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5d80be3-1a23-3966-be78-ca9f8978e1c6.roa
Signing time: Fri 02 Aug 2024 01:00:28 +0000
ROA not before: Fri 02 Aug 2024 01:00:28 +0000
ROA not after: Thu 31 Oct 2024 01:00:28 +0000
asID: 57043
IP address blocks: 172.252.162.0/24 maxlen: 24
192.177.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 12:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:bc:ba:67:a6:1b:39:db:31:d7:dc:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 2 01:00:28 2024 GMT
Not After : Oct 31 01:00:28 2024 GMT
Subject: CN=24d3d5fb-2cba-4232-9292-f977b78d81ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:7b:a6:77:55:d5:b4:cb:5c:e7:78:c7:93:
5d:75:36:89:2a:4f:08:d8:3a:65:53:94:4c:44:dc:
78:63:9e:46:b3:01:e0:b9:59:f6:a6:4a:ec:b2:4c:
35:e6:d9:46:c8:eb:27:d3:13:ed:c9:76:90:1c:3a:
76:f1:75:59:11:80:e2:99:09:51:55:9d:84:13:64:
c0:d7:6d:45:53:de:96:e7:76:6e:e6:32:2a:68:12:
60:b3:d5:a4:e0:98:aa:35:0b:db:34:1c:be:fb:a2:
07:d5:c1:13:7d:c1:89:6c:7f:52:d2:51:e5:2d:dd:
c1:68:0c:60:08:2c:62:89:92:23:62:c9:0d:49:a9:
95:0e:01:4c:05:0b:5a:0e:01:e5:67:cf:a1:f9:db:
2d:da:05:9d:af:46:31:b5:1e:16:37:88:f1:1b:a3:
05:f2:28:c9:ab:5a:fa:c0:7c:86:98:51:25:23:9e:
83:16:81:b0:ce:dd:e0:00:98:9d:9c:e4:92:05:30:
a1:eb:88:b5:4c:78:8c:f5:2d:24:cd:cb:5d:67:37:
96:84:66:a9:08:54:e9:f0:f6:0a:d6:e0:26:15:81:
8e:ff:9b:73:3e:f6:49:5a:6a:67:bc:df:27:a2:ab:
fb:0b:ad:3e:50:24:57:bd:6c:06:aa:71:c9:5a:51:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A2:78:FF:7B:57:C5:4C:D2:EB:60:F3:91:B2:93:DA:7D:D6:08:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a5d80be3-1a23-3966-be78-ca9f8978e1c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.252.162.0/24
192.177.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:70:b2:14:f4:df:57:88:4e:fc:23:8f:5c:9d:6b:9e:1c:1f:
1e:0d:5a:7c:4f:3d:e7:5d:74:ee:bd:4d:8f:a4:bd:b1:41:f5:
53:a6:e6:21:1f:7a:64:f8:14:7b:a5:2c:72:d9:f6:4d:0e:8a:
34:e7:e9:11:f9:f7:f4:30:f4:aa:d6:aa:20:b4:72:bd:27:95:
20:8c:3d:78:62:06:fd:3b:85:40:5d:87:c8:13:29:1a:53:5a:
bc:6c:c6:9c:2c:b9:50:96:97:fe:24:09:aa:7b:2c:ca:55:52:
95:3a:47:ef:98:a4:7c:8b:10:fd:23:77:16:88:f4:f5:ec:4e:
9d:05:97:95:7a:72:92:34:43:de:f1:c2:21:1a:df:be:bf:6e:
72:26:88:ec:ad:b6:98:93:11:8c:29:96:04:80:6b:3f:0d:c6:
7f:28:d1:76:73:e1:63:b1:49:3f:8c:79:d8:c3:7e:a0:c4:b6:
4f:cd:8a:41:97:e6:82:bc:62:a0:86:ea:c5:4d:83:05:23:07:
59:8a:68:79:8c:5b:ab:50:dc:c7:ce:c5:f2:f5:f6:8c:07:fb:
9c:d8:c8:ec:cd:f4:9a:4c:77:2f:c6:05:a3:5f:ba:8b:4b:10:
7b:0c:8c:b5:c8:35:74:c2:70:80:42:da:e5:e9:33:72:4c:a3:
57:bc:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 16:28:42 2024 by rpki-client on console-fra.rpki-client.org