Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/72a0b2b6-906d-3004-a2a1-69872504b8d1.roa
File: 72a0b2b6-906d-3004-a2a1-69872504b8d1.roa (raw, json)
Hash identifier: pRcTrgi8yENA+RJu0U3GZIV3zrxTGrTk0O4wuECUkSs=
Subject key identifier: A7:85:A9:C6:87:D2:14:B4:27:5E:5F:77:F6:66:38:C6:8A:90:0A:AD
Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial: 010D0C9F4328584679BA0AD04AE6DE8EE6DFBF00
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/72a0b2b6-906d-3004-a2a1-69872504b8d1.roa
Signing time: Tue 09 Jul 2024 01:00:25 +0000
ROA not before: Tue 09 Jul 2024 01:00:25 +0000
ROA not after: Mon 07 Oct 2024 01:00:25 +0000
asID: 23470
IP address blocks: 128.254.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 21:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:79:ba:0a:d0:4a:e6:de:8e:e6:df:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Validity
Not Before: Jul 9 01:00:25 2024 GMT
Not After : Oct 7 01:00:25 2024 GMT
Subject: CN=87fa7888-3384-40cb-9d26-41aeebe283eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:f3:a0:45:8d:55:e2:3e:1c:f4:04:2b:a2:
da:32:dd:79:77:1c:33:fd:de:d7:44:84:f8:78:ac:
e8:d0:5f:4a:4d:0a:fa:fb:1e:80:52:82:dd:37:e8:
87:86:9a:08:c3:2f:e2:c6:46:c0:ca:fd:3c:11:e6:
bc:37:62:41:f4:d7:61:e0:2c:00:f7:26:79:a6:e3:
51:1c:8a:f8:39:ea:f7:0f:6f:61:5f:84:ab:a9:84:
23:d0:22:ba:8c:7f:dc:fd:44:78:01:81:70:7e:1f:
7b:a7:fc:ec:7e:5a:47:17:fd:12:a6:47:a0:1b:cb:
f4:6d:6d:b0:cf:2b:2f:ec:39:ec:b5:a3:d3:bb:1b:
b3:b3:06:d0:eb:5e:bc:17:f2:dc:3c:a9:a0:06:e3:
1c:8f:82:9b:47:85:c6:35:74:c6:08:a2:2e:a3:b9:
aa:01:e6:b9:92:0a:89:f5:13:47:49:ba:37:e6:75:
50:ec:99:be:7f:e4:98:92:a1:12:6d:25:01:5c:76:
00:af:34:78:80:bc:f2:be:39:9b:4c:1a:9d:5a:98:
a2:35:45:e5:2a:64:e7:86:20:76:92:bd:cd:32:ae:
9a:81:71:84:62:7c:a1:6a:c8:8b:df:a3:ea:32:bd:
11:7a:b4:37:e9:cd:32:b8:26:6e:cd:d2:22:4c:0b:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:A9:C6:87:D2:14:B4:27:5E:5F:77:F6:66:38:C6:8A:90:0A:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/72a0b2b6-906d-3004-a2a1-69872504b8d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
X509v3 Authority Key Identifier:
keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:5f:9b:d8:db:49:9a:8a:ab:82:be:88:ce:cc:85:19:b7:e9:
1f:bc:49:67:76:89:0b:f3:81:2e:5f:21:1b:91:2a:e4:a9:77:
f2:85:d3:4d:e9:b7:6d:07:5b:34:4d:eb:a9:0b:2b:e2:3e:0b:
48:ff:67:3a:19:b6:da:a2:53:7f:c6:ba:15:0a:bd:8f:5d:68:
ac:e4:a9:ee:19:ef:8c:04:33:9b:0b:9c:95:f6:84:42:1c:88:
80:72:43:69:18:2d:42:bc:e1:24:c0:1a:68:e5:7c:0f:fe:de:
bd:08:9a:d0:f3:d5:61:d8:e2:65:7c:b7:7a:53:4c:78:9b:d0:
9e:51:e2:df:57:bb:bc:21:8b:8f:9a:f5:c0:32:43:7d:3f:fd:
5c:1e:7a:aa:aa:cc:80:69:62:40:e2:35:de:39:c7:97:bf:d8:
46:bf:4e:c2:08:ba:ea:6e:e3:91:15:95:0b:95:fa:c1:96:fd:
d1:cd:14:ba:74:e0:f3:9d:71:31:ac:b9:56:33:d2:c6:cf:e9:
39:06:17:83:48:3c:f5:e3:a7:c7:64:31:08:4a:2d:dc:ed:ea:
11:de:01:8f:f0:65:97:a8:1f:22:e3:33:22:4b:c0:37:6a:b3:
5d:cf:e3:24:8e:0a:da:02:e8:fe:3e:19:02:be:21:a8:11:f3:
5c:a8:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 23:20:24 2024 by rpki-client on console-fra.rpki-client.org