Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b0a9954-27cf-3fc0-9754-dc7a404e03be.roa
File: 4b0a9954-27cf-3fc0-9754-dc7a404e03be.roa (raw, json)
Hash identifier: nJXpdhVKiAczWjPbnPK3oYynoioH6GTUaD+AN2f1JA8=
Subject key identifier: 42:6A:D2:25:A8:D5:6B:EB:34:FC:1C:72:D8:0D:30:6F:7B:C4:4F:0C
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F432858446E64729283EFB4F2DCBB1EC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b0a9954-27cf-3fc0-9754-dc7a404e03be.roa
Signing time: Wed 03 Jan 2024 14:00:21 +0000
ROA not before: Wed 03 Jan 2024 14:00:21 +0000
ROA not after: Tue 02 Apr 2024 13:00:21 +0000
asID: 397630
IP address blocks: 72.14.93.0/24 maxlen: 24
72.14.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 20:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6e:64:72:92:83:ef:b4:f2:dc:bb:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Jan 3 14:00:21 2024 GMT
Not After : Apr 2 13:00:21 2024 GMT
Subject: CN=1e10dde1-66b3-4064-82ac-fd87d38c895c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:56:39:e1:b2:06:73:75:b8:74:b4:b9:74:
37:05:7c:c8:38:98:a1:78:80:19:24:b5:b3:48:9d:
36:e0:8f:ff:b0:9c:cb:e5:ee:4a:a4:5c:69:1a:89:
10:4b:98:11:8a:ac:18:01:f8:ef:23:73:bc:d8:0c:
f2:35:77:d1:34:a6:e0:f0:a4:4c:14:b6:d2:ea:e3:
5e:3e:39:b6:53:f7:cf:c1:80:2c:c7:58:5e:ae:61:
29:e2:96:42:11:45:8d:0a:bd:78:a6:03:7b:41:e8:
42:26:5c:b3:61:39:af:00:39:07:38:04:3a:fd:f6:
f1:f5:e9:54:19:b3:0d:1d:ef:d6:61:67:51:b8:9a:
c6:ae:e1:03:73:77:e7:89:28:dc:85:80:37:52:fe:
b5:93:6b:6b:8b:68:d9:89:1a:8f:6b:8f:0a:7a:2d:
0d:6a:8f:09:24:a5:11:05:0f:e7:c3:82:a1:5b:61:
77:c3:be:52:e4:80:3e:44:9d:d4:ee:46:ea:e6:08:
94:6a:2a:ba:67:8e:c7:42:c4:4c:03:89:53:61:65:
16:8d:50:92:01:ba:83:1f:a1:6d:a2:73:35:8f:3c:
30:45:87:29:a9:01:4c:ea:4f:cb:51:b7:b2:af:03:
24:1f:63:da:40:d7:6b:a4:2e:23:0f:17:13:e2:17:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:D2:25:A8:D5:6B:EB:34:FC:1C:72:D8:0D:30:6F:7B:C4:4F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4b0a9954-27cf-3fc0-9754-dc7a404e03be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
72.14.93.0-72.14.94.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:f5:68:8d:f1:f4:f7:74:96:b1:9f:d9:16:11:e0:ec:67:12:
95:d5:b6:17:70:cb:47:c8:2a:e7:eb:f6:eb:c9:03:ac:9a:ab:
d9:f8:41:a3:fe:f0:ec:72:c9:d6:80:b8:a6:59:7a:0a:48:50:
93:83:9c:5d:66:50:b0:76:84:92:8e:63:ea:21:3c:60:8e:0f:
ad:30:e1:ff:78:58:90:c2:47:5b:e5:f1:fb:96:cd:aa:8a:f6:
96:b8:8a:bf:dd:0d:5b:6b:79:43:b4:7f:c0:0b:0c:cc:9d:95:
62:36:af:11:5f:c7:62:f0:49:7c:2c:7c:b0:44:56:8b:7f:d2:
25:e3:55:50:67:76:8a:c5:0d:da:67:cf:17:5a:2a:af:6d:1e:
0d:cb:0d:8e:a7:03:f9:a8:37:f4:72:5b:75:95:c8:9b:96:f4:
2a:eb:a5:21:fa:2e:10:26:9c:d1:1f:8d:1e:5f:87:c1:22:4d:
cb:e1:00:90:6e:3f:b2:f0:ff:96:e0:dc:9e:6e:13:b8:0e:03:
47:99:0d:a9:f4:bc:6a:0c:bf:6e:ca:0b:48:37:75:55:f9:15:
6b:82:ee:32:18:96:ff:50:98:9c:ce:db:1f:ba:76:41:da:a3:
63:f4:15:f1:87:dc:ec:85:ba:3f:80:6b:6e:f8:ce:2c:e8:f4:
ff:ba:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 01:26:43 2024 by rpki-client on console-ams.rpki-client.org