Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0ce3fe74-80c6-3cf8-9281-d85a8c0cd871.roa
File: 0ce3fe74-80c6-3cf8-9281-d85a8c0cd871.roa (raw, json)
Hash identifier: KbMVyyxWaeEi6a79HHw0C8bIA/cQdny1hgUSfymeek4=
Subject key identifier: 27:3B:79:EF:8B:35:59:6C:CE:88:FE:9B:A1:E6:1B:1D:47:73:41:80
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F43285842441DD269B5B8A70ED96CB800
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0ce3fe74-80c6-3cf8-9281-d85a8c0cd871.roa
Signing time: Mon 19 Jun 2023 01:00:17 +0000
ROA not before: Mon 19 Jun 2023 01:00:17 +0000
ROA not after: Sun 17 Sep 2023 01:00:17 +0000
asID: 40676
IP address blocks: 172.96.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:44:1d:d2:69:b5:b8:a7:0e:d9:6c:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jun 19 01:00:17 2023 GMT
Not After : Sep 17 01:00:17 2023 GMT
Subject: CN=9a4c6d36-34e5-42f7-9143-a57be41cd6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:ab:12:ce:6c:b1:88:d9:54:f1:24:e6:dc:
0b:ba:e9:f4:b8:3a:a4:2f:9b:b3:cd:13:d0:bc:c2:
af:ad:67:fb:aa:37:db:a8:88:4d:fb:72:34:7a:4d:
78:ce:a8:4b:89:7e:dd:d0:29:79:e5:79:90:9d:0e:
1c:fb:85:9b:79:71:ed:49:b7:69:ce:a6:89:e9:95:
08:9b:e2:06:f7:ff:fa:a3:4a:5d:d8:60:8c:27:15:
06:67:7c:ed:e1:a0:9d:61:7e:8f:05:06:6c:b5:40:
a2:49:79:4c:b3:bf:f6:9d:9c:bc:8c:79:3f:59:86:
06:18:06:ae:84:dd:e5:4e:e5:cf:9c:82:db:a6:1a:
c5:a2:12:85:de:52:f9:ce:09:4a:da:0b:75:06:b3:
93:21:88:f4:59:01:66:f4:02:c2:01:4e:4c:ef:7c:
92:c2:b0:f1:1a:f5:58:da:73:c7:cf:66:71:fe:78:
61:a0:75:8a:3b:85:01:9e:32:e7:6d:63:b5:33:b8:
12:c6:d8:93:bc:ae:68:45:63:b4:ee:4f:c8:c6:36:
6d:d3:7d:5d:ae:98:d3:5c:b2:78:dd:49:82:a8:13:
fc:52:ca:09:d6:f5:fa:3e:98:98:49:fe:5a:28:82:
39:6f:ae:00:3f:23:a4:ec:0b:4e:4e:57:76:8b:64:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3B:79:EF:8B:35:59:6C:CE:88:FE:9B:A1:E6:1B:1D:47:73:41:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0ce3fe74-80c6-3cf8-9281-d85a8c0cd871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:9b:8a:c6:c0:76:e0:06:b7:b1:16:c2:7e:12:b7:83:b9:80:
57:45:7c:de:52:b6:d6:c4:41:93:8f:f2:89:32:6c:b2:09:c2:
e8:5f:3a:57:11:00:bd:92:15:5d:fe:0e:a9:d9:05:a9:b1:74:
4d:be:33:49:65:8f:f7:bb:44:41:fb:e6:bf:40:8f:92:f5:d8:
11:01:a8:68:81:13:98:a0:3c:28:77:85:60:48:72:79:7f:c4:
0c:07:e4:9d:96:a0:8d:87:fe:7e:4b:9e:55:7c:ce:9b:95:69:
cb:79:bd:96:b5:1e:3d:49:70:44:f5:51:6c:ba:0e:7b:de:3b:
eb:9f:52:7b:2c:d2:76:1e:3b:6d:c1:3e:73:41:c8:4e:6e:e0:
c0:10:a4:09:8a:31:df:15:09:71:94:65:08:f0:6e:27:b3:0c:
7b:dd:09:04:78:2b:0e:24:fa:ec:ea:0d:59:3c:1b:80:03:94:
f3:5e:35:33:e5:d7:a3:53:33:00:09:55:0d:55:88:33:81:f8:
94:f4:2b:39:4d:92:58:d4:53:36:2c:23:c3:10:2c:fd:64:2b:
83:09:bc:65:74:04:34:76:3a:87:a9:84:01:20:e2:f6:1e:ae:
0b:44:77:ad:27:43:e2:15:d4:a9:40:23:6c:15:1a:e4:64:c1:
65:f7:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 13:58:58 2023 by rpki-client on console-ams.rpki-client.org