Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/3585dff3-bbd1-3aee-b0af-ae81c82a9739.roa
File: 3585dff3-bbd1-3aee-b0af-ae81c82a9739.roa (raw, json)
Hash identifier: QVIXmHO8cEOCAI0OYsiZ1ED6tcFNHz/etV2lxhJxNoU=
Subject key identifier: 8D:68:F2:FE:6B:95:1E:43:DE:37:54:83:B5:67:B8:FC:B5:72:B5:D6
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F43285840BC5F8397692A43F84DF30E00
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/3585dff3-bbd1-3aee-b0af-ae81c82a9739.roa
Signing time: Mon 21 Dec 2020 22:13:00 +0000
ROA not before: Mon 21 Dec 2020 22:13:00 +0000
ROA not after: Sat 03 May 2025 04:00:00 +0000
asID: 211585
IP address blocks: 144.168.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 19:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:5f:83:97:69:2a:43:f8:4d:f3:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Dec 21 22:13:00 2020 GMT
Not After : May 3 04:00:00 2025 GMT
Subject: CN=16befe33-64d9-49e3-98ee-36fafc40cbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:ff:b5:19:33:96:63:04:e0:1b:f0:8d:e3:
6b:91:2e:88:d7:ac:fe:6c:8d:e7:9b:44:21:9e:11:
15:9c:8b:2a:24:4d:df:a0:5a:a1:b2:f4:a9:d1:18:
7d:2f:00:17:98:b0:e4:a2:f9:8c:0d:3e:25:20:fc:
68:32:7d:62:3d:b8:f3:ca:1f:27:61:6d:76:50:d0:
c3:2c:dc:fe:a1:b0:21:96:b7:9c:e0:2a:39:58:c9:
de:85:ef:41:a7:7a:ef:b0:eb:7f:d5:2c:b9:4c:47:
1c:20:f8:5d:c4:ab:3b:ef:3b:96:db:bd:1d:81:b5:
e5:45:4d:e0:78:c4:f6:2a:6f:23:50:fb:80:82:b7:
ad:ca:88:45:47:e3:5e:90:c0:c7:b5:5c:5d:b2:37:
08:d5:6d:86:80:0e:e5:e2:f4:6b:c0:1c:4f:df:de:
e8:d3:47:7e:ca:b7:69:70:97:c3:bc:55:5b:d6:ad:
2b:d6:63:bc:aa:8b:54:67:5d:ea:9f:c5:42:73:17:
99:7c:c4:5f:e5:b7:e6:b1:cc:d2:98:82:82:5b:d4:
6d:9f:0c:de:ea:1c:a1:c0:14:96:92:09:b3:c8:76:
c3:79:95:39:c9:d5:0e:a5:08:f4:4c:19:95:08:25:
7c:c1:db:3d:c5:92:f1:72:d8:68:0b:e0:3e:33:73:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:68:F2:FE:6B:95:1E:43:DE:37:54:83:B5:67:B8:FC:B5:72:B5:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/3585dff3-bbd1-3aee-b0af-ae81c82a9739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
144.168.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:c5:9b:62:fa:00:34:ec:ce:dd:15:15:f0:d8:a9:40:dd:8d:
2c:35:da:63:83:36:ab:5a:8a:ac:db:45:b5:f6:4f:91:84:2a:
6b:28:71:10:88:2f:06:b1:74:38:41:38:d8:42:73:94:2c:86:
27:46:65:a4:a5:33:9b:f6:52:b9:61:15:e1:69:3b:be:2e:61:
b8:87:36:4f:c7:2a:f4:3c:72:5b:14:f4:29:fb:7d:fc:01:1c:
c5:ca:9c:ef:1e:ac:09:b1:66:03:a7:69:09:93:b6:0b:49:f7:
06:1b:cf:b8:7b:fc:bb:dc:42:9a:95:55:31:c0:0d:c3:de:88:
82:be:af:34:99:32:5a:68:66:53:63:13:bf:70:75:83:a6:28:
35:18:55:64:fa:f6:7b:45:13:d5:df:c5:d9:c4:6a:74:43:79:
e4:ac:c6:3d:45:fe:1a:f5:ff:d6:c3:df:2b:2a:bd:5e:a2:ea:
96:ac:da:6d:d8:89:ff:3e:a6:d5:06:28:61:a1:a1:2b:41:2e:
ee:64:65:17:81:11:8f:5e:7a:4d:30:ec:89:78:d0:1c:56:1f:
81:72:ac:28:bb:55:31:b7:df:8f:3a:d0:74:05:45:cb:41:9b:
47:17:9c:12:9b:c7:64:e7:d4:e6:12:25:ae:2b:c2:ae:96:82:
c0:3a:17:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org