Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/42ea0976-b010-3a9b-b8b0-544ce4d1d72c.roa
File: 42ea0976-b010-3a9b-b8b0-544ce4d1d72c.roa (raw, json)
Hash identifier: /mtsqWpVy+8RoSN2OfdRQ4sz5wWHI/ulfFDLijvvilM=
Subject key identifier: C9:B7:9C:E8:91:44:FA:25:97:D0:55:02:1B:67:BF:B0:BF:AC:BA:46
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F4328584716E670E0041C35350F942820
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/42ea0976-b010-3a9b-b8b0-544ce4d1d72c.roa
Signing time: Tue 03 Sep 2024 08:12:03 +0000
ROA not before: Tue 03 Sep 2024 08:12:03 +0000
ROA not after: Mon 02 Dec 2024 09:12:03 +0000
asID: 10103
IP address blocks: 172.96.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:16:e6:70:e0:04:1c:35:35:0f:94:28:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Sep 3 08:12:03 2024 GMT
Not After : Dec 2 09:12:03 2024 GMT
Subject: CN=24064442-0361-49bf-8003-de806e064057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:02:19:59:7d:0d:85:4d:ab:26:14:45:9b:
ff:ff:e1:a5:74:71:db:8c:84:d4:93:c0:64:3e:92:
04:4b:6c:b4:ab:a6:e5:46:ad:47:e3:cd:cb:6a:36:
e5:b9:73:8d:6d:9d:3a:7d:a8:37:83:9c:24:bf:fc:
f8:30:35:88:97:db:23:e9:ba:b0:37:47:14:ba:3a:
40:b0:b3:b0:2b:d1:7a:62:71:ec:e8:51:11:cf:00:
31:71:24:07:7f:f0:f3:da:42:18:1c:4f:b3:17:a1:
d6:35:11:40:96:01:90:65:d2:74:f4:7c:39:0c:6a:
f2:a4:19:1a:c8:f3:53:a7:3e:ab:b8:34:07:ff:05:
ca:c2:c2:91:86:ac:66:e8:c4:2c:86:67:34:78:f6:
50:8e:24:52:d6:10:49:ae:59:8e:a3:79:7d:5b:d3:
81:d3:5b:e1:a3:a7:b9:8b:37:64:63:a1:5e:6e:8a:
62:f6:25:93:70:b4:cf:f0:d0:2c:bd:45:e7:e4:a8:
55:1d:3a:27:c5:6b:9a:ce:16:80:8a:a0:1d:01:8d:
15:79:98:76:07:d1:ce:73:48:d8:67:12:91:39:e5:
2f:e2:19:6c:a0:d1:3c:91:44:e0:a0:f8:e3:41:59:
c3:31:61:bb:6b:46:93:48:85:f0:fc:38:b8:4c:4f:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B7:9C:E8:91:44:FA:25:97:D0:55:02:1B:67:BF:B0:BF:AC:BA:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/42ea0976-b010-3a9b-b8b0-544ce4d1d72c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:69:ae:c2:f5:de:6e:33:23:34:95:46:02:0b:a6:b4:24:bd:
03:1c:70:e9:c8:a0:f8:60:bf:98:3f:d2:7d:cc:73:ef:76:a0:
b9:25:a9:4a:27:f6:3f:0d:b9:10:34:bd:19:40:cf:32:d6:0c:
a3:02:9c:f6:44:b2:57:58:6d:f7:65:95:71:02:2b:a5:37:1e:
4d:57:a0:51:76:ef:46:38:f1:d7:12:d6:6b:ce:af:95:6b:9b:
f2:4e:46:48:89:49:41:51:74:c8:82:2b:fc:ab:95:20:05:6e:
73:97:20:b9:18:f2:c0:bc:8c:ea:c3:80:38:28:0d:56:70:44:
ef:c7:12:28:d6:52:1a:ce:d8:92:cd:d1:77:e3:4a:4d:fc:38:
09:7f:18:a3:c9:b8:f0:f5:64:c4:55:9f:cf:42:8b:90:69:13:
61:29:1d:e2:a8:c0:87:a7:08:dc:be:9e:00:20:c5:94:13:63:
6b:66:ff:de:78:59:b2:2d:44:8a:54:14:a2:7e:98:7c:29:a2:
a2:22:0d:2f:9a:fd:2a:7d:9c:c0:fe:f9:04:a1:c0:b3:32:9f:
85:70:92:7e:21:93:e9:c5:28:54:f8:db:a5:fe:be:34:0d:ec:
46:7d:ef:de:fb:b1:70:50:01:45:16:c7:d5:78:57:02:53:9f:
90:4d:40:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:52:24 2024 by rpki-client on console-fra.rpki-client.org