Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/8a0dccba-fa04-3a17-8c99-799169f8fbf0.roa
File: 8a0dccba-fa04-3a17-8c99-799169f8fbf0.roa (raw, json)
Hash identifier: Uo9dpiwnXVntVZJLJ6XHbe3eSDlw6eMFJNYXl3hb87Q=
Subject key identifier: 99:7A:4B:F2:DA:39:BE:6B:EF:5D:FE:C3:A8:4C:FE:25:AF:EA:70:27
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F4328584492F0DC0747A44344FFE1C980
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/8a0dccba-fa04-3a17-8c99-799169f8fbf0.roa
Signing time: Tue 16 Jan 2024 16:12:27 +0000
ROA not before: Tue 16 Jan 2024 16:12:27 +0000
ROA not after: Mon 15 Apr 2024 15:12:27 +0000
asID: 57043
IP address blocks: 172.96.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 16 Feb 2024 06:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:92:f0:dc:07:47:a4:43:44:ff:e1:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jan 16 16:12:27 2024 GMT
Not After : Apr 15 15:12:27 2024 GMT
Subject: CN=8692ede6-729e-4fef-a991-8a83cc14aa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:90:0b:ad:5f:78:17:dc:60:9c:1c:c2:a6:
53:95:4b:73:d6:01:5a:51:33:bb:8a:a4:fd:74:a0:
e7:4b:dc:64:0d:31:3d:24:8a:ae:7c:a2:ff:8b:58:
1d:5e:44:bb:ea:d2:51:39:b5:34:ea:3b:bd:da:3c:
21:ab:9e:01:19:fc:73:d6:70:90:c3:1c:87:87:7f:
97:65:cc:3a:e2:5d:14:e7:91:aa:8c:fa:8a:73:6a:
c8:8d:3e:03:5b:b3:ac:30:40:77:c2:bf:41:b2:25:
7f:34:77:60:f9:db:56:07:ac:dc:66:e0:af:f4:99:
ec:a7:ee:4d:cb:67:0b:63:a3:d0:9d:90:80:10:b5:
73:91:b1:f8:89:e4:75:89:8f:e8:63:8a:95:1b:77:
7e:42:6c:3a:45:3d:2e:c2:fa:86:4c:bc:4a:26:95:
62:a4:f6:b9:74:0d:b3:1b:0b:37:52:ed:ef:fe:99:
47:0b:0e:3f:70:49:b5:44:1e:74:fb:f1:71:d9:5d:
36:d9:51:ee:bd:88:d6:fd:97:d2:96:9f:3f:17:b9:
f4:b9:ed:0f:3e:f1:df:37:17:43:85:63:ea:50:00:
19:d7:e8:21:a0:6b:5e:44:b1:8a:bd:9a:a2:88:dd:
8c:43:46:64:91:bc:e8:49:bc:7f:7d:64:1b:eb:da:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7A:4B:F2:DA:39:BE:6B:EF:5D:FE:C3:A8:4C:FE:25:AF:EA:70:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/8a0dccba-fa04-3a17-8c99-799169f8fbf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:12:79:e6:5c:c0:93:15:32:a8:85:ac:13:81:41:67:e3:b0:
51:44:7e:71:7d:4e:98:81:77:eb:d6:6d:8d:ee:68:55:a1:9b:
25:74:15:20:41:b2:73:8e:6a:70:7f:e4:b7:14:b7:f7:dd:ec:
76:f6:6f:16:1c:66:35:1c:69:e5:c5:32:53:88:3c:2b:38:8f:
d3:1d:07:a6:99:20:17:b7:db:5a:ff:8a:b3:e1:9d:48:8e:c1:
df:3a:f1:fc:5f:73:f3:47:0b:d9:44:b0:33:66:f1:22:f5:81:
24:5c:79:fe:b4:ba:00:b6:c8:6c:1b:db:d4:5f:17:0d:d7:e6:
6a:71:ca:5d:3c:bf:1e:85:c4:cb:56:fc:ef:04:44:4d:2d:b2:
1e:4c:7f:dd:a4:81:6d:43:31:b3:8a:34:65:c0:d1:f0:ba:ac:
42:0c:bd:94:83:f7:72:ac:50:9e:0f:0e:07:5e:34:bd:f7:0b:
44:2a:bc:9e:e8:27:0e:2a:6f:97:92:90:5b:e5:92:a7:1c:82:
fd:27:49:83:4f:1e:4c:74:31:82:34:2c:e2:0d:f5:f9:00:60:
87:b5:dc:b3:0e:92:b3:44:53:ce:bd:98:4c:fc:4a:3c:db:23:
f6:f7:58:65:47:67:06:e5:a4:b9:12:56:1e:b7:13:f8:cb:36:
61:18:81:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 09:18:14 2024 by rpki-client on console-fra.rpki-client.org