Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fab28b48-819a-3539-8fca-e77042fe708e.roa
File: fab28b48-819a-3539-8fca-e77042fe708e.roa (raw, json)
Hash identifier: tsrPRxQwfczb3/YxeFxETZYczofEs/NEgvvn4kA5fr4=
Subject key identifier: 72:65:DF:35:14:ED:37:32:01:5A:CE:C8:B5:0A:8B:87:01:BF:54:39
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A0D0C7EB226E2D2C40FEF40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fab28b48-819a-3539-8fca-e77042fe708e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 64.9.252.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0d:0c:7e:b2:26:e2:d2:c4:0f:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0bd9c3a8-6111-44c8-a5c5-3af04d6447ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:ea:e7:0b:dc:e1:24:3e:ea:4b:c0:38:7e:
be:9f:7b:80:61:b6:55:2a:d8:6b:96:f2:eb:88:ef:
d8:93:c9:42:f2:fc:80:a5:e4:1e:7a:02:fd:5b:a4:
ad:9a:e9:f7:31:87:fa:dc:c3:4f:85:1f:74:99:7f:
4e:fb:11:c0:97:f7:69:43:51:25:07:f6:b9:ea:78:
59:72:d3:13:42:39:52:b6:c8:19:be:7d:69:21:0e:
8c:f4:cc:7b:a5:b0:d5:a8:bd:55:14:57:80:ba:95:
71:3e:82:65:24:54:c0:69:e0:86:7b:4a:db:4c:6c:
00:19:f7:97:70:9f:e3:27:3e:60:34:bf:f3:c3:10:
b0:5a:6d:be:2b:24:38:78:0e:90:db:94:de:ff:de:
17:c6:fb:9f:7f:4f:1d:a2:4d:f5:6a:b0:1c:5b:75:
b2:43:4f:23:79:13:92:9f:76:93:80:94:e2:32:ed:
e9:7b:18:7f:7f:c0:b9:90:36:a5:27:50:05:cf:94:
9d:58:48:be:a3:96:45:73:58:07:94:9a:81:3a:53:
dd:db:ea:90:8f:1c:21:9e:b6:ed:72:36:d6:f3:7c:
90:b5:47:37:a4:83:68:91:06:7d:63:00:7c:d9:d9:
9b:a7:26:65:4e:06:58:0e:af:04:03:14:44:3f:dc:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:65:DF:35:14:ED:37:32:01:5A:CE:C8:B5:0A:8B:87:01:BF:54:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fab28b48-819a-3539-8fca-e77042fe708e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:92:0e:aa:5b:88:24:ee:1b:a2:e8:64:4f:e6:d4:cc:77:ac:
1f:33:21:a0:6d:56:ec:ea:fb:6d:be:ca:58:3b:aa:92:30:0a:
fc:3f:eb:25:30:92:98:c8:e8:23:13:aa:66:e3:93:90:eb:e7:
39:ff:fc:cc:fa:75:55:73:ab:f6:3c:c7:37:80:5a:55:01:e9:
8e:06:84:5f:a2:b2:d1:25:2d:5d:e5:ce:67:d3:e7:1f:d5:e1:
33:3e:ce:06:36:8b:f0:24:f8:a8:96:d4:2c:bc:95:b3:45:eb:
ae:09:58:2e:9e:ba:25:b8:3d:eb:c6:4d:75:93:9d:0b:75:52:
53:c6:36:8b:ec:22:ed:81:5d:ca:80:34:37:d1:f1:83:b9:52:
c5:92:d8:4b:23:05:70:10:2a:00:56:5f:23:7c:3d:8c:27:62:
ec:60:74:38:36:3a:fd:6d:35:a4:af:6f:c3:a0:b3:29:7c:c8:
f0:86:19:17:fc:f2:9e:db:9e:fb:dd:b7:72:93:df:9c:d2:43:
30:4c:34:e4:e2:36:db:cf:61:c0:ce:89:10:c5:28:e5:49:25:
68:74:fb:dc:33:30:05:ec:32:88:ec:ef:e8:78:0d:95:20:5c:
ba:ce:65:1f:7f:a7:84:fa:b2:01:29:d1:1e:b9:d3:ca:d7:61:
1a:cb:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org