Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1b029519-d68b-3cb2-bab5-db12f28ddf62.roa
File: 1b029519-d68b-3cb2-bab5-db12f28ddf62.roa (raw, json)
Hash identifier: U8W0Vzzw2CVUUPYtYj3G8VRPpRGarpHvcIl6hsxwLdw=
Subject key identifier: 66:B5:22:4A:A6:6D:35:18:80:FF:09:B5:66:74:CA:55:33:9E:4F:87
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F4328584773965836DBDBE0D03CE9B880
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1b029519-d68b-3cb2-bab5-db12f28ddf62.roa
Signing time: Sun 06 Oct 2024 13:00:41 +0000
ROA not before: Sun 06 Oct 2024 13:00:41 +0000
ROA not after: Sat 04 Jan 2025 14:00:41 +0000
asID: 32780
IP address blocks: 209.95.50.0/23 maxlen: 24
209.95.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 18:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:73:96:58:36:db:db:e0:d0:3c:e9:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Oct 6 13:00:41 2024 GMT
Not After : Jan 4 14:00:41 2025 GMT
Subject: CN=4c6e14bf-8e68-40a2-adda-20e3e60e4406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4b:88:7c:d2:5d:9c:18:d7:b5:b5:85:73:5f:
ca:1d:35:1a:94:22:fd:dc:8e:ec:57:4e:3d:7a:6b:
0b:d9:67:d3:d2:a8:53:fd:16:f1:13:7e:64:09:35:
14:3f:73:c7:f6:7a:44:a4:26:21:70:d3:39:44:58:
14:cd:e0:f1:91:c8:66:20:cd:02:23:fc:89:a6:02:
32:1a:3b:a5:2d:d8:30:dd:ff:93:6d:c3:81:60:e1:
7c:34:04:4e:6a:97:07:35:05:29:e1:5b:b9:14:87:
5d:58:8e:5e:ad:d5:bb:bf:ca:60:8f:bd:f4:b0:4b:
3f:98:f0:df:86:0c:0d:88:64:2b:12:aa:10:5c:24:
a6:0b:6e:32:8f:3a:fd:1e:fe:0c:14:f2:32:8c:60:
94:17:2b:f8:e6:38:02:ef:6c:73:d9:30:4c:77:41:
4f:b3:00:99:4a:01:07:b7:1e:20:9c:62:91:e5:0e:
df:24:9d:d1:c2:f3:5b:d7:97:74:b2:77:88:51:ab:
52:1d:1b:a8:08:b1:53:46:94:41:9e:11:58:8a:17:
79:5a:66:e3:ee:39:c7:c1:9c:81:a2:9d:d7:ba:a0:
0f:01:a5:30:c8:ad:17:b2:46:00:9f:ba:3c:55:66:
6a:c3:fd:76:9d:7d:fb:bc:eb:fa:e0:dc:16:a1:c1:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:22:4A:A6:6D:35:18:80:FF:09:B5:66:74:CA:55:33:9E:4F:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1b029519-d68b-3cb2-bab5-db12f28ddf62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.95.50.0-209.95.52.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f9:16:b4:ac:f0:da:f3:ab:ca:53:21:97:fe:ce:ab:85:2a:
fd:2f:9b:51:0e:3b:4c:fe:ac:d6:37:3d:24:61:ec:66:09:77:
cc:62:3b:8b:72:51:ee:7a:d5:0b:16:6a:5c:0f:f0:14:20:a5:
e6:6a:2b:4c:fa:8c:43:cb:87:2b:f1:a5:5b:2d:fd:9b:64:51:
fe:1f:9e:c0:b8:fa:ee:3a:26:b4:8b:3e:c8:c0:7b:3e:94:64:
70:00:8d:e5:7b:77:1f:13:5c:81:79:19:10:19:3d:07:8a:84:
18:a0:e3:e4:90:66:91:4d:cc:d7:13:3b:63:94:b0:a8:0e:ab:
46:f4:b4:1a:4b:11:4c:74:14:74:4d:3d:c6:29:b5:cc:34:9e:
97:76:0b:ec:41:1b:fe:d1:9a:b5:37:80:31:68:c1:67:57:e5:
ba:50:4b:12:15:ca:bc:00:e7:04:76:55:d6:c3:83:b1:fe:d1:
7c:68:34:60:86:83:de:48:81:e5:20:6c:29:44:48:dc:af:0e:
1b:a7:41:50:cb:05:65:af:47:9f:39:fe:18:ee:c1:ef:47:81:
a1:99:db:51:05:b8:6f:9c:a8:0e:ab:e9:a7:73:03:6b:ac:c2:
8d:4a:d6:12:55:65:fb:ec:b9:c7:54:a9:f6:34:31:8f:a3:ac:
97:9d:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 21:37:56 2024 by rpki-client on console-ams.rpki-client.org