Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a1d0a477-32a2-372d-948d-9dca55287261.roa
File: a1d0a477-32a2-372d-948d-9dca55287261.roa (raw, json)
Hash identifier: xfTVaGEDoXnqPquOW2mQu8IzKNhA1U/KoqI+hm5rjLg=
Subject key identifier: 83:BD:74:3E:01:58:9E:8B:AF:D3:C1:F7:CF:9B:7C:CB:FF:40:2B:7B
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F432858466BC483718F04F85E45064360
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a1d0a477-32a2-372d-948d-9dca55287261.roa
Signing time: Thu 04 Jul 2024 01:00:26 +0000
ROA not before: Thu 04 Jul 2024 01:00:26 +0000
ROA not after: Wed 02 Oct 2024 01:00:26 +0000
asID: 13213
IP address blocks: 173.244.220.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 08:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6b:c4:83:71:8f:04:f8:5e:45:06:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Jul 4 01:00:26 2024 GMT
Not After : Oct 2 01:00:26 2024 GMT
Subject: CN=42ae977f-1a93-4f5e-9afc-54137a601850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:7c:a3:1a:dc:d7:ab:a6:e5:19:c2:86:a2:
99:47:fd:bb:e6:97:3e:f5:06:17:37:53:f4:0d:b8:
78:f4:7d:15:2b:ac:0a:d0:95:e0:b7:7e:2f:82:d7:
ab:f4:a1:8e:a5:65:ed:36:41:5f:88:bb:62:af:46:
0c:07:73:44:8d:5c:8a:e7:ad:1d:bf:5b:af:21:4e:
44:1e:bd:bb:86:30:ba:b4:36:7c:9f:db:15:e3:12:
14:f1:35:9f:36:f9:77:58:5d:ce:06:04:d8:a6:c1:
43:db:ee:95:5d:1e:96:35:d2:be:9c:6d:79:ac:cd:
93:90:94:fb:34:40:4b:22:a3:76:a9:40:6a:04:18:
48:5e:c9:03:ce:5b:22:04:f5:29:f9:88:9a:ca:f8:
e6:ab:71:7f:78:4b:cc:d1:ec:0f:8f:08:77:5b:12:
e8:32:64:84:d5:b8:bb:5a:18:cf:16:fa:11:d6:57:
82:f3:77:54:26:5f:47:d8:a7:42:95:d6:51:79:fa:
4a:26:81:87:36:fc:bc:32:21:42:33:a1:76:5c:24:
64:aa:2c:fa:d1:0b:c0:2f:8f:31:01:aa:3d:e0:22:
3a:3f:ca:6d:9c:99:fd:5b:7f:d2:aa:f6:f1:bb:8a:
fc:46:55:fa:d0:19:05:d3:3f:07:18:92:d3:f9:78:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:74:3E:01:58:9E:8B:AF:D3:C1:F7:CF:9B:7C:CB:FF:40:2B:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a1d0a477-32a2-372d-948d-9dca55287261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.244.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:13:57:2b:9d:65:06:58:9a:a8:f5:44:65:e4:1e:76:34:24:
38:40:ed:1a:ab:9d:38:52:69:0d:88:22:48:b1:6d:8b:ab:2c:
bd:37:6a:c2:1e:9f:07:22:40:0c:6b:5b:8d:6b:81:02:ad:09:
7b:c2:4e:f8:f1:0c:15:85:12:96:b6:8e:ee:ad:d7:12:fa:f1:
98:54:2a:58:7c:47:f6:fe:16:47:c6:d9:3f:49:50:e4:2e:45:
c5:3b:f5:bf:57:8e:f4:a4:bf:28:ad:f8:b8:65:0f:4c:d7:c9:
c7:76:36:98:a1:7c:a1:03:b7:39:4e:7d:af:bf:64:81:ef:6f:
83:8c:92:b2:e7:a7:f8:5a:a5:a9:cc:84:24:3e:c0:04:5d:90:
ce:b3:e9:bd:25:7e:4b:cf:36:85:ef:9a:fa:10:67:74:80:aa:
48:61:0a:2c:06:9c:e4:db:9d:af:a4:73:af:2c:76:f6:70:27:
9c:8c:63:f6:25:d2:34:e1:33:18:07:e0:5e:53:c3:3c:69:25:
f5:51:11:a2:91:e2:3f:f0:34:b1:44:02:10:d4:ae:61:ad:2b:
17:e1:65:31:f4:bf:a7:8d:78:dd:07:a9:64:a5:fe:3d:be:6b:
99:47:a9:5b:d2:04:10:d2:68:ae:54:93:d1:b9:1c:3b:cf:3c:
85:ba:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 10:06:39 2024 by rpki-client on console-ams.rpki-client.org