Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/b668e59f-9250-3c89-b7fc-5e6d9f6fa92b.roa
File: b668e59f-9250-3c89-b7fc-5e6d9f6fa92b.roa (raw, json)
Hash identifier: n1K+aTEfa8LIhIVyzCo30vE+UxBxxSQESTfoTkHQNtM=
Subject key identifier: 81:BB:B9:8E:65:7A:8A:CE:EC:DC:13:1D:13:5C:63:90:5B:99:66:1B
Certificate issuer: /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial: 010D0C9F43285842AA79FB0EF629BD58EF8AAD80
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/b668e59f-9250-3c89-b7fc-5e6d9f6fa92b.roa
Signing time: Tue 25 Jul 2023 16:58:27 +0000
ROA not before: Tue 25 Jul 2023 16:58:27 +0000
ROA not after: Mon 23 Oct 2023 16:58:27 +0000
asID: 834
IP address blocks: 174.136.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:aa:79:fb:0e:f6:29:bd:58:ef:8a:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Validity
Not Before: Jul 25 16:58:27 2023 GMT
Not After : Oct 23 16:58:27 2023 GMT
Subject: CN=a4acd4d0-eba4-4614-b49b-e3cbccfae5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:e4:d2:08:2e:8f:5b:4b:3e:d9:02:e0:cb:
94:33:b7:09:ce:76:00:fb:1d:70:e1:64:62:c1:ee:
e3:ab:53:65:5e:7f:47:75:b1:fe:6d:52:e3:ae:ea:
b9:c7:40:8d:f2:e9:b9:1b:ad:8e:b5:8c:a5:50:72:
53:ae:d1:d5:43:c8:cc:88:3f:4d:38:37:33:de:b2:
7b:c5:57:d7:6f:6f:5b:95:67:ae:52:74:51:04:dc:
fa:9b:c4:d5:2d:24:be:d5:97:a7:f5:19:3c:3d:29:
f8:d2:91:95:09:56:23:13:03:29:f0:16:d0:06:6a:
b6:d2:96:0d:79:38:c6:fd:09:7d:c3:71:80:8d:e2:
ea:14:35:00:23:88:d8:e8:e0:b5:b5:04:03:14:a7:
d4:f4:6c:ab:dc:dc:6a:73:ea:49:c7:20:9c:eb:37:
6b:74:06:4e:17:8e:db:81:2a:cc:9d:28:a4:62:78:
38:4a:7f:39:a2:31:dc:d2:d8:e5:be:19:4f:c2:e6:
53:49:3f:37:15:11:01:4e:47:ef:09:02:6c:43:eb:
cc:6f:99:5f:65:2e:9d:43:43:ce:12:b4:cb:f8:3a:
09:62:1f:ff:a3:95:1b:82:d8:60:5c:9e:ed:c3:cb:
e8:62:18:42:bf:ab:ae:3f:fe:65:18:34:0e:dc:f4:
23:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:B9:8E:65:7A:8A:CE:EC:DC:13:1D:13:5C:63:90:5B:99:66:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/b668e59f-9250-3c89-b7fc-5e6d9f6fa92b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
X509v3 Authority Key Identifier:
keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:41:7b:19:1d:9e:44:1f:93:08:74:06:48:26:7d:0b:59:21:
ec:b0:7c:c3:36:ef:e3:9c:50:7f:d1:d7:75:30:2d:ea:dc:29:
1f:7e:46:fe:26:e2:c5:d6:97:e2:db:f5:f1:82:62:61:74:8c:
19:d6:6b:44:63:5f:82:e7:90:fd:97:39:65:90:71:49:fa:da:
2c:91:12:5e:c2:bb:fa:c1:32:bc:f1:54:77:65:b2:fa:1a:79:
fd:6b:04:76:30:64:d2:e3:bb:f8:f0:fe:f5:49:e8:3b:cb:ea:
05:2c:4b:19:85:9f:6a:0b:43:91:32:d1:19:a7:87:67:89:52:
c8:dc:ff:ce:a0:54:1d:31:4d:24:48:0e:d8:85:44:5f:41:a7:
fb:b8:eb:2a:a6:14:e9:98:21:85:02:d4:25:3a:ca:02:7d:c9:
33:d0:28:34:19:d2:32:6e:48:7a:15:85:ae:f0:8c:c6:a5:a4:
63:2a:dc:d9:4c:e0:d6:06:d1:0d:46:41:39:d1:c7:1a:58:41:
66:5c:f5:a2:17:6e:a2:55:8c:e8:41:91:7c:d1:07:40:37:c5:
7a:69:53:28:84:be:1b:e0:be:6d:80:24:c8:14:8e:58:dc:61:
40:92:00:68:0d:76:0d:c9:7d:f5:cc:10:5f:bd:7a:6f:16:0b:
64:65:97:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 14:26:26 2023 by rpki-client on console-ams.rpki-client.org