Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/ff453867-fa55-39d1-a813-7b6b77ddcf3e.roa
File: ff453867-fa55-39d1-a813-7b6b77ddcf3e.roa (raw, json)
Hash identifier: EVgrD75VcK1IWHTuDTaWAz+DRDDnzFYKAjQ2T0U1otM=
Subject key identifier: 86:85:89:FD:07:DC:D6:FD:19:D0:05:AA:66:92:D2:2B:63:67:FD:19
Certificate issuer: /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial: 010D0C9F43285843F20B8D95E893A6F41CF35380
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/ff453867-fa55-39d1-a813-7b6b77ddcf3e.roa
Signing time: Mon 20 Nov 2023 01:01:06 +0000
ROA not before: Mon 20 Nov 2023 01:01:06 +0000
ROA not after: Sun 18 Feb 2024 01:01:06 +0000
asID: 5065
IP address blocks: 174.136.232.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f2:0b:8d:95:e8:93:a6:f4:1c:f3:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Validity
Not Before: Nov 20 01:01:06 2023 GMT
Not After : Feb 18 01:01:06 2024 GMT
Subject: CN=1f6793b5-d928-4203-8863-f5091c6e50e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6c:fb:6c:95:2a:f9:e6:8f:9c:95:45:fa:5a:
c8:85:5c:93:f3:b4:56:ad:8c:cc:ab:7c:69:63:ad:
0e:0e:9e:64:26:a8:e8:79:70:33:8f:f0:3c:8e:a3:
21:6b:45:60:85:41:cf:ae:bb:cf:17:1d:25:69:15:
bf:84:c8:cf:be:30:bd:26:27:e3:ec:e9:ba:99:63:
b9:5a:05:61:0e:5d:3b:65:c3:8c:78:7a:47:6f:af:
d1:de:54:72:8e:2d:10:d9:7e:79:61:98:f0:83:0f:
45:ec:d6:d7:fa:d2:02:c5:e9:ce:72:4d:36:52:2a:
65:75:a9:58:c4:c3:11:79:cb:9d:63:4f:16:21:e2:
86:60:7b:c3:0e:38:f2:b7:b5:1b:d5:7d:e7:d1:4e:
f0:6f:9b:14:ec:7d:40:44:86:a2:95:1e:d3:ea:c8:
ac:44:f3:6f:a9:56:e3:a7:0c:21:f8:5c:b0:6d:ea:
90:9b:8b:aa:3b:52:6b:11:4f:9e:9b:ed:63:45:02:
af:96:c6:83:98:5e:62:45:87:01:aa:12:00:0f:b2:
18:b8:54:70:d9:c8:b3:4a:00:66:5f:01:52:50:86:
f5:9c:8d:e9:a2:ac:44:92:20:15:7d:86:e6:d7:71:
0f:12:c9:01:c1:1f:8c:73:e2:1e:d3:a9:6a:54:1b:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:85:89:FD:07:DC:D6:FD:19:D0:05:AA:66:92:D2:2B:63:67:FD:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/ff453867-fa55-39d1-a813-7b6b77ddcf3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
X509v3 Authority Key Identifier:
keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b1:07:30:65:4e:e3:0f:a3:1d:6e:55:0f:95:59:a7:45:21:
c5:ec:4d:e9:75:ae:44:f0:22:ef:3d:13:a8:43:4d:a2:38:ee:
1b:aa:bf:5d:c0:07:52:37:28:65:76:a2:97:9c:e9:c1:5c:03:
41:95:d4:5b:8e:aa:ef:29:a0:88:fc:20:55:0e:f8:d0:db:4b:
04:9b:11:9f:cb:2e:a1:cc:e7:08:34:87:32:ae:0e:12:34:fc:
e5:9f:7c:a4:99:1f:60:59:ba:69:3e:55:5d:75:d0:3c:a5:b7:
fb:79:a3:d6:7d:b0:70:da:43:cc:a7:56:61:3d:38:5f:ff:07:
27:27:22:cc:56:7d:36:ed:61:f0:98:9a:a9:90:24:10:e1:3d:
19:b4:26:2c:68:4a:76:95:90:6e:33:1b:39:ce:aa:c0:a9:f9:
41:00:74:5b:37:ba:c6:43:6d:a3:1d:f6:a1:d5:cc:de:f0:38:
69:07:1d:66:3b:6a:36:08:06:05:ac:b6:4b:87:78:cc:22:e9:
76:41:b4:f6:a8:99:e9:ec:2b:d7:8c:46:fb:4e:54:20:0f:59:
3c:c2:30:08:0e:d0:e6:63:52:fe:0e:ca:60:a4:22:bc:ed:cb:
06:5d:9f:00:6d:82:30:d7:69:df:93:e2:61:0c:57:e5:22:d1:
cc:60:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 11:43:18 2023 by rpki-client on console-fra.rpki-client.org