Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/5e624344-1c59-3e38-b102-75ee856111f2.roa
File: 5e624344-1c59-3e38-b102-75ee856111f2.roa (raw, json)
Hash identifier: PZs62Z8dm1K88KTLM8F7G2Gu0stl8HkkJU4X8wm253Q=
Subject key identifier: 70:95:62:FA:F9:DD:80:47:42:53:40:27:76:B5:5D:E9:B7:AF:09:B2
Certificate issuer: /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial: 010D0C9F4328584074B1372EC1AAE62F3C7DA400
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/5e624344-1c59-3e38-b102-75ee856111f2.roa
Signing time: Thu 24 Sep 2020 19:24:25 +0000
ROA not before: Thu 24 Sep 2020 19:24:25 +0000
ROA not after: Mon 07 Apr 2025 04:00:00 +0000
asID: 212643
IP address blocks: 23.165.144.0/24 maxlen: 24
2602:fd09::/36 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Apr 2023 14:56:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:74:b1:37:2e:c1:aa:e6:2f:3c:7d:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Validity
Not Before: Sep 24 19:24:25 2020 GMT
Not After : Apr 7 04:00:00 2025 GMT
Subject: CN=c76c5539-ba93-4b0a-92f7-8cf745d7d543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:74:8f:ce:f1:b3:9a:22:dd:24:82:82:6c:
f1:e5:b2:67:f2:9c:af:92:67:d2:95:7c:52:61:9d:
78:16:3b:51:a9:5d:f7:ef:50:fe:e1:97:4f:e7:5b:
1d:72:1b:09:af:d4:e1:8b:76:83:94:6e:44:4a:cd:
f1:b0:6f:ab:e1:bd:9e:04:b8:bb:9f:cc:d6:73:15:
79:b8:76:32:50:20:04:ea:91:ea:a3:19:f6:43:c0:
e0:15:72:9a:e4:d6:4c:46:12:bd:1a:c2:ff:d9:7e:
d3:f9:65:0a:c6:7e:20:56:34:48:af:c3:82:a3:70:
52:c3:2c:4b:24:46:f9:73:63:21:d6:8f:1d:74:5e:
e3:b8:89:a3:44:b7:73:c4:f0:c3:6a:3b:40:dc:88:
ff:a7:dd:b6:7f:d2:14:f9:0e:65:93:cf:ab:5e:eb:
66:6e:e8:64:15:6d:b9:7c:ae:51:b3:11:68:5f:a9:
63:df:3a:8d:b3:b5:61:cc:e0:b1:9e:32:ba:f3:6e:
0a:6b:25:71:64:d2:e3:4d:6b:8c:fe:eb:f0:4d:d0:
7c:80:7e:bd:27:92:e2:f8:55:e5:f0:c4:35:1d:e8:
f7:c5:cf:0b:92:ee:f7:17:49:8d:80:06:52:84:d1:
c7:da:30:03:13:b9:66:1e:6e:88:5a:69:a0:15:53:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:95:62:FA:F9:DD:80:47:42:53:40:27:76:B5:5D:E9:B7:AF:09:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/5e624344-1c59-3e38-b102-75ee856111f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
X509v3 Authority Key Identifier:
keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.144.0/24
IPv6:
2602:fd09::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:61:bd:6a:12:85:23:fa:33:a7:eb:2f:54:0d:0d:b8:c2:1d:
6a:8a:e7:d5:ec:92:01:c5:8f:01:f9:2e:76:82:dc:34:69:ad:
58:5a:df:f3:c0:1e:1b:e6:b0:cc:d9:16:16:f3:17:23:93:24:
86:cc:cd:7f:c4:64:af:3c:e2:b1:4f:f9:1f:7a:c9:7e:25:e2:
c5:3c:b7:a4:90:0b:00:72:50:48:09:f5:d1:5a:16:58:db:04:
4c:73:cd:dc:99:7e:d0:e9:4c:0a:3a:4d:f7:92:ef:ab:51:62:
82:3a:8a:d7:dc:7e:6a:4c:86:44:5e:13:6b:40:f5:70:b8:f2:
91:84:04:f7:60:f6:91:55:b4:ce:b8:1f:3b:68:4f:cf:56:d1:
3a:59:92:ec:e5:43:11:d8:f6:d8:95:32:b6:51:7f:6e:c5:bd:
16:d8:1f:de:37:5d:61:ee:7b:28:c9:08:bc:4f:43:40:97:db:
22:ab:c4:6d:fd:40:0f:4e:9f:eb:96:39:ec:3b:72:ee:26:9e:
7a:b1:14:6f:b6:ea:83:e2:c9:62:13:bf:23:eb:8d:bc:a5:e4:
62:15:4b:c1:22:d7:89:a2:ec:1a:f3:29:d6:fa:13:2c:6f:92:
fe:fb:22:14:c8:ba:3c:db:5e:50:3c:f8:16:75:b1:bc:51:2a:
b3:a1:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:31 2024 by rpki-client on console-ams.rpki-client.org