Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/5de484d2-91d5-3506-a6c8-34fe1b74b1de.roa
File: 5de484d2-91d5-3506-a6c8-34fe1b74b1de.roa (raw, json)
Hash identifier: T0qA1SZrg3vtRxFtyDCt9uc1UTDyOK8Ir+k3n2rvWwk=
Subject key identifier: 85:56:E3:DA:CD:EB:D2:71:B7:4E:AC:5C:57:7A:7A:9E:79:41:58:47
Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial: 010D0C9F432858470C4B0F28C544B25FCFB140E0
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/5de484d2-91d5-3506-a6c8-34fe1b74b1de.roa
Signing time: Fri 30 Aug 2024 13:00:41 +0000
ROA not before: Fri 30 Aug 2024 13:00:41 +0000
ROA not after: Thu 28 Nov 2024 14:00:41 +0000
asID: 1239
IP address blocks: 170.39.165.0/24 maxlen: 24
170.39.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 00:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:0c:4b:0f:28:c5:44:b2:5f:cf:b1:40:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Validity
Not Before: Aug 30 13:00:41 2024 GMT
Not After : Nov 28 14:00:41 2024 GMT
Subject: CN=8b2776b0-cfc6-4f4c-ae1c-97d3e85224cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:fd:b9:55:77:e2:45:0e:71:c0:04:1b:f5:
41:93:da:86:3d:17:b6:ab:a2:d3:5c:b8:64:9c:b1:
87:58:5d:09:83:a4:00:13:e4:5b:0d:e0:16:b5:83:
b3:a7:82:f9:c7:51:83:fa:f7:af:c0:96:62:e7:c2:
7c:72:90:6e:ec:9c:f9:0c:1f:3f:52:bd:d8:b6:94:
e4:85:9e:0c:0b:0e:2b:06:78:75:9f:b4:b1:82:4f:
c8:cc:e6:73:02:9b:89:15:0c:e6:3d:69:61:73:f3:
2c:8b:9d:2a:20:3c:9c:8c:86:b2:06:25:a0:f0:5e:
29:b8:4c:76:e0:aa:30:26:7d:aa:9f:ac:63:55:35:
d3:4e:de:1b:29:47:30:83:fd:78:a8:28:be:86:d2:
1a:07:1a:3d:83:e8:a7:0e:1c:c3:d7:d4:17:c0:ca:
a8:35:46:68:2e:3f:13:fc:08:74:4c:e9:f9:84:6b:
c1:2e:00:3e:84:31:9b:60:63:24:b4:ab:af:df:00:
68:bc:1c:c1:f7:d5:ed:ce:4a:ac:8d:82:77:d5:36:
ce:26:ec:d5:17:2f:47:94:e3:88:5d:69:da:dc:17:
9e:67:ab:3f:72:dd:cf:9b:cb:97:0b:e4:9b:de:dd:
19:11:28:f9:2f:d2:3f:5b:66:3f:97:37:f6:3f:93:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:E3:DA:CD:EB:D2:71:B7:4E:AC:5C:57:7A:7A:9E:79:41:58:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/5de484d2-91d5-3506-a6c8-34fe1b74b1de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
X509v3 Authority Key Identifier:
keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.165.0/24
170.39.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:3c:2f:3d:0e:21:18:f8:19:b0:15:93:34:6c:3a:17:ee:4c:
c7:84:82:7f:25:cd:2f:a1:f2:d1:5c:a1:ba:23:70:36:05:cb:
64:09:da:c5:44:d3:8a:d4:67:9d:8f:2d:c8:b1:f3:86:cd:4c:
73:44:a1:09:f8:e9:d0:c3:40:c6:d4:77:e0:73:3e:3f:86:b9:
ea:89:f0:3e:d8:ac:cb:5f:ca:21:bb:a4:ff:3f:60:31:d8:eb:
b0:e7:41:a1:ce:d5:12:ff:71:9e:80:1f:77:06:ba:c2:22:eb:
a7:c3:4a:b1:88:af:ff:1d:cb:a8:c2:c9:52:60:4c:dc:c7:23:
73:9d:bf:ab:f4:d3:ab:a0:ea:2d:ec:d7:c9:71:2c:68:7b:8f:
48:66:b8:2e:aa:4a:5f:81:7c:4c:08:7b:c3:c1:8d:35:ba:1f:
42:68:fe:36:cc:d4:51:fd:20:75:2e:e4:53:ae:60:29:a2:9c:
38:c6:1f:79:56:b1:b0:66:2c:8f:c2:6d:7c:33:41:e6:90:91:
79:7f:96:a4:1e:07:d9:6a:e9:14:8c:d7:d9:54:99:e4:7c:f9:
a9:45:f4:09:f8:2e:7d:30:16:3f:4c:66:09:dc:67:e4:83:db:
13:3c:46:6a:fe:f9:f6:59:2d:0f:24:6e:75:b6:64:71:f4:16:
e0:36:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:35:33 2024 by rpki-client on console-fra.rpki-client.org