Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/55dab92e-fbc4-3456-965f-8dfb7e45c7f9.roa
File: 55dab92e-fbc4-3456-965f-8dfb7e45c7f9.roa (raw, json)
Hash identifier: AC8ZB+cZEd6WHEsaEhqIsL2vk8picwJr5fqm4N5INDE=
Subject key identifier: 95:FA:3B:14:D1:71:F2:A0:05:A3:86:15:57:2A:D3:30:90:93:E1:6C
Certificate issuer: /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial: 010D0C9F432858473EAD1EF9AAFEDDEA40D5B600
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/55dab92e-fbc4-3456-965f-8dfb7e45c7f9.roa
Signing time: Tue 17 Sep 2024 14:08:53 +0000
ROA not before: Tue 17 Sep 2024 14:08:53 +0000
ROA not after: Mon 16 Dec 2024 15:08:53 +0000
asID: 834
IP address blocks: 45.59.104.0/24 maxlen: 24
45.59.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 11:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:3e:ad:1e:f9:aa:fe:dd:ea:40:d5:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Validity
Not Before: Sep 17 14:08:53 2024 GMT
Not After : Dec 16 15:08:53 2024 GMT
Subject: CN=2fdc3eea-6699-423c-9053-ffb4ee857cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:67:38:d6:d9:b7:dd:2e:d6:da:cc:ad:a5:38:
ff:5e:75:3f:42:d1:42:f9:1e:d0:d6:50:13:27:09:
c9:a1:21:f8:1f:4b:ff:67:65:04:02:fb:11:1a:57:
32:f1:3a:4b:c2:31:29:ae:f7:6e:e5:3a:96:04:79:
71:13:1f:f6:b8:9f:fa:e7:f1:ed:b3:09:1f:39:61:
fd:8f:2f:db:60:21:59:47:c3:ca:3d:9f:38:d7:70:
30:ee:35:79:0b:e7:c1:c2:4a:f3:9d:44:c9:32:e3:
f0:b3:7e:6f:3c:c0:a8:61:e8:2d:d0:a5:51:3b:38:
e6:84:7c:f3:e5:a7:c6:19:a6:db:f4:d7:94:c5:f3:
99:97:ba:e2:a3:4a:d8:c6:66:ff:a5:1b:76:f9:48:
36:e4:d7:6a:fa:9e:d0:b8:ed:7e:13:eb:5a:30:fb:
66:31:a5:f2:54:f7:33:ba:77:6c:6d:b0:97:14:c0:
39:db:83:ab:e3:bc:e3:dc:fb:ff:c6:23:fe:74:25:
97:65:6b:2a:bf:e0:e3:3a:37:ac:5d:ee:18:93:89:
e0:90:98:cd:e9:ad:06:2a:a8:1f:e7:cf:4d:57:9c:
0e:31:f9:44:fc:4f:b3:86:ca:6e:10:b2:d8:c6:76:
d4:8b:e6:34:7e:dc:1c:da:78:eb:1d:52:07:4e:ea:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:3B:14:D1:71:F2:A0:05:A3:86:15:57:2A:D3:30:90:93:E1:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/55dab92e-fbc4-3456-965f-8dfb7e45c7f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
X509v3 Authority Key Identifier:
keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.104.0/24
45.59.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:5a:c4:c3:f7:6e:d4:95:3b:8a:c2:fd:76:5d:18:a6:e8:3d:
45:db:ef:41:5b:07:d6:89:f6:ab:c4:9c:b4:88:62:8c:d3:81:
e8:c0:a5:f2:84:54:23:ea:d6:bd:38:46:ab:fa:96:0a:50:4b:
6c:eb:50:43:82:e9:8b:da:12:a8:93:56:f5:4b:3d:d7:bd:c3:
bc:21:88:ce:88:7d:43:34:ad:9f:27:ce:a0:8f:d2:22:4c:fc:
6d:bf:c3:b3:92:47:93:d6:8d:7b:43:a6:6c:4c:09:9e:d6:2d:
19:be:bf:af:ad:12:3d:5c:aa:58:9c:c7:e7:d8:dc:e3:6e:58:
43:1a:fe:d6:8a:c1:8c:d2:23:49:d4:1c:af:16:5d:ec:27:ac:
f8:0d:17:0f:4b:0c:50:de:bc:ac:a8:cc:dc:92:75:b0:35:a3:
db:9c:18:44:a2:4e:b2:b7:92:58:1a:73:a3:ef:28:ed:4a:39:
ef:e8:f8:cf:1b:fd:af:94:e9:5a:7f:40:67:b4:b4:28:5b:37:
ea:ed:ff:7d:1b:1f:a7:b8:77:d3:a7:40:89:da:ba:a7:bc:79:
a9:3f:ed:95:e6:4f:cf:96:4b:0e:4e:c7:d1:15:74:40:a1:d7:
a2:1c:bb:1d:51:f2:5c:91:cd:7d:3d:e7:c7:78:12:2a:12:25:
5b:d8:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 15:59:07 2024 by rpki-client on console-fra.rpki-client.org