Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/d072d343-e8ee-353b-a2b0-2908e40b1157.roa
File: d072d343-e8ee-353b-a2b0-2908e40b1157.roa (raw, json)
Hash identifier: SvzZw3nCPOmaiqRccgYqJfYeTIVycwBx9TYjXYYl988=
Subject key identifier: 6B:BF:34:C2:2D:C3:2C:10:6B:B1:24:CE:34:EC:0A:97:8E:83:68:F2
Certificate issuer: /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial: 010D0C9F43285847061F385CB601EB5091723000
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/d072d343-e8ee-353b-a2b0-2908e40b1157.roa
Signing time: Wed 28 Aug 2024 07:57:42 +0000
ROA not before: Wed 28 Aug 2024 07:57:42 +0000
ROA not after: Tue 26 Nov 2024 08:57:42 +0000
asID: 834
IP address blocks: 45.59.104.0/24 maxlen: 24
45.59.105.0/24 maxlen: 24
45.59.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 14:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:06:1f:38:5c:b6:01:eb:50:91:72:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Validity
Not Before: Aug 28 07:57:42 2024 GMT
Not After : Nov 26 08:57:42 2024 GMT
Subject: CN=76d5acf7-6b3e-41a8-8044-6f36953f6b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8c:f2:91:79:72:f2:52:eb:d0:91:80:fc:4a:
86:cf:03:53:df:8d:d5:79:9d:f5:9f:7c:f6:3b:a6:
20:a3:b4:e4:91:7d:45:6a:79:a1:bf:61:b2:10:83:
26:37:b4:fd:c6:57:f0:bf:4d:98:55:2a:60:66:2e:
1f:68:90:2e:77:09:16:4e:0f:db:44:a1:38:b8:0c:
9a:2e:b6:7d:ed:fc:df:1d:63:a0:c9:7f:91:c2:00:
5c:6a:c9:f5:e3:c4:e1:16:f7:d1:c3:7d:99:dd:53:
e0:42:03:54:e9:d2:54:91:12:64:fe:76:4d:5c:70:
bf:83:a9:2e:15:04:83:57:56:c0:93:c1:d0:10:2b:
c0:b6:03:05:c8:d3:b1:3a:13:0c:4a:93:1c:6e:2d:
aa:0d:d2:70:4e:2c:35:5c:5f:1a:2d:2a:d4:93:70:
c0:32:ca:ec:08:60:4a:6d:6a:de:88:f5:86:1a:ad:
c2:b5:cb:e3:95:eb:b3:ce:fb:d7:82:60:0f:d0:3e:
a0:13:6d:c8:2d:1f:c8:8d:39:58:87:48:25:8f:f4:
b6:23:54:9d:cf:b0:4a:aa:73:ee:ca:31:f4:1e:c3:
35:dc:ff:12:49:5c:ec:ee:48:7e:24:dc:a3:e5:e0:
d6:55:be:6a:75:f3:f7:09:30:9d:04:93:19:6d:ce:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:34:C2:2D:C3:2C:10:6B:B1:24:CE:34:EC:0A:97:8E:83:68:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/d072d343-e8ee-353b-a2b0-2908e40b1157.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl
X509v3 Authority Key Identifier:
keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.104.0-45.59.106.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:59:f0:26:72:cb:e6:38:fc:ed:b2:31:91:0c:1d:61:d7:49:
af:4f:9f:56:e3:21:90:c7:9f:81:8d:7d:a2:7d:16:ac:c1:73:
6f:fc:e3:fc:5c:cb:89:a2:d9:55:09:15:0b:45:83:c1:f1:6f:
9c:74:38:f7:d5:96:83:23:19:0a:69:74:6d:14:0e:50:57:f8:
0e:be:67:fb:c0:8a:db:5d:05:b8:df:3a:95:75:46:d1:e9:43:
c5:35:1a:cc:a6:ee:e5:06:16:8e:46:2f:f3:d8:ba:93:fb:c9:
80:8d:12:90:2c:1d:38:8a:6c:38:7e:a6:e3:0e:41:13:00:2c:
1e:cc:d0:e6:8f:f7:ac:5b:96:7c:79:cd:58:a1:69:a4:66:0a:
c8:d2:9a:6e:b2:8f:23:ca:8a:79:85:52:a5:12:fc:f3:13:ed:
2b:49:69:bb:bd:b3:ed:d8:c6:5c:b0:d3:20:3a:ee:dd:c0:a7:
97:80:1f:e4:1e:a8:27:94:22:00:eb:51:83:2c:c8:d6:80:35:
7f:a7:41:a2:b5:3d:9a:d5:b0:64:5c:d6:53:f0:61:69:3f:10:
fe:84:c4:a3:74:20:5b:72:7e:66:63:cc:5d:de:6c:53:72:49:
e3:18:83:54:02:5f:0c:b4:44:e8:cc:aa:95:95:e5:c0:89:05:
58:b0:27:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 18:26:52 2024 by rpki-client on console-ams.rpki-client.org