Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/29a88bf4-25d8-3469-9e9a-6f8dd82226b3.roa
File: 29a88bf4-25d8-3469-9e9a-6f8dd82226b3.roa (raw, json)
Hash identifier: gMqxAT+8cxqIVtB+WZNX9aRn7qFh+fS6LnqnnX5TStY=
Subject key identifier: 66:28:18:28:18:E4:BF:A7:9E:CE:DF:4E:BF:93:E9:96:1C:6C:0A:71
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F43285844720ADE4F43AD4AE221FFDD00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/29a88bf4-25d8-3469-9e9a-6f8dd82226b3.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 36040
IP address blocks: 207.126.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:de:4f:43:ad:4a:e2:21:ff:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=4c36ab53-c6c6-4b69-85b2-c119c06a5d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:dc:7c:56:7c:9d:82:8e:13:5f:69:f6:13:
ec:9b:35:24:f8:1c:6d:e7:ef:27:4b:fc:0c:d1:bf:
04:46:4f:ad:da:8c:04:ee:4f:8c:c5:6c:3f:4a:f3:
02:d7:60:78:16:41:7d:fe:30:95:1c:cb:a1:26:5f:
bb:42:d4:7c:e9:51:61:1c:42:7d:9f:13:8a:4d:a0:
14:b4:e0:c0:7b:8c:37:8e:2e:da:34:9b:06:d2:06:
dc:81:91:84:2f:ed:1e:5f:60:1f:47:51:7b:2c:df:
c7:49:60:10:de:f1:2c:af:78:ed:1b:af:c4:23:8b:
97:92:b6:b5:df:ed:36:45:85:51:c9:cb:2d:57:55:
07:da:a7:91:11:7b:bc:e4:f0:e4:73:72:a4:82:4d:
3c:21:13:96:45:e1:cd:34:86:38:b8:9a:33:79:77:
dd:be:52:d9:a7:f6:b9:42:bf:0b:a3:51:2d:e6:f3:
f2:23:0b:af:8a:76:49:27:1c:78:3f:64:60:16:86:
50:68:4f:ca:7a:12:ec:0c:89:93:1a:77:b4:b4:74:
36:08:61:db:28:47:51:7a:99:05:50:0e:c4:cd:d4:
19:e9:66:b1:b6:bd:3d:ba:c5:3b:e6:5a:b2:4f:b7:
7a:ce:a2:5e:3e:c1:fa:c0:a5:79:f9:7d:ab:ee:f2:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:28:18:28:18:E4:BF:A7:9E:CE:DF:4E:BF:93:E9:96:1C:6C:0A:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/29a88bf4-25d8-3469-9e9a-6f8dd82226b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:11:71:78:19:54:41:8c:86:c3:c9:14:c1:76:26:51:19:e3:
66:71:eb:ea:59:4c:aa:bb:ea:ad:d2:41:4f:d0:67:65:70:34:
5b:5e:bb:74:13:4d:7c:1f:b5:64:c8:c8:cd:b0:b1:3b:e1:0a:
63:af:05:67:68:97:94:0f:bf:ee:41:cf:5e:0f:64:8d:c9:61:
04:69:5e:96:bb:30:c7:e7:b4:d1:9e:67:e3:d9:9f:28:9d:4b:
35:be:d8:15:9e:85:ff:f8:34:e5:19:97:7c:84:c5:f1:82:30:
d7:5d:24:48:02:5f:0d:4c:82:8c:d8:61:55:bd:ac:eb:c2:fd:
4a:41:c6:16:5e:35:69:5f:37:c8:67:fe:1d:db:c5:69:25:64:
24:76:cd:e1:d3:6b:b3:87:73:37:ba:da:19:02:46:36:da:69:
ee:27:7d:33:50:5e:1c:cb:37:b6:81:25:8f:91:1d:71:fd:a6:
e5:24:02:c7:f4:01:5e:38:a7:4e:74:ae:d2:ca:8e:3f:e6:8b:
99:ad:ea:8a:54:86:01:87:22:42:9a:35:e1:e9:8c:9a:63:9f:
b5:83:a8:e8:fc:38:8d:fc:37:2a:46:b2:75:49:ec:0e:01:68:
b9:5e:e3:6f:b5:c8:65:cb:14:fd:bc:e0:03:12:a7:bd:40:60:
ea:50:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:13 2024 by rpki-client on console-ams.rpki-client.org