Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/99a578ef-f919-3f11-a35b-550832bf90c9.roa
File: 99a578ef-f919-3f11-a35b-550832bf90c9.roa (raw, json)
Hash identifier: GQQ1Bb0opEK0jetRqeWJ9I/sypI5FxeGmDkohp0thak=
Subject key identifier: AF:F7:C8:F7:1F:77:3C:CC:D6:48:84:D2:CC:6F:79:0D:78:79:9C:A4
Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial: 010D0C9F43285844720B76E70ED31F3805769D00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/99a578ef-f919-3f11-a35b-550832bf90c9.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 36040
IP address blocks: 207.126.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0b:76:e7:0e:d3:1f:38:05:76:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=49783234-3182-405c-a9ab-0fb11f6ee864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:0a:2f:f0:1f:f8:39:63:50:4c:89:3f:fd:
19:27:c9:57:fd:67:6c:8e:f4:3d:09:11:6f:82:ea:
b0:33:c5:41:fa:a6:4c:29:53:9e:1d:ac:8c:de:6a:
08:38:7d:80:05:ae:1e:a1:cb:87:45:e4:6c:ae:97:
19:6f:08:d3:c8:ae:d2:0b:18:68:a1:3d:16:96:ba:
b0:3f:89:53:55:cf:74:ac:0a:cb:9d:95:32:94:f0:
80:4c:26:9d:01:02:3d:4d:06:da:cb:db:04:4d:e2:
18:27:db:98:e4:a5:c1:76:9f:63:5b:8c:a6:8d:71:
11:26:13:88:71:c9:72:27:1b:e7:aa:c7:18:47:d7:
16:e6:8e:c1:2e:fb:10:35:8c:a6:03:52:1c:b9:a0:
27:10:0b:08:55:70:b1:8a:a7:5c:cd:f3:08:da:bc:
10:3e:9e:2c:a4:31:c3:a5:27:05:b6:04:8d:08:85:
57:0a:bd:ec:f1:7a:03:3c:ab:81:13:9c:aa:70:03:
91:ea:0b:38:85:28:8a:6c:65:54:49:c2:ee:c3:65:
b2:1c:f9:a1:d8:b4:f4:5e:1c:e0:c2:fa:35:29:c6:
36:29:20:9d:b2:8e:48:ed:99:92:1b:4e:f0:51:b4:
5d:7b:db:06:f5:95:f8:76:0d:05:d1:0f:e8:13:10:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F7:C8:F7:1F:77:3C:CC:D6:48:84:D2:CC:6F:79:0D:78:79:9C:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/99a578ef-f919-3f11-a35b-550832bf90c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
X509v3 Authority Key Identifier:
keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
sbgp-ipAddrBlock: critical
IPv4:
207.126.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:39:ce:9d:f5:22:d2:bf:24:1d:d2:5a:33:1c:23:ef:01:94:
9b:78:fd:c8:d0:94:99:d1:5b:d1:e1:aa:f1:50:97:fd:e5:b9:
12:1d:8c:a6:9b:75:f7:57:27:72:87:63:16:aa:f2:c2:52:29:
7f:90:15:d4:32:4c:50:f7:f2:60:a8:79:7a:a2:31:71:7d:ac:
51:5c:a6:65:a2:9f:27:81:a7:b5:6e:0f:d8:24:35:af:e3:e5:
41:e0:e5:35:ec:e0:fc:56:9b:92:b3:8f:c1:b2:fb:b9:9c:f9:
19:2b:71:dc:7a:5e:a1:20:16:41:9d:6c:ea:b3:d8:53:96:3c:
af:51:f1:11:a2:d5:a0:23:9e:e3:31:f9:d3:98:2f:9b:0e:3e:
d4:f3:81:d3:23:29:c1:27:57:e6:d4:29:cf:0a:c7:8e:79:8a:
a8:f0:8f:6c:f6:b6:bf:3f:66:7b:1f:30:9b:c9:2e:e4:fd:53:
8e:a8:44:d7:0c:14:eb:ab:f6:d7:f2:7b:f2:3a:a4:fd:26:8e:
37:b8:cf:99:04:44:74:24:80:51:43:8e:f1:b8:65:71:65:ed:
6b:0d:00:48:a4:11:70:fc:61:7d:36:d6:c7:6d:4a:e0:95:59:
f9:c9:61:3f:58:10:1c:18:0a:f9:8f:c7:4e:20:8c:06:a5:a7:
e1:2c:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:13 2024 by rpki-client on console-ams.rpki-client.org