Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/947dcb89-a823-3d29-9197-0beec52e947d.roa
File: 947dcb89-a823-3d29-9197-0beec52e947d.roa (raw, json)
Hash identifier: rgk9kLYqPG1Q/K77qTbDM54E/PxuPRsx4azJPdCwQt0=
Subject key identifier: 83:E8:0E:AC:F2:D4:DE:F4:4A:C0:51:5D:AE:EE:13:62:B6:EA:84:7A
Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial: 010D0C9F432858475910CA14F61A241D3A6E5CC0
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/947dcb89-a823-3d29-9197-0beec52e947d.roa
Signing time: Fri 27 Sep 2024 01:00:31 +0000
ROA not before: Fri 27 Sep 2024 01:00:31 +0000
ROA not after: Thu 26 Dec 2024 02:00:31 +0000
asID: 16509
IP address blocks: 192.124.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 21:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:59:10:ca:14:f6:1a:24:1d:3a:6e:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Validity
Not Before: Sep 27 01:00:31 2024 GMT
Not After : Dec 26 02:00:31 2024 GMT
Subject: CN=b516ebc9-7758-4087-a7a0-48e9f51b488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:a0:18:11:04:83:77:33:86:f3:7a:0c:6c:
e0:59:e7:91:b3:46:31:31:e7:c2:0d:4b:c0:33:88:
d4:c3:cf:7d:11:93:dc:01:1e:a9:d1:11:c4:16:8a:
81:96:d7:3a:4e:d6:c5:8c:53:66:5e:15:ce:97:bb:
dd:7c:e1:64:bc:f6:17:07:49:e3:24:f8:3d:e4:23:
db:db:37:64:be:f5:71:d3:e9:7f:26:68:c4:01:3b:
9b:e9:2c:3d:57:db:29:03:f7:f4:ee:2f:8e:00:4f:
5b:be:e7:22:d6:5f:30:66:9f:b5:e1:0c:95:64:c2:
90:67:d4:fd:0e:d6:e0:fa:66:84:2e:b2:80:55:53:
2d:e2:fb:54:42:8b:0f:47:d7:64:a5:03:1d:51:1b:
9c:51:fd:96:90:dd:7c:c9:f7:bf:b9:98:24:d2:c1:
5f:06:00:fe:31:29:d1:0d:ae:f1:7e:59:82:a3:fd:
c3:c2:cb:f7:0e:11:fb:0f:11:71:76:df:87:b8:19:
4a:aa:85:a3:28:24:70:4b:25:51:2e:df:b6:7b:d7:
85:6e:5a:e2:44:c8:8c:2a:78:69:31:b6:a8:be:32:
4a:72:da:16:a6:87:02:b9:11:ac:7d:bd:1b:ef:c4:
a9:26:08:17:0e:a8:6d:35:2b:cc:4e:0e:6b:df:85:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:0E:AC:F2:D4:DE:F4:4A:C0:51:5D:AE:EE:13:62:B6:EA:84:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/947dcb89-a823-3d29-9197-0beec52e947d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
X509v3 Authority Key Identifier:
keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.124.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:4e:82:4b:f5:e9:5d:b0:43:79:53:43:7f:b2:9f:59:92:6b:
bf:83:15:0d:d0:65:50:16:bc:85:b4:70:c5:5f:f0:f9:8e:29:
c5:98:68:b2:bd:5d:58:e8:3f:89:4d:bf:1f:74:21:e6:b9:66:
5b:77:28:8a:4d:a5:49:71:d0:04:fe:7a:ff:ec:5c:b2:9f:60:
11:4d:c7:5b:6b:36:64:da:47:54:86:19:cc:84:ff:e7:44:2b:
96:6b:f9:de:f3:12:45:a1:ed:bb:5d:f4:62:a3:a8:cb:7e:e8:
be:51:e8:45:15:d2:ab:d5:f3:7c:f9:f3:88:7a:f9:b6:00:30:
20:7e:22:87:7f:47:44:8b:1f:9c:e8:d2:d1:47:af:9a:8c:68:
87:b3:6e:ae:7a:b7:07:9e:2c:28:48:a7:5f:e0:3a:44:22:31:
16:b7:0e:87:c2:c0:52:d4:ae:7d:ac:1d:4c:41:4b:cc:08:46:
5a:be:36:d9:69:c4:dc:6e:70:09:86:82:c6:c1:93:8e:a4:2a:
92:45:81:02:50:45:ce:92:62:f3:a1:4a:3c:33:14:6f:b7:3d:
8a:cf:08:98:15:b6:df:18:f6:fc:92:59:2a:a7:53:3b:b3:8f:
d1:5a:2c:1c:7c:55:9c:07:52:a8:3d:a8:c8:18:59:6b:1f:13:
0e:fd:14:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 23:40:51 2024 by rpki-client on console-ams.rpki-client.org