Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/304cbb02-62fb-3458-859f-c99008101c22.roa
File: 304cbb02-62fb-3458-859f-c99008101c22.roa (raw, json)
Hash identifier: EcyWRRmTypG8nEnJ/D/b1OayB/SSv4rVXS60lvnJASM=
Subject key identifier: C6:AE:7E:E3:9C:29:36:C9:BD:5B:2C:5F:20:1C:43:14:74:DC:5E:31
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285840C20432E2E8153CA023364180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/304cbb02-62fb-3458-859f-c99008101c22.roa
Signing time: Tue 13 Dec 2022 18:27:09 +0000
ROA not before: Tue 13 Dec 2022 18:27:09 +0000
ROA not after: Mon 05 May 2025 04:00:00 +0000
asID: 398465
IP address blocks: 45.40.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 00:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c2:04:32:e2:e8:15:3c:a0:23:36:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 13 18:27:09 2022 GMT
Not After : May 5 04:00:00 2025 GMT
Subject: CN=f4d69c05-50cf-4673-9624-79e3ddcdc1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:3c:71:00:dd:18:46:f6:60:2e:14:37:44:
8d:c6:91:e7:da:7d:61:b3:dd:2c:fd:96:a8:aa:5c:
2b:6f:14:92:8e:61:6f:3b:ae:69:fb:f9:3b:f6:9c:
b3:b2:7d:3e:ad:b4:d9:3f:ab:97:f5:b4:73:a1:10:
23:e2:62:32:ec:26:d2:c0:2b:17:25:a6:ba:31:e7:
77:54:29:87:64:cb:dc:19:e8:a3:86:c7:e1:da:7e:
f5:ba:92:e0:54:57:aa:55:c5:97:3a:7e:94:af:a0:
16:f0:a8:02:1b:86:74:88:c3:48:f5:29:51:87:82:
df:c3:5d:9a:ee:0b:5b:c8:c9:b2:66:18:fe:39:61:
b3:c2:2c:10:86:c5:bf:16:13:fe:d2:8c:92:6a:4a:
89:ef:6a:45:29:83:22:c5:17:30:75:4d:94:3a:10:
75:b1:e0:0c:d8:88:0d:bd:5f:74:ad:c2:0e:a8:45:
27:78:e6:c2:8d:e9:a3:f3:ef:d9:79:f6:d4:58:cf:
60:ba:19:87:d0:9b:12:e5:e7:15:03:18:17:9a:92:
50:61:dc:d3:7a:0b:70:76:be:18:e9:08:ce:f4:c2:
c3:a5:ae:8c:72:23:69:8f:cd:03:a5:c9:02:0c:6e:
af:d6:3f:76:45:4b:b8:58:35:6e:d5:84:d0:77:fd:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AE:7E:E3:9C:29:36:C9:BD:5B:2C:5F:20:1C:43:14:74:DC:5E:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/304cbb02-62fb-3458-859f-c99008101c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:52:5c:58:ff:d1:7e:67:90:b3:5c:11:d2:17:08:9e:f5:f7:
25:ad:9f:72:0c:b7:40:df:11:9f:78:6b:0e:f3:48:ae:4a:38:
24:40:4b:85:d0:b5:b2:ee:22:a7:07:bf:d5:66:21:39:11:fe:
6d:a6:3f:9c:c7:31:30:fc:30:51:5c:be:48:2f:ec:d6:81:c3:
e2:cf:7b:d2:23:7e:5d:af:8a:6d:fd:33:78:23:93:eb:04:89:
84:86:10:d4:8d:56:61:b2:e5:a4:c7:66:a2:1f:44:ec:6f:e3:
25:f3:87:7d:6f:7b:95:84:97:95:6c:d9:2d:f5:ad:4e:16:64:
a8:2e:28:ec:fb:de:8e:27:f3:a6:03:03:44:fe:88:eb:68:2d:
55:16:41:4b:4b:d0:0b:62:a7:ad:09:e5:79:97:68:2d:20:c4:
25:e1:6f:1a:ca:87:c2:82:60:17:97:2e:f1:fc:9f:28:f1:b5:
14:22:7c:b9:1f:fc:27:d3:dd:c3:65:3b:b0:56:87:8c:5b:cc:
c9:43:af:62:96:74:31:50:3a:6d:fa:5d:91:66:19:3d:af:26:
f6:10:82:f9:cc:0f:df:91:ea:d2:5d:63:57:30:70:4d:57:cd:
c7:d2:89:4c:3a:47:02:47:80:4a:ca:2e:91:ca:66:3e:07:4d:
5a:e7:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:16 2024 by rpki-client on console-ams.rpki-client.org