Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f403d6-20c3-3cf9-9997-a0fcc1874004.roa
File: 49f403d6-20c3-3cf9-9997-a0fcc1874004.roa (raw, json)
Hash identifier: YE7pOREjAh1Xikc4xzFzLP/sintxY2shxejPCcYxUTY=
Subject key identifier: 21:C4:78:AC:90:CD:64:CF:AA:6F:B0:C3:D5:BA:50:63:D3:67:76:D0
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584301F46076D3BE56A6BF2D8C80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f403d6-20c3-3cf9-9997-a0fcc1874004.roa
Signing time: Sat 26 Aug 2023 01:00:21 +0000
ROA not before: Sat 26 Aug 2023 01:00:21 +0000
ROA not after: Fri 24 Nov 2023 02:00:21 +0000
asID: 834
IP address blocks: 45.40.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:01:f4:60:76:d3:be:56:a6:bf:2d:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Aug 26 01:00:21 2023 GMT
Not After : Nov 24 02:00:21 2023 GMT
Subject: CN=93333b0a-66b2-42a1-9b2b-5fd8d10112fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:ff:3c:71:a0:97:e7:78:ed:d0:f6:52:7a:
81:72:ce:58:7e:54:ac:a5:96:b3:0d:67:cc:0c:0d:
4b:60:5f:38:39:97:1b:b4:a2:13:dd:7b:31:5c:c8:
b9:8b:33:f1:ae:64:fd:06:d1:7b:b3:12:0d:c5:84:
16:70:05:75:d0:ad:ef:e2:b0:66:2a:e3:95:e3:d8:
83:c9:60:a7:7f:a9:88:60:e0:33:18:2d:0c:c7:9b:
85:bc:93:c1:56:8e:19:c6:93:b3:c9:f7:3a:54:9b:
9e:1b:aa:dd:5d:04:1a:1a:b9:82:b1:ba:df:14:4c:
4c:86:95:7c:9a:7b:61:94:10:8b:5c:c2:03:f7:76:
f7:2a:ba:dd:3d:15:8d:18:82:19:6f:57:dc:3a:86:
fa:4e:bc:e3:63:23:ff:da:a0:d8:31:c2:f8:4f:10:
48:de:7a:d1:3d:83:d0:b7:19:0b:b1:8b:a6:ed:64:
90:5a:0b:9a:3c:26:39:46:82:64:80:bb:fe:4a:11:
f4:95:da:fc:41:25:25:ea:c3:91:d8:42:94:7b:1f:
d5:8f:a0:27:9d:fa:c9:51:39:a6:1d:76:bf:cc:a6:
c8:b5:0e:5e:84:9b:fb:e2:7c:d1:aa:6a:1f:e7:24:
e4:7a:87:f9:b0:c5:52:d3:e5:da:13:e9:0b:f7:7c:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C4:78:AC:90:CD:64:CF:AA:6F:B0:C3:D5:BA:50:63:D3:67:76:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f403d6-20c3-3cf9-9997-a0fcc1874004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a5:a8:f7:71:27:06:da:95:cc:e6:11:45:08:09:ab:55:d5:
97:6b:db:ea:5b:c7:cf:29:1e:02:f3:8d:cb:cb:f8:4c:d7:df:
4e:70:e5:f4:35:30:32:b8:b2:4b:d6:f0:ee:c2:29:0a:7e:b0:
56:25:f5:39:3f:6b:b4:df:aa:f6:a4:ba:46:ae:e8:19:e5:2b:
9d:e2:0b:d1:da:b1:eb:67:17:e5:fe:80:4c:5a:72:ea:6e:d5:
bc:3f:1b:c9:53:86:6d:57:be:67:0f:fa:88:9a:ba:ca:00:f3:
f9:84:94:55:c8:e1:a8:ae:87:ac:bd:ef:a5:99:bf:de:16:44:
30:f5:14:51:c1:5d:29:3d:f4:3b:6e:40:38:d8:48:dc:1d:7a:
d8:50:91:41:33:5f:c0:8a:66:42:17:a9:1c:1b:72:b5:d5:19:
8c:0c:f4:73:66:34:a0:c5:3a:b6:b7:06:b9:f4:f2:b8:4e:ee:
34:f5:ff:e3:fd:6b:94:e9:64:3c:46:cc:9b:61:90:71:2e:ad:
3b:11:d2:f8:cf:75:d8:df:bb:ce:f4:4e:22:d5:be:30:c1:ad:
7f:4a:5d:b6:c6:0e:3c:9a:92:e2:11:93:d4:e0:48:db:bf:f3:
a7:b1:f8:01:29:5c:79:90:65:f7:80:06:c5:ef:3f:2d:b4:78:
8a:e3:00:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 16:55:53 2023 by rpki-client on console-fra.rpki-client.org