Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4f4a7692-5a79-3db7-8f24-9acce3e3ac5a.roa
File: 4f4a7692-5a79-3db7-8f24-9acce3e3ac5a.roa (raw, json)
Hash identifier: qYrAHqY+gw44G/Tl2AC4iYZmnjpvSvEejOnX/RGKNO8=
Subject key identifier: C1:A2:EC:E5:91:28:E8:A3:F2:72:91:C8:B8:BF:72:74:70:7B:34:3A
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285840C202FF199396C4C19CAB8900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4f4a7692-5a79-3db7-8f24-9acce3e3ac5a.roa
Signing time: Tue 13 Dec 2022 18:27:09 +0000
ROA not before: Tue 13 Dec 2022 18:27:09 +0000
ROA not after: Mon 05 May 2025 04:00:00 +0000
asID: 398465
IP address blocks: 45.40.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c2:02:ff:19:93:96:c4:c1:9c:ab:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 13 18:27:09 2022 GMT
Not After : May 5 04:00:00 2025 GMT
Subject: CN=bb98ce64-4d73-47eb-9029-72a6ef5da975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:94:e0:bc:2f:8f:4b:48:72:85:23:c5:2a:
0e:a3:f0:74:39:13:87:38:3b:31:44:9b:c8:6d:0c:
19:ee:28:d5:6a:0f:b1:50:17:bc:25:fe:8a:4f:6a:
85:32:4b:2c:f5:90:a7:59:2e:ef:90:15:cc:bb:9d:
f6:c6:fa:41:e8:23:1f:ec:99:20:d2:1c:79:2b:3e:
be:24:80:20:34:16:e6:b5:0a:fa:63:f1:f1:5a:72:
9d:f5:e5:93:42:51:d8:23:68:9c:a3:98:54:48:41:
15:14:1b:a5:a7:d4:79:64:13:df:0c:70:80:3d:6e:
48:86:e5:24:30:62:0b:32:a6:a2:f8:4a:29:01:d4:
85:18:8e:6b:06:6b:02:43:83:b0:14:13:75:8a:fe:
29:3e:8a:1c:20:3a:e4:04:ce:7a:85:c1:15:4b:15:
77:42:9f:2f:6e:a6:b1:1d:76:47:7c:2d:10:13:1d:
05:7a:85:eb:58:75:86:48:10:e7:56:b4:13:20:78:
f0:39:99:a8:06:84:2c:0e:cd:cf:03:a9:c3:d6:9c:
68:f4:62:2c:1c:46:8e:d9:43:38:69:b1:d4:d2:2f:
69:17:9a:03:64:7b:71:e7:7b:08:c4:9a:11:16:3d:
e3:f7:21:96:67:da:84:6f:8c:4d:2e:41:a2:f9:c6:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A2:EC:E5:91:28:E8:A3:F2:72:91:C8:B8:BF:72:74:70:7B:34:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4f4a7692-5a79-3db7-8f24-9acce3e3ac5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:e1:79:b9:58:61:89:7d:3a:3c:df:b1:64:7e:aa:3a:70:da:
80:cc:92:ac:64:9b:ad:83:6c:12:c0:2f:57:89:09:bd:c1:ca:
d1:7f:9b:98:79:04:6d:19:6f:97:5d:bb:42:c9:f7:92:21:51:
ae:b0:b9:5a:4b:13:f8:85:2f:6e:1a:7a:54:44:02:aa:72:25:
4c:ac:a3:2b:95:4f:8d:cc:ca:3c:9c:ad:96:ce:8e:90:30:b0:
4a:ce:0c:e2:f3:38:0d:a2:5e:1d:b4:c4:4c:87:ff:6d:56:5c:
1c:36:33:c0:bd:bc:d5:6e:2b:3b:cf:58:cb:65:e0:74:49:95:
3e:29:a4:63:e5:39:e5:85:7c:00:3f:f4:40:94:b8:64:5e:f2:
30:4c:bf:da:f0:4a:2e:33:a1:e1:82:ba:18:b6:48:40:ee:0b:
2c:9b:c8:04:df:4b:a5:3f:b0:af:c5:c4:63:d5:19:70:16:e6:
cc:c8:67:5b:87:87:ae:05:44:1b:14:d9:13:f2:54:89:c2:66:
a4:18:b4:66:1e:c3:0f:92:e6:a4:f7:4a:7f:04:56:38:37:01:
bd:2c:2d:4f:2b:a3:21:8f:96:da:1e:03:29:93:96:5c:89:8b:
a2:81:b6:5d:86:55:33:86:32:f1:02:bf:70:e9:a5:5f:86:b0:
d0:67:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:25 2023 by rpki-client on console-fra.rpki-client.org