Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b4c19762-843f-3817-ab2e-4ed7248bdb82.roa
File: b4c19762-843f-3817-ab2e-4ed7248bdb82.roa (raw, json)
Hash identifier: Xgq3+V6gy4tl5V7YjcArAhHoiUuT6TGIlTyzz9kt1Zk=
Subject key identifier: 6C:21:7C:C2:8A:ED:A6:14:46:DB:07:05:EC:50:70:C6:A3:58:F7:39
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584377351886367CA2D54235FE00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b4c19762-843f-3817-ab2e-4ed7248bdb82.roa
Signing time: Sat 07 Oct 2023 01:00:22 +0000
ROA not before: Sat 07 Oct 2023 01:00:22 +0000
ROA not after: Fri 05 Jan 2024 02:00:22 +0000
asID: 5645
IP address blocks: 174.140.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:77:35:18:86:36:7c:a2:d5:42:35:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Oct 7 01:00:22 2023 GMT
Not After : Jan 5 02:00:22 2024 GMT
Subject: CN=42ce505a-f079-4566-b1a4-858f7316e13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e9:64:06:b3:8d:ad:0e:a1:59:66:e2:83:dc:
d8:84:27:8c:a5:27:3a:39:d2:aa:88:6d:5b:c2:7f:
7e:4d:82:65:b5:12:91:d1:cd:70:b5:26:45:43:b6:
42:40:f3:b9:71:cd:1d:9e:fd:ac:da:63:de:af:d2:
c0:26:10:76:0f:6e:6d:a1:db:f4:77:8c:fc:44:f6:
2c:6a:98:06:3f:65:6a:12:00:0f:90:1c:2f:c4:f9:
3b:4a:51:45:10:52:86:9f:36:90:65:70:21:19:70:
cb:f0:cb:09:7d:73:01:c0:6a:d3:d9:44:a1:ae:21:
47:cc:3b:5b:0a:91:83:03:0e:9f:84:da:f0:2c:cd:
56:f8:36:17:8f:e7:77:34:eb:ba:63:13:37:07:6c:
9d:b7:10:3e:80:54:f6:d0:86:8b:9c:27:e3:f6:ed:
7a:cd:74:6a:a5:87:4c:24:43:93:00:2d:33:d0:55:
be:40:ad:f6:cb:c6:6b:0c:7b:72:cd:64:d7:b1:97:
be:1d:1f:43:3e:a0:79:d1:91:d5:b8:57:12:be:aa:
0d:0c:42:7e:4c:2e:79:aa:8c:56:16:34:57:e9:db:
0a:0d:c3:7c:87:ad:85:54:89:88:f3:6c:30:b3:49:
ce:c6:c5:0f:f5:24:26:a5:ef:7c:d3:cc:58:39:d2:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:7C:C2:8A:ED:A6:14:46:DB:07:05:EC:50:70:C6:A3:58:F7:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b4c19762-843f-3817-ab2e-4ed7248bdb82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
174.140.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:b2:7d:ee:aa:b6:49:4c:1c:3d:69:fd:7f:83:05:e3:73:65:
b3:9c:17:4f:69:79:d0:1f:df:4e:40:46:23:a9:d0:1e:d8:c5:
38:8b:94:f8:0e:7e:67:6a:3c:53:18:97:e4:25:b2:e3:9d:81:
a4:14:e9:b9:a0:62:66:ec:f2:02:73:00:39:1e:a1:1f:ec:2d:
34:f8:84:55:62:d0:35:ed:21:01:6f:4e:76:e4:61:54:15:36:
e4:de:c3:da:db:f9:d3:46:46:ec:d4:fb:53:fb:98:2d:83:a4:
8d:00:df:68:12:c0:c7:bc:a7:85:6f:c4:83:3b:7c:ff:1d:5b:
c1:c1:64:d0:59:fd:e0:61:27:0e:d5:a8:da:d3:ec:e0:21:52:
56:6f:5d:03:20:fb:e3:9b:c1:c3:9e:ac:8a:52:f4:1f:cd:63:
b4:e1:6a:14:fd:16:b0:52:79:93:57:b5:e8:e0:f1:1a:02:69:
0f:78:bb:fa:a6:cc:87:76:f8:13:29:db:d9:ff:85:6b:bb:42:
c3:2a:2b:b9:a0:5b:66:f0:54:b4:92:79:9c:ac:ff:fb:a0:db:
8a:c0:da:24:9e:89:2e:b5:20:71:5b:47:7e:93:83:ee:ea:d1:
e4:96:e4:a5:f0:a1:3d:23:b8:bb:dc:10:9e:e7:b4:83:32:48:
11:b4:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 21:03:45 2023 by rpki-client on console-ams.rpki-client.org