Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c399baf7-29e4-3e66-bd0d-5736bc3ec6b5.roa
File: c399baf7-29e4-3e66-bd0d-5736bc3ec6b5.roa (raw, json)
Hash identifier: VKmAvcYyy3cNToOnuozYlwoAKXcWf4bLO1176rG28IU=
Subject key identifier: F1:81:38:72:82:7E:63:5E:87:DE:80:20:89:C4:93:29:43:49:7A:FD
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285846F75AC274FF8C456938418080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c399baf7-29e4-3e66-bd0d-5736bc3ec6b5.roa
Signing time: Fri 23 Aug 2024 01:00:31 +0000
ROA not before: Fri 23 Aug 2024 01:00:31 +0000
ROA not after: Thu 21 Nov 2024 02:00:31 +0000
asID: 212238
IP address blocks: 173.211.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 03:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f7:5a:c2:74:ff:8c:45:69:38:41:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Aug 23 01:00:31 2024 GMT
Not After : Nov 21 02:00:31 2024 GMT
Subject: CN=b5241b5b-7f9c-40b5-978d-171c740f6a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:97:bb:28:c5:50:7a:df:34:c8:d4:e1:de:
64:ba:93:98:66:ab:3a:72:6c:ae:bf:32:e7:94:52:
3c:c4:23:19:8f:ea:08:fe:a4:c3:6e:52:cf:85:d1:
45:59:c4:55:f5:de:d8:37:31:c6:97:9e:f4:f7:7b:
02:3c:05:46:93:cb:1e:38:f5:5b:32:c6:cf:ae:58:
12:d2:6a:a3:8d:b4:1c:8c:13:74:ef:0d:ef:18:7f:
cd:94:0a:2c:c4:d2:c9:15:d0:3e:49:d8:15:67:14:
60:ca:42:d2:08:61:3e:7c:f4:bf:84:d0:9f:62:5c:
2c:f7:0c:ce:cc:e7:02:c5:1c:e8:d7:13:0e:19:e4:
34:ca:7e:52:be:4a:5b:ca:f8:b9:bd:03:a4:8e:81:
76:4d:ec:5f:eb:0e:52:04:29:df:08:5b:7f:24:97:
d0:da:53:c8:05:c0:76:d9:75:8f:11:6b:0d:9b:fb:
ff:2e:9b:a6:fc:67:43:f3:e7:09:d3:86:6e:18:4a:
1c:01:3e:d6:25:bd:1f:45:98:a1:fc:d4:27:53:a3:
7e:c7:b3:b5:09:1d:b0:08:fe:27:fe:5d:72:bb:b8:
16:38:51:dc:e3:e0:35:ff:96:e4:2c:d5:82:37:e6:
f7:4d:86:da:11:98:97:66:b0:f3:ae:7c:d9:44:e0:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:38:72:82:7E:63:5E:87:DE:80:20:89:C4:93:29:43:49:7A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c399baf7-29e4-3e66-bd0d-5736bc3ec6b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:b5:ba:81:8d:be:2c:ae:d5:a4:5e:b1:63:94:8a:dd:ba:50:
e4:25:a6:57:6a:97:62:81:1b:c8:b1:0e:9f:33:45:76:8a:34:
13:d5:09:7a:4c:e0:21:5a:0c:0c:2c:46:2b:a0:0e:9a:7e:02:
ac:39:fc:43:38:65:e8:c5:a8:36:b0:0f:ae:15:d0:53:ac:77:
07:1b:a3:40:42:d3:17:ad:48:80:34:22:20:9f:a1:2a:b3:fd:
c8:5a:d6:32:4c:6e:53:e3:f1:3d:ed:77:20:82:1f:ba:4b:a7:
52:43:50:80:c9:ea:e1:f6:a9:aa:eb:46:31:f6:b6:9c:b5:0b:
39:10:ab:9e:cd:40:37:39:01:f3:9c:61:40:56:05:53:77:eb:
1c:2f:9d:a3:96:e7:ce:5f:de:67:f3:a9:be:97:7f:73:fa:be:
25:89:8c:16:b8:93:c4:4a:ef:4c:c5:6b:3f:8a:01:bb:28:54:
92:b7:bd:78:d2:9e:b2:06:b1:29:07:d9:5d:fe:54:d9:b9:9f:
0c:98:8c:15:55:33:fa:2c:bf:ff:fa:52:87:64:00:3f:9b:43:
4b:b7:48:83:87:9a:cb:2e:7a:20:8c:fc:bd:3b:37:25:d0:2d:
de:9f:01:92:cf:a4:66:b1:d6:3b:51:51:ea:14:91:c3:f6:6c:
72:0e:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 06:34:39 2024 by rpki-client on console-fra.rpki-client.org