Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c663c4d0-c743-35ce-bebc-9a90c639520c.roa
File: c663c4d0-c743-35ce-bebc-9a90c639520c.roa (raw, json)
Hash identifier: tWIKtMNhfonE8EYNonePe2hkyxnHYQ2JXJxrY3qPZNM=
Subject key identifier: 33:19:39:72:AB:3E:F0:56:AE:73:04:4D:F1:FE:12:15:82:42:4E:DC
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584064754ABBC980DBD54207BF00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c663c4d0-c743-35ce-bebc-9a90c639520c.roa
Signing time: Tue 13 Dec 2022 18:27:09 +0000
ROA not before: Tue 13 Dec 2022 18:27:09 +0000
ROA not after: Tue 01 Apr 2025 04:00:00 +0000
asID: 60721
IP address blocks: 198.102.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jan 2023 18:05:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:75:4a:bb:c9:80:db:d5:42:07:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 13 18:27:09 2022 GMT
Not After : Apr 1 04:00:00 2025 GMT
Subject: CN=4b21ec64-3afa-408c-b2d5-71b005caec91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:51:a7:dd:16:73:6e:5b:5d:ba:07:23:b4:
f6:be:e8:c8:22:c4:8f:f0:e9:a1:08:f2:78:04:15:
de:7f:79:c2:e8:29:f2:ea:91:5c:02:b0:8f:6d:c7:
7c:76:ed:c1:8b:ee:b1:94:46:93:69:d9:43:70:59:
f1:b4:0a:fa:7c:14:d6:64:e0:5a:2a:f2:77:9b:a6:
b5:38:01:0f:af:3c:0d:42:cf:46:ac:81:47:a2:d5:
30:cb:a1:0c:fc:b1:6e:14:c4:ea:28:b3:63:57:37:
c3:23:82:87:c9:90:e9:d2:89:08:db:af:7d:ee:43:
be:5e:f2:13:ce:1f:f2:91:c7:48:9b:81:d6:8a:57:
10:f8:32:1c:f4:7b:26:f1:a9:c1:a9:86:c5:f7:7e:
83:68:07:36:ee:a6:b4:34:b6:55:c9:70:a6:0a:47:
01:ac:be:ef:17:66:45:93:69:12:63:0a:32:27:d8:
0d:21:bd:dd:72:22:34:c1:d9:48:9e:11:7b:04:81:
19:d6:e6:32:03:48:1a:b2:02:e1:98:fa:7b:ab:b5:
10:14:50:9a:f4:c9:8d:87:c0:3b:2e:ce:b0:2f:d4:
8a:b2:14:1b:f3:c2:5d:df:92:60:d3:e4:3b:6d:4e:
5a:46:65:24:63:5b:e9:03:79:c7:39:3e:88:42:27:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:19:39:72:AB:3E:F0:56:AE:73:04:4D:F1:FE:12:15:82:42:4E:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c663c4d0-c743-35ce-bebc-9a90c639520c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
198.102.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:cb:00:a1:f1:92:1d:5a:5b:24:9d:19:0a:d6:b2:3e:bf:77:
46:da:5e:73:79:18:df:2d:3f:38:a5:f1:ec:14:ce:f4:6f:b5:
e4:56:4f:4f:24:8d:92:69:43:48:2a:5d:f6:70:9e:64:0a:e1:
e9:c5:28:4a:ae:90:a0:d3:15:ad:ae:b8:2a:dd:c3:a9:24:3d:
53:46:ab:bd:9a:45:e5:ca:51:ae:ce:ed:8e:02:06:70:cb:94:
9b:e5:b3:26:d9:9d:9a:04:f7:65:14:5f:44:57:5e:fe:f6:48:
6a:e6:b2:fb:b6:71:6f:cb:b3:44:b8:f2:92:53:b9:73:a2:46:
67:77:3f:0d:c2:89:32:e9:5e:c8:08:09:dc:dc:db:21:74:0b:
c8:eb:fd:f6:7c:4d:a9:a7:bf:d7:e9:9c:24:22:9c:74:62:07:
ee:78:c3:50:7f:dd:b6:e4:0b:4d:94:fc:2a:8c:bb:af:c7:fb:
2b:bd:6a:7b:cd:12:aa:e1:3a:86:6a:41:bd:5a:09:d5:25:48:
d0:25:1a:aa:e4:75:d4:0c:aa:2b:1f:8a:38:47:e4:8e:69:94:
fe:8c:cd:2f:8b:41:69:a2:0a:eb:1a:12:21:62:ac:a1:81:e7:
93:7a:3c:0f:92:1c:43:22:a9:a8:13:9a:31:af:9b:65:58:ad:
48:ae:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:02 2024 by rpki-client on console-fra.rpki-client.org