Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d0f9a668-72a1-3b6f-bf41-853c13b403c3.roa
File: d0f9a668-72a1-3b6f-bf41-853c13b403c3.roa (raw, json)
Hash identifier: O9TAEcpWTHmz+qswwAV4qEYf7+NIErNuJbDFwqTfFdU=
Subject key identifier: 66:02:AA:7C:CA:71:CE:F7:0E:B6:C2:86:DE:CB:17:DA:FA:58:D1:D8
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F432858452CBF6C3EF9B1E9883A303A00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d0f9a668-72a1-3b6f-bf41-853c13b403c3.roa
Signing time: Mon 11 Mar 2024 18:27:20 +0000
ROA not before: Mon 11 Mar 2024 18:27:20 +0000
ROA not after: Sun 09 Jun 2024 18:27:20 +0000
asID: 395829
IP address blocks: 173.211.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 16:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:2c:bf:6c:3e:f9:b1:e9:88:3a:30:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 11 18:27:20 2024 GMT
Not After : Jun 9 18:27:20 2024 GMT
Subject: CN=a376f5bc-1e45-412f-950a-25ed52d9d239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c8:25:2a:be:ec:ab:43:06:eb:b3:80:c3:d7:
b0:73:8e:8f:40:99:f9:b0:8a:33:46:18:4d:97:88:
49:b3:c3:ca:0c:f1:93:59:ee:e9:a2:fc:1b:2d:13:
c4:b3:62:18:86:c8:2f:99:68:63:8b:11:7b:42:e6:
c1:d1:ad:e4:ca:a0:13:81:7d:4d:55:10:f1:dc:e3:
d5:c7:e1:dd:24:dc:4d:ee:17:75:e3:f3:89:fa:47:
b5:53:db:89:af:e0:df:39:68:57:11:52:ac:66:88:
b0:f8:7e:7f:2b:fe:c4:7a:6b:ff:52:9c:75:c8:99:
18:de:6c:b2:4b:85:31:c4:f4:4b:3c:f2:ed:52:69:
0c:f2:f7:7a:4a:b5:2d:d4:67:8c:fa:72:c6:f0:64:
0c:03:cc:41:f2:95:f7:9a:cb:e8:57:6d:e5:99:3b:
32:f8:9c:87:5e:1e:c5:68:51:07:83:84:fd:2c:d2:
f2:f3:87:61:a2:f7:b4:b3:10:77:47:04:8b:7d:10:
e1:a5:d8:95:f6:a4:95:21:dc:60:b4:56:fc:b2:3e:
85:dd:94:7e:86:4f:ea:ce:41:2d:dc:61:a5:c5:a8:
e9:54:8f:66:e1:75:b4:74:96:80:92:50:a2:15:e7:
d2:d7:2f:14:cc:49:e6:74:9c:ce:18:ac:cb:c9:d4:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:AA:7C:CA:71:CE:F7:0E:B6:C2:86:DE:CB:17:DA:FA:58:D1:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d0f9a668-72a1-3b6f-bf41-853c13b403c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:47:78:dc:ea:92:bf:0a:dd:88:e8:f8:0f:36:67:b5:56:a4:
34:2b:5f:97:97:93:ec:d5:c3:ea:de:ff:48:71:f7:2a:b6:48:
7b:30:c8:44:8d:74:b6:c8:b4:f1:25:46:97:d4:bf:67:cc:c0:
7f:17:4d:9f:a8:eb:4b:fd:cf:aa:ac:e6:8a:1d:f0:f0:ca:21:
11:0f:1c:af:fe:f5:22:79:b0:ec:d2:a3:8f:43:db:53:ee:24:
04:8c:12:fb:a3:3a:f3:61:53:fb:f9:59:ee:f7:72:5d:28:c9:
b9:72:fe:b4:5b:96:c1:bf:15:e2:30:15:3f:ab:67:af:dc:14:
08:40:48:f6:9f:8f:48:80:4b:cf:a9:77:5e:44:d4:a4:92:b6:
d3:60:a0:cb:2f:9b:22:79:e0:62:42:06:0a:b4:d6:e8:e2:fc:
4b:2f:6f:7f:39:dc:21:c3:66:39:da:64:b6:ef:52:b9:25:7a:
88:2c:5d:e7:76:c9:95:ee:6e:59:0a:05:9c:e8:fc:fb:d0:33:
ca:57:1f:a2:d9:67:b7:4e:03:6b:fe:ec:25:f5:30:0d:81:0d:
9e:df:0e:2c:30:20:28:89:fc:07:cd:7f:ed:55:70:b2:76:97:
9d:98:3b:76:bb:64:9a:76:15:71:d2:89:32:f3:90:1b:4e:f9:
c9:19:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:02 2024 by rpki-client on console-fra.rpki-client.org