Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3bb8611-6010-3a5f-899c-3de7ed8413cd.roa
File: d3bb8611-6010-3a5f-899c-3de7ed8413cd.roa (raw, json)
Hash identifier: uVvFaWsgRYJ8O4q1bCtuOv2wBQVYpaNGkKl3mp1o1G4=
Subject key identifier: 4A:45:AE:7C:DE:EF:11:6A:10:BC:40:4F:81:86:45:70:15:E5:9B:3D
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285845347D4EE75ED12E50301E9580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3bb8611-6010-3a5f-899c-3de7ed8413cd.roa
Signing time: Thu 14 Mar 2024 13:00:30 +0000
ROA not before: Thu 14 Mar 2024 13:00:30 +0000
ROA not after: Wed 12 Jun 2024 13:00:30 +0000
asID: 834
IP address blocks: 216.107.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:34:7d:4e:e7:5e:d1:2e:50:30:1e:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 14 13:00:30 2024 GMT
Not After : Jun 12 13:00:30 2024 GMT
Subject: CN=d1c85cd9-afab-40e9-ac07-d1df9ac6b5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:34:70:5f:c9:1f:1c:2e:20:80:77:27:21:
7b:22:05:44:b0:db:9a:11:15:2f:a0:81:e1:08:60:
2c:11:a3:e0:37:19:43:fa:d8:24:54:77:4e:b6:82:
0c:7c:33:ef:57:10:cd:bd:c4:e9:20:7c:7d:de:36:
06:d3:08:e2:d7:f3:ee:49:a6:d4:bc:3d:63:94:77:
96:e2:b1:90:de:96:2f:db:c1:43:57:aa:11:a9:13:
2c:e1:af:7f:b3:7c:eb:58:c6:c6:c6:bb:b2:ee:f5:
fb:8a:6f:20:46:29:a0:86:20:14:ed:98:cf:7f:6a:
c6:31:66:89:d9:bb:25:fc:59:1c:a7:63:4b:32:84:
7f:6c:b5:30:dd:f2:af:24:b3:e8:8c:ae:34:7e:87:
48:1d:3f:62:4d:a4:a0:ad:f1:69:56:00:41:a6:29:
2e:80:4d:19:75:af:30:fd:b5:68:20:46:89:0d:07:
78:f9:9e:03:8c:3c:5e:d7:ba:79:de:4c:08:cb:73:
ee:a9:41:97:c4:87:08:d7:c2:a0:aa:47:76:80:ec:
0e:3b:09:bc:67:35:e9:95:07:c0:2a:ff:78:21:d3:
a7:db:c4:31:86:92:25:b0:5c:79:65:fb:18:32:e2:
c8:4c:cd:d2:a1:6a:72:ba:91:a9:f3:78:87:c0:e9:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:45:AE:7C:DE:EF:11:6A:10:BC:40:4F:81:86:45:70:15:E5:9B:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3bb8611-6010-3a5f-899c-3de7ed8413cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.107.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:fc:70:b1:76:f4:5c:76:ed:82:57:9b:79:c4:11:b0:48:ef:
62:52:47:e5:a7:00:6d:c8:02:eb:5b:1d:3d:c7:57:f4:21:49:
36:65:11:20:97:53:c5:50:78:6f:0a:0a:29:e9:14:e6:ad:6a:
62:2b:58:0c:91:8f:56:24:f4:85:ca:99:47:7c:9d:b0:15:cb:
10:77:bf:65:09:a6:b6:69:ff:fb:3e:0d:1a:fd:01:a5:87:a7:
ff:be:2f:05:a1:e3:b6:04:fe:67:e3:d7:ce:8b:af:78:a4:4f:
b5:fa:e9:99:9c:b5:d8:a8:f2:85:12:5b:0f:38:df:c5:34:fb:
57:88:62:bb:a3:46:5e:17:11:7e:95:3a:ee:03:6d:8c:65:5e:
74:92:eb:d6:8e:0e:5b:ba:90:51:8b:dd:77:ae:60:e7:df:da:
f8:34:85:29:b6:fd:ff:0d:e1:05:00:44:12:9e:1d:65:24:00:
77:9a:3c:68:59:e1:71:1a:57:81:d4:ba:e8:d6:5c:8d:55:b9:
df:5a:59:f6:d5:cf:f3:3a:26:ac:9f:04:70:ac:8e:2e:b9:b1:
26:b2:a2:41:05:87:5c:1e:a0:36:22:b7:2c:bf:ca:ed:09:e1:
02:3a:78:b0:c5:98:77:10:b6:c3:31:d4:3d:14:75:b5:88:4d:
e1:2a:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:20 2024 by rpki-client on console-ams.rpki-client.org