Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff820bee-b8e1-3800-a94e-ca80655af36c.roa
File: ff820bee-b8e1-3800-a94e-ca80655af36c.roa (raw, json)
Hash identifier: d8X3ZQYSF0t/k//LCsCJmeLDiwzpdO9Ve/MGzrfxHbs=
Subject key identifier: 34:FF:D8:3E:66:84:C6:8C:10:59:2A:EA:3A:19:D8:9F:95:EF:13:33
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285844DE98B4237B06E9D42D697500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff820bee-b8e1-3800-a94e-ca80655af36c.roa
Signing time: Mon 12 Feb 2024 18:36:16 +0000
ROA not before: Mon 12 Feb 2024 18:36:16 +0000
ROA not after: Sun 12 May 2024 17:36:16 +0000
asID: 200636
IP address blocks: 173.211.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 21:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:de:98:b4:23:7b:06:e9:d4:2d:69:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 12 18:36:16 2024 GMT
Not After : May 12 17:36:16 2024 GMT
Subject: CN=5ca01088-0ad7-4e84-9444-e3ab3d6bd1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:86:78:07:ff:40:c8:d1:04:e2:5e:82:93:
14:66:dd:9e:ba:02:fd:c2:ba:b5:cd:1a:2f:7e:ca:
f8:91:cd:a7:6d:3f:c7:a3:06:75:d9:88:ad:46:4f:
03:e7:1c:e8:ae:fb:8b:af:ab:c0:9c:ba:7b:8a:35:
b0:41:2a:02:7b:7e:cf:3f:b5:70:e5:75:c1:1a:dd:
ab:e3:27:27:aa:0b:b1:de:bc:76:c5:76:87:b2:77:
31:5e:f3:a9:63:ec:76:9c:d0:26:93:b7:99:97:75:
31:6d:8d:0c:da:89:ae:25:d9:76:d9:a1:9a:0a:b6:
e4:c7:a6:22:c3:cc:a9:e9:c1:b7:0f:9b:e3:85:de:
30:74:13:5c:61:fb:69:88:43:36:be:4e:84:a9:77:
10:2b:96:a2:7f:67:90:74:54:7c:89:5f:a5:d1:1b:
3b:53:36:81:95:b2:e5:dc:af:48:2a:6a:96:31:50:
f5:27:bf:5c:7e:b2:20:91:ca:bb:7d:5a:5e:17:25:
38:46:8d:1b:ab:56:d3:1e:d8:86:78:9a:b2:4a:7e:
43:39:81:7e:c8:3a:20:a0:75:6b:e1:71:bc:08:b5:
8e:3e:4e:c3:cc:cb:61:81:97:5f:d0:a3:d6:61:a7:
10:8f:24:fe:4f:e0:22:ca:32:39:40:49:c5:b4:a0:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FF:D8:3E:66:84:C6:8C:10:59:2A:EA:3A:19:D8:9F:95:EF:13:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff820bee-b8e1-3800-a94e-ca80655af36c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f7:af:96:c0:42:fa:f1:d6:03:18:a9:5f:91:8e:c6:12:5b:
85:43:01:3d:b2:60:76:cb:ac:4a:a3:03:62:71:e3:af:de:55:
0b:89:e2:40:f5:ee:88:86:01:6d:91:4d:7d:05:32:5e:51:ed:
e4:c5:04:73:7c:ff:c0:09:a2:a6:16:69:65:78:8d:f6:5e:a1:
bd:5b:3b:b7:e0:f8:05:69:43:91:95:fa:78:fe:d1:3b:ba:8e:
c3:6c:75:c9:c5:34:96:f3:be:dc:47:60:52:28:b5:0f:ef:b8:
22:74:10:88:02:14:c7:e8:0c:1e:e2:18:b4:11:a4:32:24:34:
51:83:be:61:99:f9:c8:c7:cc:d3:14:56:cb:4a:f7:e0:9c:57:
4f:41:57:4b:c4:dc:34:07:83:3b:49:78:92:42:90:4d:0b:9e:
f9:a6:c8:ac:0a:d2:49:7e:31:b3:7a:9f:f7:c7:79:cb:9c:d4:
d4:21:1f:61:3c:4d:38:75:1f:9f:0f:c1:5b:59:49:e4:a3:8b:
f9:e7:91:72:2d:fb:ed:a1:dc:7f:41:c2:45:91:43:b0:32:a1:
b0:b8:af:cb:c4:b0:92:cb:5a:9b:07:2a:02:f4:ee:12:56:90:
00:36:ef:a2:78:23:f2:ff:2c:87:63:a3:b3:8a:4b:8a:2e:83:
0c:de:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 00:55:57 2024 by rpki-client on console-fra.rpki-client.org