Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/da9efaa2-8f40-3145-94ab-7e832b4a3874.roa
File: da9efaa2-8f40-3145-94ab-7e832b4a3874.roa (raw, json)
Hash identifier: Mj4tO6hBnlnMGAHFeiDY+r+lc9RkEyw/E3Y6UMkDP4Q=
Subject key identifier: 9E:5A:17:2C:0B:38:BF:62:9B:C3:9E:A2:00:28:97:65:1A:60:0C:C2
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328584309F8738CB3E52EAA59CC7500
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/da9efaa2-8f40-3145-94ab-7e832b4a3874.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 172.102.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f8:73:8c:b3:e5:2e:aa:59:cc:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cb97f447-50b7-4560-8341-b48fdcf51539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:89:e0:6e:b9:2a:93:fa:d0:53:65:6d:b3:
d0:0b:ac:64:81:16:79:90:c4:e7:c7:25:58:cd:3a:
d5:45:1a:ed:1c:43:25:1d:c4:2e:0a:14:c7:83:c3:
dc:be:a8:f7:71:8f:30:35:57:6e:d5:d6:6c:a0:8a:
00:58:25:78:c0:6e:ad:95:9e:2c:72:02:60:29:49:
d6:04:02:83:4c:43:d2:97:ed:40:c0:98:21:38:ea:
8e:b6:63:9e:06:f4:6c:08:9b:65:c1:56:14:f9:db:
54:4a:2f:49:93:69:8c:ce:d2:66:0f:e6:73:53:ae:
21:32:89:f4:6e:c4:26:da:22:cd:f0:68:65:f3:b9:
c3:11:da:18:7b:3d:4f:38:be:a2:23:a4:53:f6:f0:
26:9f:56:83:28:77:1e:de:a7:8e:63:5b:1e:51:9f:
04:37:d8:fc:47:ed:23:fe:32:04:a4:6d:37:aa:cb:
ed:58:a1:e3:89:c3:dc:cc:75:fa:85:67:53:7c:81:
6b:ad:cc:0d:a9:e3:e8:b0:d1:26:31:6d:52:bc:6b:
39:c0:a3:3f:11:29:50:19:a5:a2:12:00:d7:c5:42:
99:cd:df:6a:c8:6e:8c:06:a4:83:5f:bd:5c:8c:00:
24:96:b1:1e:1b:87:34:26:eb:2f:b6:a5:77:cb:b4:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5A:17:2C:0B:38:BF:62:9B:C3:9E:A2:00:28:97:65:1A:60:0C:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/da9efaa2-8f40-3145-94ab-7e832b4a3874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:ec:64:2b:d2:01:4a:67:5f:44:ca:02:85:32:17:97:70:67:
c7:08:78:c9:7f:c7:ad:55:f6:26:79:29:3c:e4:c4:20:91:c4:
a0:07:15:99:c6:7f:38:83:55:bb:7a:fc:c8:f2:1e:93:0f:b2:
6a:29:df:81:e4:21:a0:0e:a3:c1:62:ba:e3:a8:83:d0:f1:d6:
b5:0b:45:db:b3:8b:92:d9:5b:8c:13:48:51:9c:a7:b5:68:c1:
22:9a:45:ab:0a:c9:0b:71:31:02:18:f3:cd:42:a7:41:49:61:
55:47:7e:4e:9d:7a:27:74:4f:85:ce:b1:39:2c:92:5f:f1:76:
40:cb:fa:76:ed:55:e4:af:6d:b1:7f:2f:cc:ad:75:61:bf:02:
17:cb:eb:88:1e:3f:f9:90:60:e5:6c:fc:31:36:0d:41:14:51:
9b:c0:cf:ff:0b:9b:29:7b:e0:71:a3:4b:32:a2:04:4a:65:d8:
74:d8:89:26:54:77:97:a4:e8:02:61:8c:80:cc:82:65:4c:56:
f5:00:d8:9c:09:79:46:dd:fb:3b:85:7a:bd:57:9c:6e:64:13:
8c:f3:c2:75:77:0b:16:4a:8c:bc:88:4e:f5:e1:b7:70:b5:cd:
74:b4:59:6a:81:38:f1:d1:a4:77:a2:92:b0:43:a3:93:61:76:
f5:39:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org