Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/97996506-9d8b-3a82-b4e5-0380917c3e9e.roa
File: 97996506-9d8b-3a82-b4e5-0380917c3e9e.roa (raw, json)
Hash identifier: Y1OMZm2wB3QkmxCdzMXzNS1fHqDkXqni/PQJmmhOb8U=
Subject key identifier: 2F:25:2D:1B:F1:21:D6:22:2E:6F:10:E8:69:C4:34:79:59:FE:65:C0
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F43285845254044C9DE55DDDF7A6BB640
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/97996506-9d8b-3a82-b4e5-0380917c3e9e.roa
Signing time: Sat 09 Mar 2024 02:00:25 +0000
ROA not before: Sat 09 Mar 2024 02:00:25 +0000
ROA not after: Fri 07 Jun 2024 01:00:25 +0000
asID: 398712
IP address blocks: 23.226.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 28 Mar 2024 07:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:25:40:44:c9:de:55:dd:df:7a:6b:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Mar 9 02:00:25 2024 GMT
Not After : Jun 7 01:00:25 2024 GMT
Subject: CN=8c7e739e-dc8b-4abb-9cbb-54d3d6c603f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:69:aa:f8:4c:8c:c5:56:ac:5f:ce:5d:6c:
79:23:3b:db:ea:a3:57:b4:e3:02:db:c8:8f:d1:2d:
f5:6a:99:cb:7d:76:da:41:9d:56:49:e3:66:e9:3d:
82:6d:b6:93:02:8b:a4:86:13:d7:b7:8f:01:27:79:
54:ec:a1:e7:04:9d:dd:2e:50:0f:63:11:2b:9a:74:
23:75:f7:1e:12:1d:01:fe:dd:16:ca:96:c0:ed:47:
1d:f5:6a:d3:f0:66:24:3f:e1:18:3b:c7:73:ed:04:
09:0d:8c:d8:61:0c:a3:7f:a9:70:6c:1f:39:8a:7c:
6d:ab:4f:08:b5:8b:42:74:e0:5a:ff:a4:48:d6:0c:
93:cf:0d:b2:9b:4b:6c:95:a6:20:f2:27:df:6b:e2:
d6:52:a2:c5:4d:1e:92:0f:23:e8:d3:a7:fb:2b:7c:
1c:ae:ad:d7:3d:57:d6:78:30:2d:0a:c0:ef:f2:4e:
13:71:f0:02:0f:2c:da:9b:4b:8b:65:a5:f4:53:27:
a0:8e:61:d7:f8:5a:12:61:22:6a:d4:bb:7d:3e:ed:
a5:66:8e:e6:11:c1:09:2a:22:f4:15:bf:c8:ad:a1:
93:5c:ad:f9:f3:07:15:1a:ba:ff:c9:84:75:86:97:
98:ae:54:73:6f:b6:fb:74:03:e7:9a:c5:00:58:c5:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:2D:1B:F1:21:D6:22:2E:6F:10:E8:69:C4:34:79:59:FE:65:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/97996506-9d8b-3a82-b4e5-0380917c3e9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.226.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:3f:e1:08:b6:dc:e5:34:3b:7b:61:c1:2b:b4:2b:c0:fe:9d:
44:f0:c4:05:c5:7f:a7:f7:19:48:a2:8c:9b:0b:23:0b:b1:ee:
e9:b8:00:4a:52:e4:c7:fc:37:c1:ef:e7:fa:34:eb:0b:aa:43:
4d:1b:14:3c:4d:f1:d9:12:86:9e:db:68:42:9c:a3:58:fb:14:
ff:fd:91:b9:9c:da:3a:33:10:1f:87:2f:fa:a2:cc:6f:7d:8b:
d0:88:01:a6:28:06:47:ef:d3:ba:ff:32:df:c0:a6:c3:cf:a8:
62:d2:c9:a1:b6:20:2c:d7:58:d2:db:0e:3e:ec:14:a6:39:e8:
7f:1f:1f:a6:9c:49:8d:62:11:cf:75:ba:63:0c:1f:fc:d0:70:
4f:37:c8:d9:34:87:7b:c7:5e:68:60:16:52:f8:24:ca:d3:e3:
96:b4:8c:22:0a:9b:56:d0:b0:89:50:06:0b:c8:8d:d6:47:4e:
62:35:c5:42:fb:14:ab:ec:e6:ef:14:51:f6:c6:5f:b0:c0:34:
24:05:3e:79:2c:2c:31:1c:66:86:28:f0:cb:d4:11:37:44:1e:
27:64:11:8d:52:69:d3:c6:87:f1:17:58:fc:b4:b1:61:10:82:
3e:b5:53:94:5e:83:71:64:a2:91:c1:4b:db:eb:cf:e8:cc:40:
91:b9:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 10:37:30 2024 by rpki-client on console-fra.rpki-client.org