Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d0da2623-37d1-3e8f-995d-7e39953e42a3.roa
File: d0da2623-37d1-3e8f-995d-7e39953e42a3.roa (raw, json)
Hash identifier: LAmoLkWe3uNgzsmPVEooYHE9rTE60UpR8lyfIm0Z11M=
Subject key identifier: 8C:DC:DF:02:C0:53:86:64:D4:43:B4:05:FD:BB:3A:77:42:45:F1:D9
Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial: 010D0C9F4328583E6FD168FA5FEC9B372F5C2180
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d0da2623-37d1-3e8f-995d-7e39953e42a3.roa
Signing time: Fri 08 Jan 2021 15:24:15 +0000
ROA not before: Fri 08 Jan 2021 15:24:15 +0000
ROA not after: Fri 04 Oct 2024 04:00:00 +0000
asID: 53407
IP address blocks: 198.60.113.0/24 maxlen: 24
198.60.114.0/24 maxlen: 24
2607:fa18:8000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:d1:68:fa:5f:ec:9b:37:2f:5c:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Validity
Not Before: Jan 8 15:24:15 2021 GMT
Not After : Oct 4 04:00:00 2024 GMT
Subject: CN=aa8d487c-0870-456f-9141-92403e397f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c0:31:92:4e:63:1e:60:2b:8f:bd:96:96:3b:
f1:fd:a0:95:0d:4f:b0:ab:28:06:b8:9c:91:c2:d8:
9e:b8:c3:a8:64:ec:25:f7:4f:50:97:70:d0:01:9b:
27:1d:0a:96:3a:41:f1:36:1e:87:06:e1:4a:9b:04:
20:8c:5a:45:c0:a4:54:5e:31:12:b9:58:7a:49:5d:
42:c6:5f:d7:24:c3:e0:72:78:1d:6a:30:ac:c8:6f:
02:16:29:6f:75:cb:34:a2:f5:66:8d:9e:7f:4c:25:
d4:9e:28:1b:de:5a:7a:7a:41:94:16:06:b4:94:d2:
d7:75:bb:eb:84:36:4b:70:14:1b:19:3d:df:49:22:
5e:6d:b7:76:9b:06:29:29:e6:3a:c6:c2:18:dd:60:
8d:e0:9c:74:f1:6d:84:9a:b6:77:c7:cc:95:d0:b7:
b1:c6:c6:3d:c2:68:2b:26:c4:09:66:56:96:71:df:
bc:4b:3a:73:18:fa:1f:05:59:36:34:75:f6:b3:76:
f8:f1:d6:e3:b3:e9:dd:9f:fb:7b:01:46:ba:c7:9c:
c7:bf:5c:9b:46:3c:3a:ae:5c:af:c8:4a:a3:72:eb:
9d:e5:df:34:c7:bc:73:55:69:73:e3:21:76:5a:d8:
5f:f1:b1:d8:bb:0f:93:1a:63:2a:a3:c4:d4:27:b0:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DC:DF:02:C0:53:86:64:D4:43:B4:05:FD:BB:3A:77:42:45:F1:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/d0da2623-37d1-3e8f-995d-7e39953e42a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
X509v3 Authority Key Identifier:
keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.60.113.0-198.60.114.255
IPv6:
2607:fa18:8000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c3:14:9d:0e:3c:a7:5b:f7:6b:04:54:f9:12:1c:88:38:27:
04:64:74:39:91:97:ee:71:fa:6a:a6:32:a4:af:bc:64:60:bc:
de:42:aa:fe:ee:62:c9:b4:f0:58:6b:fc:80:92:9b:d6:a4:0c:
3f:92:17:a4:dc:55:53:0e:ee:db:11:1f:e7:be:40:0d:76:26:
fe:ec:d0:91:5b:62:a7:fd:18:12:b1:6d:90:39:81:c8:72:67:
8d:ac:31:b7:b8:b1:cb:6b:f0:18:d5:f5:c6:ca:bf:01:37:87:
d2:be:e8:92:1d:1e:89:86:1d:5c:92:8b:6c:c7:b9:e9:ed:03:
35:a4:7d:70:c6:bf:1e:95:91:f7:b7:2f:0c:b9:b1:1e:76:a2:
e7:33:41:6b:f4:bf:f5:c2:6d:19:16:1d:49:e3:e5:c1:08:1c:
9b:b2:cf:69:01:e3:49:c7:9a:74:3b:2c:12:98:88:a8:74:36:
1a:ca:f9:77:42:7c:52:b6:71:9f:0c:3f:e5:93:ba:2b:40:ea:
d9:ec:7f:b4:1f:cb:82:86:d4:45:dd:34:fb:94:62:aa:6b:b5:
91:4e:df:13:24:b1:7a:2c:64:d3:ee:d8:de:38:49:de:13:56:
1f:5f:3f:6a:01:c6:32:50:8a:0a:79:58:33:9a:e2:2e:e1:36:
2b:f1:bb:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:31 2023 by rpki-client on console-fra.rpki-client.org