Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/f60d3336-bbf6-3178-a277-dd1d8b033398.roa
File: f60d3336-bbf6-3178-a277-dd1d8b033398.roa (raw, json)
Hash identifier: kUPUDqJDIDRqjl2YqD+/cFLDFFH+3b7Uu+WdUsspmLI=
Subject key identifier: B2:08:6B:C8:6D:03:4C:6C:1B:06:7B:92:64:A0:D0:F1:45:2A:21:BE
Certificate issuer: /CN=41ec972f-711e-4391-a3ef-92a389a34267
Certificate serial: 010D0C9F432858453D25337D902979553F524500
Authority key identifier: F5:2E:8B:7B:76:F4:89:42:3F:7D:7D:06:04:68:60:D3:1C:9B:33:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/f60d3336-bbf6-3178-a277-dd1d8b033398.roa
Signing time: Sun 17 Mar 2024 15:25:20 +0000
ROA not before: Sun 17 Mar 2024 15:25:20 +0000
ROA not after: Sat 15 Jun 2024 15:25:20 +0000
asID: 7029
IP address blocks: 23.146.200.0/24 maxlen: 24
2606:5440::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Apr 2024 06:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:3d:25:33:7d:90:29:79:55:3f:52:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ec972f-711e-4391-a3ef-92a389a34267
Validity
Not Before: Mar 17 15:25:20 2024 GMT
Not After : Jun 15 15:25:20 2024 GMT
Subject: CN=d2bb6f08-a38f-4755-99bb-7563799896b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:57:72:21:e2:0e:b1:1d:ba:fb:72:f6:73:
f8:20:2b:04:4e:f8:2a:bf:f1:d8:8e:a1:75:fa:96:
be:7f:b0:56:04:28:c9:98:2c:eb:9f:25:47:ce:f0:
00:71:30:2f:ae:7c:4e:97:7f:b9:f9:ae:09:8a:5a:
c3:d0:d1:7c:29:92:92:b3:d5:e6:73:78:e1:d5:db:
f4:03:ae:86:18:e9:ed:a4:18:9e:8c:3f:50:dd:ca:
da:4a:33:28:42:34:2d:20:82:df:d0:af:85:da:ba:
31:2e:57:dd:4c:a8:51:21:8c:f1:e2:da:68:99:f5:
b8:12:38:d0:2e:dc:e1:95:a9:a6:4d:59:8f:3c:69:
c7:78:d2:c3:bf:86:e6:af:02:81:ba:e2:4a:00:ab:
87:82:65:6c:d2:ec:3b:7c:3e:e1:54:e5:7d:ee:9a:
fa:92:95:8a:1f:51:f2:a3:12:de:20:ba:8f:40:00:
f3:ee:58:7e:0d:1b:f9:8d:03:42:71:ee:a4:80:4e:
4d:e7:41:f3:9e:fc:68:8c:96:a1:b2:91:34:e0:c9:
ce:be:de:81:68:c2:2e:33:f3:25:a6:b1:2d:44:ef:
80:fb:5e:d5:87:d4:17:2b:0f:b7:af:62:fc:5a:bb:
57:f7:d3:d4:e6:cc:21:e9:e5:c8:92:83:af:45:6f:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:6B:C8:6D:03:4C:6C:1B:06:7B:92:64:A0:D0:F1:45:2A:21:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/f60d3336-bbf6-3178-a277-dd1d8b033398.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/41ec972f-711e-4391-a3ef-92a389a34267.crl
X509v3 Authority Key Identifier:
keyid:F5:2E:8B:7B:76:F4:89:42:3F:7D:7D:06:04:68:60:D3:1C:9B:33:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.200.0/24
IPv6:
2606:5440::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:ac:86:8f:ea:9c:de:85:9f:42:36:6e:42:f5:73:f2:97:8f:
05:70:e1:5a:d9:2b:2c:f0:0c:57:5f:77:e2:1c:39:ff:b8:d7:
98:ea:87:37:f5:31:d8:8f:b9:35:67:18:16:7e:a0:3e:d9:56:
7b:22:ab:23:b5:88:ca:dc:29:1f:dc:22:64:ad:ef:0a:97:c8:
ff:e9:16:fc:9e:98:37:cc:ed:1f:7a:3c:c8:ef:4a:bf:6a:4d:
02:5e:69:54:b3:52:26:a7:b9:31:29:54:32:d3:93:75:3c:7c:
49:93:d9:cd:8f:1e:32:71:7a:ff:1c:7a:29:a1:1b:e6:9a:2f:
3b:87:e2:8a:ac:39:c4:f8:d7:51:5d:35:00:d0:c0:45:31:5d:
90:ed:92:ba:89:51:94:bf:f6:59:87:3f:e2:82:5f:db:85:87:
fc:cc:4f:91:e1:42:e6:7c:97:21:a6:d1:5a:ae:75:26:09:e1:
9e:95:ef:3f:cf:94:af:a9:aa:73:f7:71:b0:6d:83:37:ad:c0:
52:b9:9b:79:ec:a0:41:ca:d4:77:65:72:9d:ce:8d:fd:a0:8f:
a7:b3:87:38:be:a8:95:31:fd:33:fb:b3:8d:37:13:21:81:10:
ef:c3:e0:82:dd:3e:cd:db:f2:4b:7e:18:2d:d3:98:b6:7a:97:
e0:96:4a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 09:39:04 2024 by rpki-client on console-ams.rpki-client.org