Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/bf836501-589f-357c-9007-d4ec4f84a865.roa
File: bf836501-589f-357c-9007-d4ec4f84a865.roa (raw, json)
Hash identifier: x7hSY/aVHvKt4HhQuPSQf+Hpl65C+aZGcj4oAer5fZ0=
Subject key identifier: 2A:35:E9:0B:15:69:10:40:77:87:4F:B0:CD:96:5E:A8:81:1C:BE:1B
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F4328583F4ACC3D676E91823919F13080
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/bf836501-589f-357c-9007-d4ec4f84a865.roa
Signing time: Wed 07 Jul 2021 21:05:36 +0000
ROA not before: Wed 07 Jul 2021 21:05:36 +0000
ROA not after: Sun 22 Dec 2024 05:00:00 +0000
asID: 7018
IP address blocks: 174.136.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:4a:cc:3d:67:6e:91:82:39:19:f1:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Jul 7 21:05:36 2021 GMT
Not After : Dec 22 05:00:00 2024 GMT
Subject: CN=a27941ea-3151-4720-8e81-ce7167a68826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:08:54:55:08:bb:20:36:1d:64:83:93:f6:
b1:ae:80:e4:36:6c:15:08:54:1d:02:46:c8:be:83:
56:ac:67:07:c2:a4:45:6d:67:27:94:40:c7:69:25:
1f:d3:97:b2:0c:8e:40:93:a6:05:7f:48:47:9d:bd:
66:87:0f:ff:f6:a9:b4:f7:0e:7f:e9:73:d5:c1:6f:
0c:5f:d4:23:e6:10:5c:e6:85:0d:c9:b8:10:ab:38:
5e:21:60:70:90:43:9d:b0:76:40:a3:26:69:11:ab:
cf:89:ea:9f:85:f2:9d:aa:0b:f3:a5:e1:69:83:d9:
bc:83:9f:bc:3c:c3:e7:03:bc:f9:fb:c9:4f:c4:fb:
78:fe:b6:e5:5f:92:e3:ce:8f:dc:03:e3:af:85:13:
05:ac:e3:22:9b:45:d8:6e:f5:49:b0:3a:da:cc:28:
1c:57:3f:c0:09:97:00:31:d5:d2:45:5b:ad:dc:92:
9c:b9:70:5c:96:78:c7:dd:27:15:40:16:6f:c4:dd:
2c:14:5a:d0:68:28:19:97:b9:ce:35:5a:dc:25:bc:
7f:82:d5:f8:d0:e7:1d:18:be:9f:99:a1:2b:3b:36:
5a:85:d5:c0:51:00:ab:04:0c:e6:75:13:2c:0b:96:
16:ce:04:23:89:8f:0b:bf:62:18:43:e2:24:d5:11:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:35:E9:0B:15:69:10:40:77:87:4F:B0:CD:96:5E:A8:81:1C:BE:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/bf836501-589f-357c-9007-d4ec4f84a865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:03:d8:94:f6:db:52:56:81:87:aa:74:66:24:ae:18:19:65:
45:d9:62:c7:52:69:fb:26:3c:1b:37:b5:e3:61:8a:5e:bc:cb:
25:0e:e5:1a:56:77:be:ef:43:7b:59:52:1b:c4:8c:37:59:c6:
7c:a3:07:7a:fb:ab:3e:69:68:08:5d:f5:7b:00:40:f9:84:8c:
35:2f:cf:91:86:e0:06:e0:ec:4b:d5:89:9b:a4:2e:23:d8:fb:
5c:cb:78:a7:28:9e:5d:57:05:54:5b:32:f3:ad:b9:7b:a3:5e:
ac:12:34:83:68:36:cd:99:4a:7d:ab:de:01:4e:08:19:9f:a9:
28:97:f1:f5:9b:87:9b:bd:f7:86:3a:47:a8:4c:91:ff:b0:e3:
8f:d7:c8:5d:bb:7b:c7:22:a4:98:0d:42:4f:82:47:21:1e:92:
2b:d8:75:fa:ac:ba:78:04:02:2a:e4:13:fc:15:38:c3:89:95:
03:56:53:9f:18:cf:ec:a6:51:94:22:54:e4:12:8f:07:22:fe:
17:9d:0a:fd:62:50:89:5c:a1:35:4f:2f:de:96:b8:a8:76:44:
ef:67:ea:c7:73:c9:e8:20:dc:91:27:53:4b:1e:49:e0:ad:23:
ca:82:cf:0e:d9:26:2f:3b:2a:be:39:82:e5:0a:45:f7:93:ca:
4b:e5:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:28 2023 by rpki-client on console-ams.rpki-client.org