Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dce4b8bf-a2c3-38b5-af4b-8a6592e8319c.roa
File: dce4b8bf-a2c3-38b5-af4b-8a6592e8319c.roa (raw, json)
Hash identifier: ldPKMAqDe2CCDwQvk/wPX4aYnmAEGsOqpngdwy8Hi9w=
Subject key identifier: A0:CD:62:F9:C4:0F:9D:4E:38:1A:5D:33:05:D2:59:28:E5:05:04:36
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285846196972C10431BFE4BF3D5C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dce4b8bf-a2c3-38b5-af4b-8a6592e8319c.roa
Signing time: Tue 04 Jun 2024 13:00:34 +0000
ROA not before: Tue 04 Jun 2024 13:00:34 +0000
ROA not after: Mon 02 Sep 2024 13:00:34 +0000
asID: 2129
IP address blocks: 168.87.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jun 2024 13:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:19:69:72:c1:04:31:bf:e4:bf:3d:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Jun 4 13:00:34 2024 GMT
Not After : Sep 2 13:00:34 2024 GMT
Subject: CN=4fa2226e-248b-4219-be46-5d9efd402e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:9a:b1:2c:60:80:57:85:08:23:53:b2:b6:
2e:29:9c:5e:c2:95:88:55:f5:1f:c1:4e:34:ad:dc:
24:d8:a8:9d:c6:83:c1:43:ef:80:36:45:e6:82:09:
a6:ec:8d:9a:c0:e0:07:42:cf:fd:df:d0:11:e7:ba:
ff:ce:b1:0e:b8:35:67:ca:c1:fa:6a:b8:23:a5:7b:
b5:ff:f8:b5:94:76:61:5f:b8:2b:39:2d:fd:4e:cf:
92:d1:1e:9c:30:a5:df:f7:f0:d5:86:4f:ee:c3:fe:
50:bc:c1:05:84:76:8a:04:c8:44:20:2a:d0:9a:7b:
0b:20:43:a2:4f:db:25:90:83:f9:52:04:9a:23:dc:
29:91:df:31:f3:0f:64:d5:3b:a9:cf:9f:dd:b8:33:
09:fd:29:10:a6:1e:35:a7:94:7d:5c:84:46:b5:6e:
03:91:7d:22:95:a6:1c:f7:fe:d4:6b:1c:24:02:f2:
3f:04:ee:3b:d1:7f:ff:76:e4:28:e9:8b:72:08:d5:
24:6f:27:54:4d:52:f1:67:27:37:51:7d:ff:89:52:
33:28:cb:30:50:53:e4:33:c5:4f:bb:a9:18:5f:b8:
e8:1f:23:cf:1c:02:7c:ec:69:1e:c2:74:d7:2b:94:
d2:2b:58:0a:d8:2d:8c:18:0f:4b:5e:f8:40:3c:e3:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CD:62:F9:C4:0F:9D:4E:38:1A:5D:33:05:D2:59:28:E5:05:04:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dce4b8bf-a2c3-38b5-af4b-8a6592e8319c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:40:d7:50:eb:7d:94:22:dd:6f:f9:fe:da:19:06:73:4e:02:
88:7c:aa:ef:64:4f:53:b2:61:a6:60:1a:d7:fb:34:61:fb:4e:
a6:44:a8:2d:08:90:27:7e:18:49:3e:77:e5:04:c2:d6:2c:84:
4e:89:d3:67:e3:b9:f3:f8:89:25:f3:6a:70:cc:23:57:d9:2c:
2e:ce:2e:ee:fe:75:60:ae:a4:8a:1e:18:1f:f5:1e:4d:7b:1f:
b6:ec:23:6d:f8:05:94:53:d7:7e:6b:01:79:5d:be:8b:d4:95:
da:db:ca:6a:3e:cf:01:e5:b7:c1:1f:f3:db:47:cb:2f:1d:9f:
17:5b:9e:06:0e:1c:51:e8:85:fd:66:94:85:bf:fd:17:1c:8d:
7d:85:25:45:e8:a6:0b:66:1f:fe:1b:ab:64:99:4e:f7:99:73:
59:3a:4d:71:85:f7:ef:f8:9a:05:85:c8:28:7e:81:f4:0a:46:
bb:21:b7:09:37:7e:f0:db:f2:e4:ea:fb:38:5b:10:51:fb:2b:
00:75:c3:5d:86:da:ae:6a:dd:c5:d0:eb:6f:e1:5a:d5:19:76:
01:20:76:ae:c1:af:14:1e:e3:14:3b:93:87:16:5a:e4:96:49:
46:e5:60:ab:af:14:00:6b:c5:eb:a3:ea:00:f1:6f:3f:de:b1:
fa:9f:5d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 17:17:08 2024 by rpki-client on console-ams.rpki-client.org