Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a30691c2-2fad-3c88-bfd8-f80e87730e07.roa
File: a30691c2-2fad-3c88-bfd8-f80e87730e07.roa (raw, json)
Hash identifier: l8es1dh88sc7hKGbfr2YNQ40i5eZDn09v1fGyCoJ8mc=
Subject key identifier: F3:FD:55:59:B6:58:D8:F3:0A:2A:55:C8:EF:6F:93:BC:CF:57:7E:65
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858471BA5A8444BCDE54CE39F4780
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a30691c2-2fad-3c88-bfd8-f80e87730e07.roa
Signing time: Thu 05 Sep 2024 01:00:30 +0000
ROA not before: Thu 05 Sep 2024 01:00:30 +0000
ROA not after: Wed 04 Dec 2024 02:00:30 +0000
asID: 16509
IP address blocks: 161.69.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 14:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1b:a5:a8:44:4b:cd:e5:4c:e3:9f:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Sep 5 01:00:30 2024 GMT
Not After : Dec 4 02:00:30 2024 GMT
Subject: CN=9d96bdc0-a792-4345-a32e-df02843dd1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:ac:20:db:57:00:46:ce:1d:73:8e:9f:ac:
26:97:a0:3a:60:b4:4d:e6:87:bb:99:a8:0d:50:cf:
7f:04:9d:58:fc:bd:7b:22:72:a3:90:c8:78:1d:ba:
2b:a2:9d:59:60:ca:21:78:df:80:e6:9d:b5:40:ae:
b2:75:c6:4a:94:62:7f:be:da:c3:af:9d:13:01:a5:
51:c5:65:c1:30:38:f2:51:a7:25:02:54:b3:16:37:
b1:49:a9:6d:8d:9e:ea:11:c3:ad:fc:af:c9:2f:55:
cf:4c:9a:76:d3:e3:69:4a:2f:c0:a7:d4:97:e6:7f:
23:db:9a:83:30:21:71:0a:2c:06:56:87:fa:a7:aa:
bc:79:e9:c5:e9:93:80:ba:96:19:ca:dd:b6:97:f5:
89:0a:41:7e:23:c3:3e:16:e0:a1:99:5c:5c:7d:a1:
12:78:4a:f1:45:39:3d:d3:f7:23:3b:95:6d:7d:47:
51:8f:4a:fa:71:71:c4:0e:83:a6:c1:55:4a:db:b4:
12:ae:91:98:b1:1b:6a:17:a2:db:f8:a3:25:ed:95:
9e:bc:db:57:97:e3:57:4e:3f:bb:a5:35:34:e8:a1:
38:0c:12:6e:05:cb:a7:09:16:82:5f:74:b9:bc:84:
17:cf:e3:80:9d:88:66:1d:6e:83:c6:ae:cf:2a:b3:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:55:59:B6:58:D8:F3:0A:2A:55:C8:EF:6F:93:BC:CF:57:7E:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/a30691c2-2fad-3c88-bfd8-f80e87730e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:96:b6:18:30:b7:d3:1d:b2:d6:c2:d0:9d:8d:31:ec:44:80:
e6:c4:4d:73:df:92:68:e2:fc:8d:8d:01:46:ea:19:a4:cd:7c:
87:fd:9c:65:81:34:4e:c0:6c:ef:99:30:96:4b:b3:8e:73:84:
9d:f6:a0:ff:62:6e:e1:af:89:a6:3f:3b:d3:a0:65:71:0d:05:
c1:71:29:b8:13:80:bf:80:be:4b:d8:8c:cb:4f:bf:77:70:c6:
03:a9:7c:13:ad:70:d5:3e:dd:4e:c7:c4:29:df:03:18:8f:e3:
b8:15:2e:98:d2:34:64:db:fd:09:04:d9:62:75:81:62:f7:fe:
e3:ed:28:22:c1:ea:8e:0d:8b:7b:61:4b:da:5d:cc:64:0c:33:
ce:9f:6a:8a:ef:96:9d:6b:f1:1a:58:6f:f9:96:82:b9:1b:2b:
54:e4:3f:61:8c:66:80:d9:01:99:4b:c7:47:f9:4a:fd:2b:b0:
0a:7a:c2:a2:c8:ec:4f:31:6e:f1:d8:ed:e9:ce:07:b6:08:af:
58:4a:e4:c6:89:0e:0f:f1:dd:5c:23:f3:da:09:14:cc:37:d1:
c2:93:45:be:91:be:0d:3f:23:d0:39:9e:c3:2a:13:47:6d:8e:
3f:3f:44:b6:5a:43:15:c2:c5:cb:76:08:82:c5:c2:b9:9b:76:
0b:ad:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org