Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/4d75d68a-6710-3f7e-a5ae-2467519e4e7b.roa
File: 4d75d68a-6710-3f7e-a5ae-2467519e4e7b.roa (raw, json)
Hash identifier: sPZWvu2kFIH6dspb2SIk7o9Pstd3sVian4Jlh2a4tSo=
Subject key identifier: 8C:D8:1B:90:46:A0:46:6E:2D:B9:F7:C0:93:C1:B0:70:6D:C7:0C:9C
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328583E004239BEE3C7AD02322C9D80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/4d75d68a-6710-3f7e-a5ae-2467519e4e7b.roa
Signing time: Tue 18 May 2021 13:36:10 +0000
ROA not before: Tue 18 May 2021 13:36:10 +0000
ROA not after: Sun 25 Aug 2030 04:00:00 +0000
asID: 7029
IP address blocks: 172.98.160.0/24 maxlen: 24
172.98.163.0/24 maxlen: 24
172.98.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 13:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:00:42:39:be:e3:c7:ad:02:32:2c:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: May 18 13:36:10 2021 GMT
Not After : Aug 25 04:00:00 2030 GMT
Subject: CN=2a47084a-78d7-45e5-ad4a-6eb6e5bb1f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:40:eb:a6:62:94:1e:ff:92:ec:55:86:87:
a4:88:31:cb:2b:76:c9:bb:5e:cc:d0:47:f6:59:2f:
92:6e:13:56:60:71:8d:35:24:91:a7:c7:b3:a0:e2:
10:be:dc:78:ca:14:6f:18:10:01:55:d0:2d:c6:25:
f6:ba:85:88:7d:e5:ee:f8:73:cc:16:f6:a5:0e:ff:
73:91:5e:2c:d9:16:09:4a:05:3c:47:b6:0c:50:63:
3d:fb:c3:31:f4:c3:c7:23:cd:6c:97:b0:1b:ef:17:
89:d6:0e:f0:b7:0b:68:76:00:18:d7:4b:fb:82:a1:
11:cb:27:f4:d0:2c:38:e1:1a:ad:de:18:d0:f9:4e:
78:93:00:fe:b4:a8:de:67:b6:8d:06:81:6c:81:76:
41:7e:80:5a:c2:8f:ab:85:66:fb:03:c0:75:60:12:
a7:e0:21:04:58:1b:3f:8e:1e:03:97:5f:dd:e7:c4:
11:60:d5:a1:70:6c:50:a7:bf:70:02:3c:6a:42:a9:
78:77:ac:bb:fa:e9:90:b3:51:33:76:fa:6b:5c:00:
21:62:64:3c:b8:59:11:53:e0:34:03:42:d2:56:b0:
09:7a:c4:2a:31:ef:fb:fe:9e:e4:89:37:31:22:3a:
6d:c9:33:44:c5:75:81:cd:46:14:b0:25:bf:be:4d:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D8:1B:90:46:A0:46:6E:2D:B9:F7:C0:93:C1:B0:70:6D:C7:0C:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/4d75d68a-6710-3f7e-a5ae-2467519e4e7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.160.0/24
172.98.163.0/24
172.98.183.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:dc:9b:d7:e7:98:1a:15:89:6f:4f:d9:a7:6b:90:65:12:54:
62:dd:92:92:bc:8a:0d:e1:15:3b:09:e2:7f:b3:57:c2:d8:74:
7c:d3:d9:b9:13:21:f1:cb:6b:50:c9:e5:55:f8:76:9f:c9:83:
86:45:f6:4c:e9:a6:8e:15:b1:44:ac:49:af:0e:0c:10:23:94:
c2:23:1d:ac:a1:f3:51:76:6a:55:3f:c6:3e:64:43:b0:3c:25:
d5:15:24:39:a8:15:0d:59:82:ba:ed:57:22:23:75:b6:3d:44:
8b:eb:18:02:4b:e3:f2:28:00:b9:91:dc:36:16:9f:41:56:4c:
10:4c:b6:85:6d:57:ba:e5:34:c4:5c:85:38:37:64:16:d9:49:
b1:35:9c:cd:ab:cb:78:3a:d0:5a:ac:be:ce:b9:db:76:86:32:
eb:84:b6:9c:6b:a5:a7:50:a1:c5:4a:f3:de:25:7d:cf:f0:6d:
e5:87:b2:ab:a4:dd:97:82:0c:48:eb:be:ba:94:75:ae:e7:11:
88:bd:37:81:2a:fe:3e:af:d6:6d:15:85:42:45:ac:56:91:fd:
0e:f5:e4:c3:ab:ed:f3:f1:cc:03:7d:db:ae:42:72:fa:8e:20:
48:65:1f:13:e1:3d:28:bc:da:52:44:5d:a3:15:ba:19:68:be:
2f:0a:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:33 2025 by rpki-client