Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a8829aec-4a7a-3843-a3e9-bbeb23b0a557.roa
File: a8829aec-4a7a-3843-a3e9-bbeb23b0a557.roa (raw, json)
Hash identifier: 1AtCD0GvqrpofT+I+/4VtVP3pao5cyuSMWfWGEG6ne0=
Subject key identifier: 04:91:9A:C6:DD:E8:D3:36:F8:55:BB:A9:F5:8E:C8:6B:07:CE:94:DD
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285840F16F939E586731695559D7F0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a8829aec-4a7a-3843-a3e9-bbeb23b0a557.roa
Signing time: Tue 18 May 2021 13:36:10 +0000
ROA not before: Tue 18 May 2021 13:36:10 +0000
ROA not after: Thu 22 May 2025 04:00:00 +0000
asID: 1239
IP address blocks: 172.98.160.0/24 maxlen: 24
172.98.163.0/24 maxlen: 24
172.98.183.0/24 maxlen: 24
172.98.188.0/24 maxlen: 24
172.98.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 12:42:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:f1:6f:93:9e:58:67:31:69:55:59:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: May 18 13:36:10 2021 GMT
Not After : May 22 04:00:00 2025 GMT
Subject: CN=b50bbfe4-9b73-4fc1-aac2-90a2f852ca17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:36:b7:93:44:4e:b5:90:ee:c4:58:8d:c3:
8f:2d:4d:42:2b:5a:c2:a2:bf:a9:f5:c5:86:29:a9:
7d:af:41:31:83:4f:8a:b6:51:32:a9:c5:4b:39:84:
6d:bf:6d:dd:53:52:3b:2d:7b:0b:1b:8e:27:21:45:
6b:8b:42:6e:b6:ed:61:00:d0:d3:ee:7f:78:9f:41:
62:45:f2:fd:16:2d:81:d8:84:98:44:be:3c:13:1d:
ae:7c:08:b5:4e:e0:6a:03:f0:f8:43:bb:ff:b5:5d:
a4:39:0a:bb:c4:c5:7e:66:6d:96:9c:13:ea:cb:2a:
55:b4:4d:2a:ff:d3:8f:3d:03:c4:ba:21:0d:27:c9:
eb:2d:0a:e5:b1:6f:fa:36:ec:88:6b:27:16:00:48:
ac:70:97:e8:59:38:7d:f3:3f:77:f7:11:d1:51:00:
48:26:c2:d4:9d:c5:2b:0b:7a:a6:59:ec:97:3e:2c:
ff:47:a1:5e:d0:3a:ca:2d:f9:08:a1:4e:1c:64:26:
a2:f5:2e:35:05:38:9c:4e:f8:8e:c9:d6:9e:60:92:
5d:c0:7a:ff:22:e2:8f:bb:01:0b:8f:76:f4:6b:4f:
83:6f:c7:56:d7:04:90:3f:b9:10:0a:f3:b8:40:4c:
a1:24:7f:9a:cd:63:37:4d:8b:df:9c:7f:9b:fb:1b:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:9A:C6:DD:E8:D3:36:F8:55:BB:A9:F5:8E:C8:6B:07:CE:94:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a8829aec-4a7a-3843-a3e9-bbeb23b0a557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.160.0/24
172.98.163.0/24
172.98.183.0/24
172.98.188.0/24
172.98.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:9f:2a:b7:64:35:4f:f2:2f:70:e7:0e:d3:95:29:95:43:0c:
fe:f7:cc:0b:10:27:86:01:e1:6e:58:60:f5:81:21:c5:4c:26:
78:4a:66:7e:bc:67:85:52:28:18:33:47:96:52:ca:2d:59:b8:
43:a2:a1:3b:73:c5:17:3a:2a:8d:36:36:fd:cf:fa:08:fa:4f:
fe:50:f7:ca:35:60:da:c0:e3:e5:28:67:9e:84:ea:d1:9e:94:
bb:d6:d8:10:14:57:0a:d6:e1:05:5d:53:bb:9e:ad:de:cb:db:
3f:16:4c:1a:9a:8f:24:e3:b1:5b:f0:c1:b4:2c:be:96:85:84:
64:3c:10:ee:08:e6:68:d2:7e:ff:4a:b0:fc:64:16:73:0b:30:
4b:08:d8:1b:29:15:fb:04:8c:dd:b9:6e:9a:d6:e8:ba:c5:ca:
61:05:06:ae:01:0f:35:b9:10:03:b4:7a:ab:dc:82:62:0d:f3:
75:e5:88:2f:88:b6:67:f1:3c:83:31:bf:c3:3d:5b:2f:fb:70:
72:b9:ce:e7:56:cb:dc:e2:92:4b:6c:4a:bd:7e:62:8d:e4:14:
9e:ae:1a:91:c0:c1:17:65:5f:48:ec:da:a6:42:38:c6:66:06:
70:97:49:07:1e:37:12:f2:91:ba:81:08:57:27:1e:09:e3:5c:
ea:3f:8b:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:08 2024 by rpki-client on console-fra.rpki-client.org