Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8b022c8-5d5c-3258-8a98-87d2e1c23f3c.roa
File: e8b022c8-5d5c-3258-8a98-87d2e1c23f3c.roa (raw, json)
Hash identifier: reqrQo5CG5IHRV3aR3U2OJuJ+1OKl92JQYNcyxune8c=
Subject key identifier: 10:5F:59:E9:17:1C:62:A9:E8:16:02:1C:6B:8B:D7:82:96:B9:3F:3F
Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial: 010D0C9F43285847E44D40F7EE86C5E4627F4440
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8b022c8-5d5c-3258-8a98-87d2e1c23f3c.roa
Signing time: Fri 15 Nov 2024 21:59:55 +0000
ROA not before: Fri 15 Nov 2024 21:59:55 +0000
ROA not after: Thu 13 Feb 2025 21:59:55 +0000
asID: 22191
IP address blocks: 130.45.128.0/17 maxlen: 17
2604:1dc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 15 Nov 2024 23:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e4:4d:40:f7:ee:86:c5:e4:62:7f:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
Validity
Not Before: Nov 15 21:59:55 2024 GMT
Not After : Feb 13 21:59:55 2025 GMT
Subject: CN=cfdb4b73-d977-4ebb-b99f-4db6edaa2789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:c0:3b:f9:cb:61:0f:52:87:5c:ff:ce:06:
23:07:30:d8:1b:9c:33:bf:04:7b:e3:87:34:cd:37:
42:7e:7c:c5:c3:72:aa:62:79:89:26:fd:1a:e2:24:
2a:3a:8b:67:fd:9a:f0:89:a4:ad:3a:df:31:6a:cc:
82:58:62:91:8d:7a:77:9b:9a:06:6b:8b:40:96:02:
c3:a4:7e:12:71:a9:05:7a:cd:19:9c:5d:f1:1d:c6:
ee:28:cd:b2:66:3f:e2:78:40:f9:b4:69:bf:0c:fa:
f5:eb:10:03:e5:56:97:8d:d1:ed:bb:1a:e7:d3:c2:
f3:77:d7:bc:6b:7e:c0:3e:8c:e5:2a:f2:0e:62:14:
71:f3:a3:42:3d:e4:8c:5a:5f:f6:22:de:d6:a8:0f:
c1:18:b8:53:05:d8:57:48:e7:80:04:6a:6c:1e:35:
ce:96:ee:a9:34:bd:68:90:b4:de:c1:68:6d:50:ca:
85:b7:2c:c3:50:c1:bf:51:e5:3d:19:1a:fa:b9:15:
6a:98:72:ec:c7:2f:c4:a9:98:c5:4e:a4:73:e4:b5:
73:0e:54:88:ef:8d:6d:ea:f1:71:9e:86:8b:be:a2:
53:78:8f:d9:51:9d:8c:5d:64:b1:2d:d9:7d:f4:62:
f8:9d:a6:c2:5a:3e:b5:2e:ff:75:ab:88:9b:e8:6a:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:59:E9:17:1C:62:A9:E8:16:02:1C:6B:8B:D7:82:96:B9:3F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8b022c8-5d5c-3258-8a98-87d2e1c23f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
X509v3 Authority Key Identifier:
keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
sbgp-ipAddrBlock: critical
IPv4:
130.45.128.0/17
IPv6:
2604:1dc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:71:c8:01:6b:de:94:3c:04:8b:b0:64:4c:53:c4:df:49:24:
85:b7:ce:d1:8f:5f:8c:56:cd:f8:ba:ba:08:b6:1f:dc:4e:a1:
7d:ab:ba:bb:9b:59:61:cd:39:65:ce:32:bb:a5:4a:59:a1:76:
af:0c:96:25:cc:15:cc:a6:90:88:41:7f:c7:bd:c1:d9:df:bc:
7c:81:f5:c3:65:1c:17:0d:4d:09:3c:dd:11:b5:67:0a:7f:0e:
03:56:d0:ac:0a:b0:dd:e2:10:68:70:ec:2e:f6:56:bd:09:56:
81:3d:d6:12:73:6b:55:96:ce:1e:87:1f:0f:f1:9e:75:89:e8:
db:43:4c:cf:f7:3c:db:53:d6:f6:49:11:51:9e:4b:3d:49:f5:
41:29:95:ef:6f:61:33:32:59:f0:8b:4d:db:9b:5a:48:bc:f7:
04:74:f5:a1:52:ac:d7:f6:ad:9f:60:58:9b:6c:27:5c:46:7e:
ed:11:16:f0:d4:49:7e:69:76:5f:45:b1:48:30:3c:d8:55:b0:
50:5f:0a:cd:98:51:88:46:e3:91:bc:47:77:cb:76:4d:76:52:
b9:a7:c9:18:46:2f:c9:f1:92:b4:e8:08:e1:17:59:19:e9:de:
f0:1a:ec:10:bf:61:e1:cd:22:95:93:a7:2d:88:81:39:be:98:
19:64:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 01:20:23 2024 by rpki-client on console-fra.rpki-client.org