Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/51098c3d-b26a-3a86-a6fd-408e9bbf8591.roa
File: 51098c3d-b26a-3a86-a6fd-408e9bbf8591.roa (raw, json)
Hash identifier: b4rP9Cld6tKycacpAqE6Aamd6MSbxL/5R//DCJhwaOY=
Subject key identifier: 8D:F7:23:B4:30:30:58:21:5D:5A:24:2D:3E:AC:B7:50:DF:86:EB:8C
Certificate issuer: /CN=bf199120-727f-4e3f-bb44-8136224777e0
Certificate serial: 010D0C9F4328583B4E13F04B4C84932E5713DC00
Authority key identifier: E7:5D:2A:3B:AE:64:3D:38:0F:62:5D:33:61:15:39:70:E5:F6:58:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/51098c3d-b26a-3a86-a6fd-408e9bbf8591.roa
Signing time: Wed 21 Apr 2021 04:00:00 +0000
ROA not before: Wed 21 Apr 2021 04:00:00 +0000
ROA not after: Sat 22 Dec 2029 05:00:00 +0000
asID: 7018
IP address blocks: 23.169.208.0/24 maxlen: 24
66.187.8.0/24 maxlen: 24
66.187.9.0/24 maxlen: 24
66.187.10.0/24 maxlen: 24
66.187.11.0/24 maxlen: 24
2606:bc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 14 Apr 2023 21:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:4e:13:f0:4b:4c:84:93:2e:57:13:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf199120-727f-4e3f-bb44-8136224777e0
Validity
Not Before: Apr 21 04:00:00 2021 GMT
Not After : Dec 22 05:00:00 2029 GMT
Subject: CN=31f5f570-b782-42d8-bc0b-ba8366a9c616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:49:31:2c:65:a2:70:a4:b7:98:62:ab:84:
8c:b8:01:61:b6:76:44:b4:81:c1:13:e7:6c:26:a1:
7b:07:27:df:84:b5:4e:61:c9:a2:c6:47:a2:8a:8e:
92:93:c3:23:8f:e9:57:d2:ec:75:54:c9:28:85:ae:
a0:87:e9:a8:e8:cd:e1:d9:1b:08:5a:61:3d:12:44:
b6:77:df:ca:e2:09:44:de:ef:61:34:c3:fb:4d:15:
2d:2b:28:e6:93:d2:a8:bc:8c:00:fa:04:c7:b4:39:
63:e8:24:59:e2:c0:b5:d2:33:5f:26:f4:6e:e3:05:
2b:40:18:e6:a1:ba:b4:08:e2:cf:fc:65:56:e0:f2:
07:58:0f:0b:df:c2:dc:2e:37:80:10:85:69:35:e6:
71:e1:f1:61:de:68:5a:74:5b:62:dd:bb:cd:a7:c0:
fe:f3:f2:6a:83:03:cc:1c:bd:14:74:9c:5f:e2:f0:
78:a2:c4:47:ea:68:fb:64:48:04:1a:22:1a:ef:9f:
1c:a2:98:58:e3:7c:77:af:9a:c4:61:78:19:86:c9:
83:f7:7e:e4:4e:03:4d:cc:ad:f0:11:b5:f8:21:8e:
b3:31:4e:ec:bf:29:52:a6:6c:dc:bb:e9:38:16:3c:
0e:4d:65:a7:15:96:e0:83:be:34:d4:49:0a:1a:32:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F7:23:B4:30:30:58:21:5D:5A:24:2D:3E:AC:B7:50:DF:86:EB:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/51098c3d-b26a-3a86-a6fd-408e9bbf8591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/bf199120-727f-4e3f-bb44-8136224777e0.crl
X509v3 Authority Key Identifier:
keyid:E7:5D:2A:3B:AE:64:3D:38:0F:62:5D:33:61:15:39:70:E5:F6:58:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.208.0/24
66.187.8.0/22
IPv6:
2606:bc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:4a:9c:ec:2c:32:28:65:c5:bd:ea:35:78:ec:00:ce:5f:a8:
37:35:d1:07:ad:94:75:e8:90:0a:80:81:3a:2a:d3:b8:1d:01:
7e:af:94:1b:22:d9:38:4b:52:7d:80:b6:4b:b7:28:57:90:34:
84:cb:e6:cf:63:52:b8:22:e1:a5:2c:c3:e8:fa:6e:90:3f:1f:
c9:4b:69:62:0b:9e:a1:5e:ca:84:64:b9:67:c6:8e:c5:08:fe:
1a:fd:95:19:b2:53:d7:69:71:3e:77:73:32:dd:4a:8f:11:a0:
9a:f7:c2:67:f9:8f:c8:99:90:c3:f0:6e:c4:e5:17:00:e2:49:
16:05:79:80:ab:f0:c7:0c:d6:dd:8f:22:d2:a3:67:a9:ba:d3:
8a:c6:a2:ef:93:98:3c:2b:f0:0a:d5:02:80:b9:9d:b2:ce:7a:
58:e1:7b:7b:c7:71:13:df:dd:dd:4c:fc:00:08:3d:33:70:2b:
cb:f3:42:68:b2:a5:3f:1f:d8:ae:23:5d:00:37:d5:82:52:0c:
94:81:cd:b1:fd:be:59:14:58:ef:41:d6:ee:cf:81:ed:90:fa:
75:f3:07:0a:47:b3:0b:2d:95:7d:75:7d:4d:29:b6:aa:50:30:
f8:ee:89:39:07:dc:76:a6:db:8a:7b:93:f0:0b:22:ef:a8:06:
43:5e:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:33 2024 by rpki-client on console-ams.rpki-client.org