Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3b920c98-c80c-3701-aa38-5ff68cb6d029.roa
File: 3b920c98-c80c-3701-aa38-5ff68cb6d029.roa (raw, json)
Hash identifier: 7r2/YAXwcoDu7j9LWhVDxThwzEuuNpAj9rG2hJ30tn8=
Subject key identifier: BE:E6:C7:F7:E9:75:D4:84:AD:5C:86:BB:A9:4D:44:5D:4B:11:B8:43
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D4D8E5750278A578CE4A7B80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3b920c98-c80c-3701-aa38-5ff68cb6d029.roa
Signing time: Thu 09 Nov 2023 14:00:20 +0000
ROA not before: Thu 09 Nov 2023 14:00:20 +0000
ROA not after: Wed 07 Feb 2024 14:00:20 +0000
asID: 55293
IP address blocks: 170.0.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d4:d8:e5:75:02:78:a5:78:ce:4a:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 9 14:00:20 2023 GMT
Not After : Feb 7 14:00:20 2024 GMT
Subject: CN=2c0364f1-934f-42d2-b8d8-2f1209403a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:9c:77:53:36:97:e1:5a:cc:20:25:18:24:
a9:2e:1d:d9:36:a7:c2:8e:9a:69:17:0c:28:2f:4e:
16:7c:4b:51:54:27:9c:da:b9:b5:bb:ee:59:f6:94:
ca:e7:41:19:53:28:82:aa:5d:d8:ae:57:d1:69:49:
a1:69:ad:94:e3:ef:3b:dc:58:53:53:5b:60:4e:a4:
66:f7:6b:d1:cc:8a:63:66:78:1c:c7:ec:02:7a:39:
75:9e:3e:87:90:26:6b:ee:d2:f6:81:3f:d7:ff:d6:
d0:34:b6:91:39:1d:19:70:0e:06:a6:77:2f:d3:4c:
63:60:6b:bb:19:ac:1f:db:17:7e:8b:1a:1f:33:b5:
4f:15:c1:8e:b9:d6:d7:31:10:9b:31:02:e1:ed:43:
bd:32:ae:c0:22:14:fe:2e:37:d9:99:aa:c8:13:99:
2a:ea:f5:b9:88:5a:04:c5:ce:3a:7c:fc:27:b5:52:
46:fc:fb:3e:bb:7d:41:51:04:80:e7:9f:be:c6:4b:
45:f6:a5:7f:62:84:3f:eb:6e:c1:b8:5b:1e:d6:3f:
99:d3:dc:2a:6d:59:42:ad:81:b7:0b:17:34:6b:a3:
c9:35:5b:7e:76:81:91:8a:51:0f:1a:9d:37:f6:5b:
64:18:c5:10:c2:6f:5a:ca:1d:73:1b:8a:e6:f3:88:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E6:C7:F7:E9:75:D4:84:AD:5C:86:BB:A9:4D:44:5D:4B:11:B8:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3b920c98-c80c-3701-aa38-5ff68cb6d029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
170.0.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:e0:5e:59:ee:49:d2:fa:97:9d:9c:21:c3:5c:b1:d5:d4:4d:
62:b7:58:59:85:87:7b:ba:86:0b:bb:a7:00:02:63:5e:16:b5:
30:36:7c:45:42:a4:18:32:a8:f6:87:51:1d:69:7e:0b:d2:18:
88:82:6a:cb:32:4e:b1:85:5d:a1:d2:c4:dc:86:71:af:9a:dd:
97:55:86:46:a3:b2:08:29:0a:ab:38:f8:a5:ea:9f:ce:bc:8f:
d1:ea:74:bf:aa:51:09:06:80:1c:43:11:12:33:46:70:74:a0:
31:eb:cb:df:8e:e2:53:d0:8e:07:d2:0e:f0:74:02:7a:7a:07:
c6:0b:de:2a:12:65:67:55:5b:e4:35:05:a9:c1:08:3c:4b:c9:
3a:a2:e1:1b:a3:fb:44:f9:4d:87:d8:7b:23:3b:2f:e4:46:be:
ca:c1:51:a4:a1:40:40:01:cf:6c:de:f4:98:55:b2:a1:cf:99:
8e:88:0a:c2:a5:89:a1:6b:ad:a4:59:70:db:77:93:45:73:aa:
a0:b4:39:0c:0d:b9:c7:00:30:7a:59:37:18:d6:a9:02:2f:94:
f5:27:12:5c:6d:fe:1e:37:ce:b2:d5:e0:f0:e4:1d:0f:60:ce:
aa:f6:18:56:79:4f:db:c8:ef:0a:f8:c4:27:82:5b:af:53:95:
16:15:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org