Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/78b8736a-c18e-3197-bfc6-e56d714314f6.roa
File: 78b8736a-c18e-3197-bfc6-e56d714314f6.roa (raw, json)
Hash identifier: jknKDeI2MfpNPEyN9zHWOLNfvBmSnapGqOthvgA+frQ=
Subject key identifier: 77:07:AF:AF:ED:0B:03:99:EF:B3:33:DB:B3:F7:34:95:9C:14:86:95
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843CDDE1629544DAF1C2E878B80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/78b8736a-c18e-3197-bfc6-e56d714314f6.roa
Signing time: Tue 07 Nov 2023 02:00:16 +0000
ROA not before: Tue 07 Nov 2023 02:00:16 +0000
ROA not after: Mon 05 Feb 2024 02:00:16 +0000
asID: 55293
IP address blocks: 199.195.116.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:cd:de:16:29:54:4d:af:1c:2e:87:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 7 02:00:16 2023 GMT
Not After : Feb 5 02:00:16 2024 GMT
Subject: CN=07ddcd49-c868-4887-87a8-2adcc350cca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:06:c0:c7:fa:25:22:0b:ad:41:ed:2a:2c:ab:
89:b3:a8:bf:ba:1d:aa:db:b3:4b:9a:7d:ab:28:84:
ed:6c:0f:05:40:50:db:7e:b4:7f:76:51:21:7b:86:
4b:1d:d5:ff:8c:7a:94:44:a0:ce:c8:d3:a3:2a:99:
db:62:0f:8b:f5:57:db:72:d6:48:d5:9b:4b:82:1e:
14:c9:aa:cb:bb:28:b3:8d:ed:68:c1:ec:d6:8a:3e:
85:4c:cc:fd:c2:a7:7c:d7:22:39:c3:ac:92:0e:d8:
57:57:82:a7:51:64:a7:2f:6b:ad:97:69:72:5a:a1:
c8:8d:29:f8:5d:99:f3:45:92:e5:2b:93:e7:0e:ad:
bc:9d:f7:f1:4d:da:39:7e:55:86:82:28:4f:9d:d4:
e8:bb:f8:0f:25:9c:0c:47:bc:2b:fb:34:79:6e:1b:
b7:94:1e:90:ff:59:a0:99:04:34:d1:a0:ff:62:25:
f5:bc:4e:ba:9b:eb:a6:5d:35:d5:d7:bc:2b:8e:be:
63:90:ec:52:0e:05:58:08:bc:83:88:40:1f:30:40:
16:f6:de:0d:11:a6:1c:6b:16:84:d4:eb:0b:3e:89:
13:c1:69:ee:00:ee:b4:1a:c4:6d:29:56:da:b8:b9:
63:fe:a4:28:de:7e:a8:0f:a3:3e:37:71:d7:ff:15:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:07:AF:AF:ED:0B:03:99:EF:B3:33:DB:B3:F7:34:95:9C:14:86:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/78b8736a-c18e-3197-bfc6-e56d714314f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
199.195.116.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:78:e2:aa:e2:92:02:c2:03:c5:c9:2d:97:8a:9f:2f:62:f1:
92:89:74:60:26:52:c5:06:c7:61:24:dc:00:9b:5c:5b:5d:51:
10:99:c3:8f:8f:e7:aa:4a:22:c5:b3:07:0c:81:ef:b6:9c:e1:
80:f4:ab:02:10:a9:d2:57:0e:38:31:62:dd:ea:6c:cd:17:f2:
d2:cf:49:33:84:5e:b6:50:3d:02:1d:40:be:39:b9:94:41:cf:
f4:a0:31:bf:6a:b2:41:c9:d4:e5:9e:e6:ee:51:2f:de:da:e5:
e3:e2:9c:8d:e8:1e:f1:11:8c:5f:b2:bc:23:6f:4b:ee:ad:77:
de:71:6e:5b:7a:ef:42:f7:b8:d0:22:51:f1:62:18:d7:e0:85:
f4:92:b8:a6:88:b0:c9:56:8b:99:a9:39:3a:9a:1b:b9:ba:e5:
62:79:74:51:5b:cc:65:45:81:e6:3a:10:54:9e:f7:60:61:da:
83:b1:aa:58:ce:2d:c9:c7:31:5a:f5:f2:35:ed:7b:30:4d:a2:
42:ea:0b:55:48:e2:46:be:0b:9f:e6:3e:fb:68:8e:01:2a:c1:
50:f0:19:b4:42:14:cd:53:ad:02:3a:5d:ab:19:f5:8a:6f:ea:
1a:84:52:a8:99:87:0d:eb:95:28:5b:bf:a1:5a:0d:62:a5:44:
af:b5:82:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:17 2024 by rpki-client on console-ams.rpki-client.org