Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8cc4cd33-1692-35a8-b095-53149b2b08d3.roa
File: 8cc4cd33-1692-35a8-b095-53149b2b08d3.roa (raw, json)
Hash identifier: cRC/c1dHg0mJdVg69r3jFhPGuWcuuh4tcv4pafotl0o=
Subject key identifier: 30:C5:3F:89:2F:A6:5C:F3:85:FE:88:B1:11:84:59:1F:70:D6:ED:70
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D63E21FB7518BAF74AB2C900
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8cc4cd33-1692-35a8-b095-53149b2b08d3.roa
Signing time: Fri 10 Nov 2023 02:00:15 +0000
ROA not before: Fri 10 Nov 2023 02:00:15 +0000
ROA not after: Thu 08 Feb 2024 02:00:15 +0000
asID: 55293
IP address blocks: 68.66.216.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d6:3e:21:fb:75:18:ba:f7:4a:b2:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 10 02:00:15 2023 GMT
Not After : Feb 8 02:00:15 2024 GMT
Subject: CN=f975b4b2-7eaf-4ae0-aff0-937ab3ee9bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:76:4c:83:32:2f:eb:8d:5f:c0:a8:0a:b0:
f9:c2:fb:0a:59:f5:6d:d5:d4:56:e8:19:71:d1:ea:
d4:ea:01:cd:ec:a6:aa:f1:b8:65:bd:16:5b:50:d3:
77:26:13:cd:c4:b1:b5:04:3d:0f:84:17:f9:53:b6:
d0:eb:a1:17:91:cc:f9:97:0e:c3:48:44:cd:bf:0b:
b0:66:f7:6f:7a:a4:7d:ff:3d:a0:93:78:56:d6:09:
35:f5:6c:dc:66:9a:94:00:3f:44:c5:83:d1:07:a7:
5a:b2:23:56:0e:a6:9d:b1:98:30:0f:04:3d:4e:3c:
2d:60:72:11:b6:6b:d7:01:87:e2:2f:3f:46:8b:a0:
30:d9:95:4c:1e:cb:6b:98:ca:2c:96:af:92:b5:9f:
f9:fc:73:51:a2:a4:9b:cf:3a:6b:51:36:2d:52:12:
e7:4b:c8:7a:d2:3b:87:1b:bd:57:bc:3f:bc:4e:8f:
7c:31:b4:a2:04:be:b8:88:da:41:f4:9b:6c:f6:56:
71:cb:a7:73:6f:3b:6f:cd:31:7c:12:f9:a2:73:47:
92:2b:bd:7f:ae:3a:e6:af:b5:21:3f:53:00:3d:f6:
da:91:4e:b8:82:e9:6d:37:f1:76:1c:fa:8a:ea:1f:
75:cc:ec:77:14:bc:c5:5c:0e:2b:14:15:17:65:5c:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C5:3F:89:2F:A6:5C:F3:85:FE:88:B1:11:84:59:1F:70:D6:ED:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8cc4cd33-1692-35a8-b095-53149b2b08d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:8c:28:93:ec:fb:e6:70:be:af:b9:47:54:a3:01:4e:13:80:
a8:ac:52:ae:7d:bd:a0:6a:1e:48:9a:29:9c:5d:eb:b4:f2:31:
04:cb:82:ef:22:3e:d5:26:30:47:f9:97:bf:a7:d8:e5:77:57:
41:cd:74:d3:70:a2:53:26:39:f7:18:97:4e:53:5d:05:08:02:
8e:66:86:bd:4f:c5:f5:75:a2:61:ab:b9:e5:56:10:1b:bf:de:
94:0d:d8:06:6f:11:3b:c7:39:e1:c4:04:8f:ff:ce:df:18:0a:
30:92:ef:f0:21:08:1c:09:76:7a:e1:4c:d3:95:02:4f:67:07:
1a:a1:af:f8:1d:53:5a:98:3e:0a:96:3e:c7:da:e6:4e:0e:e8:
e7:a1:07:6d:ea:47:ca:b5:fd:34:44:56:69:21:60:cd:77:59:
9f:6b:25:b7:5c:1a:11:8b:9d:d7:5a:a1:55:60:21:42:c1:dc:
0c:ae:c8:d8:df:42:d9:3b:86:58:11:fc:6b:bb:d4:5f:7f:90:
a9:60:f3:40:01:32:47:66:da:9b:9e:e4:c9:d8:20:ec:36:70:
e4:aa:b9:1a:47:58:ba:2d:71:db:86:09:d3:0d:bf:aa:e6:fe:
9a:b5:06:a6:ae:3c:b3:f1:57:55:3a:87:47:e9:85:30:f1:f6:
0f:18:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org