Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aab9a971-e840-380c-8bb3-af2226647c3c.roa
File: aab9a971-e840-380c-8bb3-af2226647c3c.roa (raw, json)
Hash identifier: jgZ1tG2immIFK2w1NU+jcRF7xYfmVMqUsU/fseObdH8=
Subject key identifier: 1E:73:16:11:C1:95:ED:B4:3B:F5:D6:D6:63:43:86:FB:C0:64:CB:D5
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D4D8E591BA13EFA4E65174C0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aab9a971-e840-380c-8bb3-af2226647c3c.roa
Signing time: Thu 09 Nov 2023 14:00:20 +0000
ROA not before: Thu 09 Nov 2023 14:00:20 +0000
ROA not after: Wed 07 Feb 2024 14:00:20 +0000
asID: 55293
IP address blocks: 162.212.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d4:d8:e5:91:ba:13:ef:a4:e6:51:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 9 14:00:20 2023 GMT
Not After : Feb 7 14:00:20 2024 GMT
Subject: CN=429d8f8f-d082-4fa4-8b32-ddf2c50d5a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:8c:15:67:9e:a8:fc:ae:52:35:cb:a9:c8:
f5:ce:ca:5e:ca:e0:3c:84:b1:b6:5b:79:4d:4e:22:
8d:dd:d7:1c:cf:8c:4f:38:e1:14:08:7b:e0:86:f1:
42:b9:b4:e9:62:4a:aa:09:7c:4e:11:bb:86:0c:ae:
fb:db:71:ea:36:88:81:01:80:37:b1:b3:dc:ec:b5:
7f:d7:d3:2a:a8:d1:6c:a9:a5:4d:56:bc:2e:9b:8c:
34:c9:6a:0c:7d:d2:64:af:6d:20:7f:ef:8a:d3:8e:
d0:91:39:68:10:8d:f7:0e:54:dd:1e:a9:74:e8:e5:
42:78:60:55:67:3f:2a:32:55:08:70:05:6f:3b:dd:
8f:29:8b:d8:10:bf:4c:c1:30:9a:ae:1d:82:0b:b4:
a1:89:4f:ce:84:4b:3c:41:bc:42:59:14:fd:b6:c3:
2d:8a:12:9c:ff:d5:99:cc:2f:cb:b4:5a:a1:55:c5:
34:7a:3d:f4:37:5f:fb:8b:be:f5:55:f6:50:39:4b:
43:fa:ea:43:ac:19:05:c4:c4:23:81:2a:28:c0:d7:
88:d2:87:c4:67:42:44:28:1d:b4:35:9e:a2:b1:3d:
62:08:49:d1:d9:4f:e0:42:53:99:64:ab:0a:10:b3:
db:2d:68:e3:cd:91:b5:51:9e:9a:83:77:6b:b9:ac:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:73:16:11:C1:95:ED:B4:3B:F5:D6:D6:63:43:86:FB:C0:64:CB:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/aab9a971-e840-380c-8bb3-af2226647c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
162.212.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:59:c7:b5:a6:68:b3:4f:a4:b9:58:e5:ad:43:73:42:e9:6c:
5e:66:aa:c7:3b:28:c3:32:11:25:cd:24:ba:11:b7:56:41:36:
0b:e0:30:91:04:88:66:ba:92:86:ae:20:64:04:a2:c5:22:20:
0c:4c:df:3a:d8:f7:2b:e7:5f:94:7a:d3:64:a9:5b:17:51:2d:
a9:63:74:57:43:fd:88:9a:5e:c8:50:36:2e:60:ef:04:ae:0b:
85:da:26:bd:f8:91:89:b5:22:9b:9f:18:70:88:a7:d8:6a:84:
c8:9c:3c:d4:33:43:d7:0e:3d:5a:5b:be:35:5d:92:1e:d3:d9:
e4:01:af:da:63:ca:5a:26:a7:cd:87:5d:fb:f7:9f:3f:2c:1f:
f4:f6:f4:05:f6:0e:0c:aa:b4:f0:d4:7d:d2:c9:b0:fe:48:4a:
3f:80:c9:d8:bf:c4:13:5f:d7:aa:88:62:73:5a:96:3f:85:49:
0b:44:e6:d5:a1:72:65:de:3e:25:e2:2a:a2:cf:23:ed:b6:48:
58:fe:db:d7:97:cd:aa:ae:ca:9f:ed:f5:9e:e8:96:00:34:0f:
ff:81:72:74:a5:7e:4e:4c:65:ee:85:aa:1a:72:59:a8:ed:42:
9e:00:bd:b8:9c:88:1b:4f:3e:a2:6b:6b:9d:4b:41:58:1c:71:
7e:9a:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:17 2024 by rpki-client on console-ams.rpki-client.org