Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bd0ac5d5-1482-30eb-beca-5d7ae2ca421f.roa
File: bd0ac5d5-1482-30eb-beca-5d7ae2ca421f.roa (raw, json)
Hash identifier: vDZq9j7FEj36LzXX5ZfNt8Y78hU7itwjHJpT8h1Odgs=
Subject key identifier: BF:72:89:3B:FA:15:14:4A:FE:0E:0A:78:27:CF:A6:12:E0:3D:84:00
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D63E211CA2DA8CDE57E27388
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bd0ac5d5-1482-30eb-beca-5d7ae2ca421f.roa
Signing time: Fri 10 Nov 2023 02:00:15 +0000
ROA not before: Fri 10 Nov 2023 02:00:15 +0000
ROA not after: Thu 08 Feb 2024 02:00:15 +0000
asID: 55293
IP address blocks: 70.32.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d6:3e:21:1c:a2:da:8c:de:57:e2:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 10 02:00:15 2023 GMT
Not After : Feb 8 02:00:15 2024 GMT
Subject: CN=6dfb6f0b-fc7d-4e93-8863-874405fd8007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:7d:2d:4f:6a:9b:4c:bf:13:c7:0f:85:40:
5b:22:4a:80:3d:32:42:a4:98:96:f6:e8:20:eb:aa:
36:5a:b0:b0:ce:1e:a6:13:c0:12:5f:d2:f8:76:2f:
c6:25:a4:8f:c1:3d:57:b7:71:08:3c:4f:7f:ad:9e:
51:8f:57:f2:62:76:40:b8:84:e6:58:60:93:71:3a:
d3:dd:72:85:61:6a:91:98:41:ff:45:3d:de:fa:1e:
83:f8:05:eb:65:54:4b:1b:6f:a3:b0:9d:1d:b7:45:
f6:b1:05:50:09:42:f1:96:8a:2c:81:8d:19:84:b7:
c0:26:6f:fa:8c:08:dc:42:9f:47:f0:ac:70:04:46:
b8:a0:a4:e1:20:4a:bd:c8:2d:a9:b4:da:35:7c:d2:
63:a4:9d:ca:b1:70:5a:79:4b:48:c8:04:a4:75:ff:
1e:dc:ce:fa:9c:db:42:78:8f:24:85:e7:89:2c:20:
c1:4f:b2:ea:b0:38:fc:9f:36:73:df:83:5a:11:50:
5e:e5:44:d9:8c:00:0e:e3:eb:16:f4:9d:82:d8:db:
13:31:65:ee:2d:1d:c4:9d:72:68:63:3a:40:a4:9d:
a9:b7:e7:43:21:cc:34:bc:84:50:e4:fe:19:32:93:
da:03:8f:06:82:65:e7:6f:ec:9b:3c:c2:8c:29:22:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:89:3B:FA:15:14:4A:FE:0E:0A:78:27:CF:A6:12:E0:3D:84:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/bd0ac5d5-1482-30eb-beca-5d7ae2ca421f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:87:29:18:84:3c:0e:a1:87:56:77:13:ce:59:85:62:3d:c3:
30:3c:cf:35:88:fd:36:3b:0a:37:24:b0:8c:28:3c:22:bc:81:
e0:f6:0d:1a:54:47:c1:10:f9:12:f3:a3:bd:01:25:aa:2a:8c:
76:cc:86:f4:fb:54:08:cd:1c:d5:c0:5b:47:22:8a:ac:17:88:
cb:40:4f:b7:0b:45:49:2b:6f:f0:77:84:78:29:fc:42:e8:ed:
2b:f2:63:c2:17:ca:9f:6b:bc:45:42:b8:6e:b2:32:bd:f3:5b:
0e:a7:52:50:cf:34:1f:67:bb:6d:77:23:b8:87:d9:aa:76:13:
a7:c5:e4:bf:97:6e:e6:db:f6:67:54:72:b4:71:41:3e:75:12:
81:ef:4d:fe:48:bf:f9:01:19:44:8b:6e:fb:8a:17:f4:3a:06:
37:78:e5:1d:8a:d9:2d:83:a7:e6:50:2c:b2:49:ce:bc:72:91:
9d:e9:a0:f4:87:83:60:b7:21:57:fb:85:ee:3c:11:f1:f2:8f:
7c:fe:8f:80:c4:90:14:ee:c1:07:cd:ff:7a:dd:71:43:e6:c1:
25:e8:a4:ed:86:95:68:24:03:76:68:e1:24:4d:80:c9:be:6a:
f0:22:24:1a:e2:9c:24:90:fd:a5:7a:a0:20:61:ab:4d:b3:58:
55:89:aa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org