Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2c2ef7f4-8163-3426-a451-3f5a27a229c8.roa
File: 2c2ef7f4-8163-3426-a451-3f5a27a229c8.roa (raw, json)
Hash identifier: 0YjnkoKPQVUal4x69Y/37YCHFBAFcGvLIFBv0WhO7J4=
Subject key identifier: C1:BF:9D:EB:32:4A:76:D0:46:12:60:7B:D2:61:C0:07:9D:05:A6:47
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F4328583E1BC8E2D22F3E9CE192690800
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2c2ef7f4-8163-3426-a451-3f5a27a229c8.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 25 May 2028 04:00:00 +0000
asID: 54858
IP address blocks: 199.127.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1b:c8:e2:d2:2f:3e:9c:e1:92:69:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : May 25 04:00:00 2028 GMT
Subject: CN=170a15e4-a699-480b-b6bc-6411d4d9b30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:1c:dc:fd:4d:72:22:55:cf:7e:a0:7a:c2:
00:3d:22:3c:a6:70:8f:c4:87:25:5b:85:87:8c:9f:
ec:1e:62:71:1f:7f:68:f6:db:de:57:e2:99:90:28:
06:dc:a0:f4:d7:38:e5:97:ba:90:e3:b6:8a:fe:41:
03:9a:9f:d6:37:4c:ca:e5:6c:5a:e7:19:96:d5:1d:
26:7a:46:f1:65:41:88:68:53:24:fb:6c:ca:82:91:
58:6d:a0:28:04:11:a8:fa:88:15:25:3a:6a:81:f7:
0c:66:2c:72:08:80:6b:d1:55:98:1d:f4:a5:a1:c6:
6e:66:5c:f3:48:f4:20:b4:a7:f8:74:22:a5:94:12:
0c:e9:50:d5:ce:f6:04:18:9c:6f:da:a9:72:60:0e:
8a:2a:04:70:4f:e9:f9:5c:17:8d:78:01:62:46:7a:
47:2a:c2:2a:f0:e0:61:fc:ca:71:d1:c0:0b:44:88:
69:5d:70:e3:3c:d2:c8:04:e6:ef:0e:d3:1a:da:d4:
28:f7:b9:db:8f:89:ab:69:ef:a8:97:79:48:b5:23:
2e:f6:98:9a:2c:f3:08:f3:cd:37:0e:2b:97:fa:d2:
d1:ff:b5:56:3a:dd:40:f4:f7:a9:1d:45:94:4b:cc:
29:9a:37:97:21:5b:70:5d:ac:82:fa:b5:2a:85:34:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:9D:EB:32:4A:76:D0:46:12:60:7B:D2:61:C0:07:9D:05:A6:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/2c2ef7f4-8163-3426-a451-3f5a27a229c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
199.127.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e0:4f:88:f4:37:50:a9:27:42:3b:54:48:d5:85:39:54:5e:
51:d6:94:d0:97:25:75:16:d7:e1:9f:91:de:96:7b:a0:ad:d3:
95:d3:ff:aa:79:9d:1f:8f:a8:f9:5d:4e:28:5e:b0:22:d0:5d:
fb:31:a7:40:41:48:34:48:23:d0:e4:53:95:88:85:26:ee:99:
4d:7a:e6:cd:c6:4b:ad:a3:66:51:e6:d1:74:a2:d5:33:cc:be:
72:00:bb:33:cf:6a:f0:ea:f0:28:ff:46:e6:1d:e6:3d:c6:9f:
2b:17:2e:1c:71:47:83:13:76:e6:68:0a:87:a9:e1:ec:d3:27:
ed:47:82:62:86:1e:eb:ae:19:3e:5e:0c:1b:aa:ae:9c:e6:c5:
16:c7:06:c9:39:64:d2:d7:00:40:38:8d:63:3b:ae:a7:9f:23:
21:82:c0:db:5a:51:21:ed:ef:0d:41:ea:78:53:37:7a:79:b0:
b3:7d:e0:a2:c3:b8:3e:e9:5a:ee:b2:d5:ff:ef:a3:83:23:5f:
df:e6:08:59:d7:0d:fd:d3:c9:a6:bb:3b:8d:d5:14:07:ce:b4:
6e:98:48:5e:66:54:ce:3e:d9:26:0c:4b:86:40:f8:42:8f:2a:
21:7e:d8:08:d4:4f:67:3e:d8:77:9e:4a:2a:97:e4:05:44:2d:
67:dd:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:35 2024 by rpki-client on console-ams.rpki-client.org