Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b66c37d3-0896-39f4-8ded-63f6f9fadd10.roa
File: b66c37d3-0896-39f4-8ded-63f6f9fadd10.roa (raw, json)
Hash identifier: 6I4/xeiuFoiRGDUJ35DPrpI4fRHx0rg7iv5Lx3cVblQ=
Subject key identifier: 38:F5:36:F6:38:14:DC:EB:11:D8:26:32:62:79:18:B8:96:F7:5F:66
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F4328583E1928FE33951C08D996056B00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b66c37d3-0896-39f4-8ded-63f6f9fadd10.roa
Signing time: Wed 14 Apr 2021 18:57:06 +0000
ROA not before: Wed 14 Apr 2021 18:57:06 +0000
ROA not after: Tue 03 Sep 2030 04:00:00 +0000
asID: 11404
IP address blocks: 104.152.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:19:28:fe:33:95:1c:08:d9:96:05:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Apr 14 18:57:06 2021 GMT
Not After : Sep 3 04:00:00 2030 GMT
Subject: CN=5b1abca1-2c6d-49ea-8a08-0927faf232a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:7f:23:b5:aa:8d:a8:52:5d:5b:9d:7e:ee:
c0:de:11:6c:ff:40:1b:52:6c:30:23:6a:ac:b5:f5:
ee:62:b3:8e:8d:5e:83:cb:d0:e5:65:d3:14:c5:09:
cd:3f:f8:a8:b3:4d:9a:2a:81:d8:3f:cd:38:0b:82:
f9:c5:7c:91:4e:79:03:7f:89:19:63:30:14:56:a4:
cf:01:63:67:2e:ed:1a:b0:73:53:49:8a:a6:95:35:
45:21:62:ef:10:43:c3:fb:52:71:db:e4:02:25:99:
10:ff:c8:9a:23:5c:2c:7c:4b:f6:2c:29:c2:66:89:
52:c0:9c:c7:4c:fd:85:5b:a0:df:c2:8a:d4:78:91:
3e:4f:3e:0d:03:1c:dc:a4:1e:65:e3:d1:7d:3c:0f:
0a:c6:e1:72:19:29:81:27:0b:50:5c:47:ec:52:8b:
76:1d:29:77:29:36:7d:d4:0b:16:08:02:71:7a:3e:
a5:a0:3b:a3:b7:ad:b1:e1:58:fe:53:30:83:45:d8:
d3:a9:bd:c2:4b:c5:dd:8c:35:8d:38:ae:3a:c3:c9:
43:9c:5f:8a:93:f9:f5:3c:27:eb:c4:04:21:94:a1:
16:f3:bf:63:f8:ad:ef:7a:40:a6:d0:73:57:02:57:
1b:32:67:e0:43:21:40:0c:ad:37:b5:ab:72:ea:f3:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:36:F6:38:14:DC:EB:11:D8:26:32:62:79:18:B8:96:F7:5F:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/b66c37d3-0896-39f4-8ded-63f6f9fadd10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:3e:7d:7f:65:7c:73:ad:c0:d1:8a:69:54:7f:41:9e:3f:66:
3d:20:73:21:5d:7f:c5:ac:02:f6:1f:ac:73:b8:28:fc:58:02:
3b:cc:a5:fb:f9:d9:6f:c8:d3:4e:c4:c7:53:ea:38:7b:3d:d9:
a1:2c:f2:83:93:e8:e0:d3:40:d7:7a:2d:8e:c1:b2:ca:10:0e:
fd:ae:7e:e8:d8:92:9a:c1:7b:4e:d0:f3:26:06:7b:1a:9c:c6:
df:83:6f:39:e1:ff:08:ff:16:dc:dd:19:b7:ae:c7:67:b4:a0:
d0:4d:44:22:5a:03:c8:9a:f5:3f:e5:c7:e0:31:9e:b8:8e:9e:
bc:95:e6:a8:06:39:5c:70:b6:2c:a4:b2:e4:f2:6d:c4:78:02:
b7:2f:f1:34:7c:77:3e:08:8b:10:86:4c:83:33:ee:ae:22:5b:
14:f4:dc:9e:cb:d2:c4:4a:c4:c1:37:d4:77:62:da:57:cd:25:
1f:29:4d:48:42:36:a3:2d:87:79:bf:bf:f6:f9:b7:ff:bb:9f:
2e:2b:be:77:13:30:b9:09:eb:6a:42:7e:e3:e0:ae:65:9e:95:
ef:e5:5b:16:46:33:61:4b:3b:d8:91:ef:d3:f8:37:72:f9:af:
48:5a:d2:7a:f1:6d:d6:85:38:90:3e:bd:01:ec:ec:da:90:93:
b4:60:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:46 2023 by rpki-client on console-fra.rpki-client.org