Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/d22cbd12-acf2-3cea-a122-28541db1a232.roa
File: d22cbd12-acf2-3cea-a122-28541db1a232.roa (raw, json)
Hash identifier: U3w7ArWRNZpvRpnSWZAuVN4f/rseLql0QOJn3hg0ldg=
Subject key identifier: 4E:A2:D4:F8:6D:6A:2C:ED:59:41:5B:EC:76:F8:CE:A0:E1:4D:8E:A3
Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial: 010D0C9F432858451E9231FCA1AA87B918BBFB10
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/d22cbd12-acf2-3cea-a122-28541db1a232.roa
Signing time: Wed 06 Mar 2024 16:34:53 +0000
ROA not before: Wed 06 Mar 2024 16:34:53 +0000
ROA not after: Tue 04 Jun 2024 15:34:53 +0000
asID: 834
IP address blocks: 142.214.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 11 Mar 2024 13:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1e:92:31:fc:a1:aa:87:b9:18:bb:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Validity
Not Before: Mar 6 16:34:53 2024 GMT
Not After : Jun 4 15:34:53 2024 GMT
Subject: CN=def957cf-3bed-4a56-b0bd-bf4ca3add9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:4e:e8:0b:75:30:0b:74:7a:a8:3d:a5:8a:
b4:88:8d:42:40:9e:40:64:5a:b2:bb:5e:c3:11:cd:
bf:63:3a:82:df:42:e0:73:97:23:ef:55:34:78:80:
12:70:c3:5a:f9:4f:c6:88:c5:8c:08:18:d4:64:4c:
6b:a5:6c:13:c7:04:a7:fb:98:17:c2:77:4e:23:81:
d0:98:d5:43:39:de:b2:e8:19:b5:09:19:cf:80:af:
b1:98:57:44:84:3d:cf:9a:45:8c:f1:7b:c7:ed:49:
94:52:62:87:6e:c2:9f:fd:9d:86:94:35:ac:a9:6c:
4d:01:3f:65:d8:07:22:98:af:1e:80:c5:9e:db:a7:
6b:bb:13:4e:b7:cb:6b:03:f0:c9:36:4f:ad:09:fa:
8d:2e:d3:12:1b:92:ae:31:96:b2:b1:b5:2b:cf:20:
32:41:1d:d5:88:75:9d:05:33:fd:3d:91:50:ce:2e:
78:7f:a8:44:a8:2f:d0:97:3b:95:41:d1:8e:5c:a4:
4c:71:d6:12:bc:9f:f4:bc:31:ae:e9:38:05:33:ad:
35:15:1f:75:20:c0:a4:82:12:90:ab:5e:d7:f3:ec:
4f:0c:c3:6e:22:26:9c:49:f0:f4:32:0b:07:39:6d:
a2:2e:8d:97:54:0e:ad:a4:0b:42:18:0b:53:35:8a:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:D4:F8:6D:6A:2C:ED:59:41:5B:EC:76:F8:CE:A0:E1:4D:8E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/d22cbd12-acf2-3cea-a122-28541db1a232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
X509v3 Authority Key Identifier:
keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
sbgp-ipAddrBlock: critical
IPv4:
142.214.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e1:8a:5f:e7:55:e8:36:4a:ed:d5:bc:45:e0:48:70:91:05:
16:34:04:c4:5c:f9:d1:37:19:9a:25:fa:be:e3:06:e8:79:a0:
86:49:c2:e4:7e:b1:94:6e:86:f0:44:80:b0:da:88:07:2d:63:
8f:7f:bc:20:6f:10:f6:b5:c5:1d:5a:97:c7:fe:e6:c8:8f:12:
cc:86:ce:24:f0:fe:5f:b2:84:5d:fb:e9:f8:68:f5:0e:46:93:
d6:0f:09:ea:49:c8:9e:5a:77:e0:19:88:e7:c9:35:5f:f6:12:
aa:b5:0c:7c:6d:0d:97:f3:2c:fa:a6:2d:5a:7d:69:6b:50:79:
0f:f2:41:26:93:67:57:a6:75:7a:70:85:69:90:2c:ac:ea:72:
80:0f:b8:58:d1:87:5e:16:4b:23:3f:e5:ac:48:18:b7:90:60:
14:a1:29:eb:1b:e4:be:fc:e3:17:96:ff:5e:a9:0a:ce:e8:24:
dc:c1:ab:dc:bc:ca:36:28:77:fd:ea:87:dd:d3:5f:4f:1e:10:
3a:f3:22:d6:17:a5:c8:d8:f9:0d:47:da:4c:23:db:20:b4:5a:
24:36:2c:f0:62:90:78:97:50:a8:2d:5e:ae:b4:5d:2c:0b:a8:
3b:09:e9:79:f0:fd:7b:a0:35:9f:6e:b2:05:3c:8e:7e:4d:2a:
25:50:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 17:54:47 2024 by rpki-client on console-fra.rpki-client.org