Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/9a0c5843-3da8-36b7-af50-9ff850d40169.roa
File: 9a0c5843-3da8-36b7-af50-9ff850d40169.roa (raw, json)
Hash identifier: 6dCpvJoQL8zWKRIwjN1gNtwu3KupB1Fbmofi/mRtU8M=
Subject key identifier: BA:89:13:07:CC:23:E9:6D:11:2D:FF:AF:03:37:62:CF:28:F5:E6:20
Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial: 010D0C9F43285846F93B112DEEAA451DA91F33C0
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/9a0c5843-3da8-36b7-af50-9ff850d40169.roa
Signing time: Fri 23 Aug 2024 17:08:18 +0000
ROA not before: Fri 23 Aug 2024 17:08:18 +0000
ROA not after: Thu 21 Nov 2024 18:08:18 +0000
asID: 43260
IP address blocks: 141.195.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 16:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f9:3b:11:2d:ee:aa:45:1d:a9:1f:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Validity
Not Before: Aug 23 17:08:18 2024 GMT
Not After : Nov 21 18:08:18 2024 GMT
Subject: CN=f05f4a32-bf71-4e6d-b997-d624d88cf0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:45:00:37:55:a1:2b:90:83:1f:82:d0:2c:
99:4c:88:86:92:d3:b9:6e:b8:ff:98:e0:24:d0:3b:
2e:c8:b7:e2:71:62:db:65:1e:b7:dc:c4:ab:ae:96:
bd:46:f2:41:a8:0b:0a:b0:35:15:d4:dc:9f:1d:bb:
0e:d5:bc:8d:41:3d:2d:3f:74:78:6f:e7:c4:77:3c:
5e:d8:6d:43:9c:e5:6e:4c:73:b8:a8:a3:da:bb:f7:
bd:2d:38:a0:a9:b0:ec:53:c6:93:cf:f1:47:40:89:
e8:5a:3b:e2:6d:5b:eb:c7:26:28:56:47:aa:f2:63:
6f:30:f5:0f:a6:3e:a9:45:3d:03:d6:98:e2:d1:42:
41:8b:77:ce:9a:7e:f6:aa:81:d9:59:29:c8:9c:ba:
bc:62:50:57:e0:a3:ce:9b:40:62:5d:38:f0:43:14:
7a:c4:20:df:9e:77:7a:dd:97:6e:27:7a:cf:01:74:
e8:7a:be:c5:f7:1c:92:7b:b8:a8:f4:9f:d1:f4:30:
17:f4:d4:94:3d:4f:d8:94:c7:f8:2c:af:28:57:14:
d8:5b:f0:88:25:c2:31:26:b8:78:8a:ae:51:0e:d2:
87:27:82:ce:18:30:8c:70:aa:d1:d8:e4:5b:d6:b6:
77:11:bc:1e:d2:09:0d:0f:06:25:6c:35:ca:c5:ba:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:89:13:07:CC:23:E9:6D:11:2D:FF:AF:03:37:62:CF:28:F5:E6:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/9a0c5843-3da8-36b7-af50-9ff850d40169.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl
X509v3 Authority Key Identifier:
keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
sbgp-ipAddrBlock: critical
IPv4:
141.195.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e2:f2:4a:4b:2e:d4:1c:6a:14:06:08:b3:a7:06:88:4a:3c:
e2:06:69:b5:8d:72:99:00:1c:29:fd:59:1e:14:db:bc:db:02:
57:72:c8:0d:ae:9e:15:18:ab:ef:97:0f:4c:93:04:4f:5b:32:
22:90:4d:30:72:06:4b:97:3c:89:3f:fc:8f:be:cd:47:1c:42:
80:d0:6c:5d:f4:85:57:36:65:52:9c:57:9f:0e:17:30:98:c5:
ce:e8:60:f6:cb:c6:cd:56:61:f4:53:41:28:65:88:05:11:92:
91:3c:40:e9:1c:3e:da:55:7b:2d:d1:c8:ec:a7:84:e1:3e:69:
69:ae:1b:53:e0:ff:3f:66:f3:bb:98:26:ac:78:39:2d:63:e3:
c0:6f:c5:61:a8:54:e3:d0:d6:5b:9b:12:d5:9c:e8:5d:f7:e8:
fc:51:fb:92:cf:40:28:3a:3b:6b:8b:ed:41:80:1e:75:c3:00:
0c:35:ad:1d:7a:19:ef:4d:a2:cf:88:ae:d3:ea:a9:25:97:ef:
1d:8f:83:31:7d:09:cc:b9:4d:ae:60:60:a1:91:9c:b6:aa:94:
00:a6:bc:58:ef:31:1f:55:16:6a:16:2c:2f:b7:61:c9:7b:3a:
ae:0d:b6:ef:32:9b:a9:60:c0:6f:00:29:d3:b7:b3:64:2a:cc:
68:c1:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 18:39:40 2024 by rpki-client on console-fra.rpki-client.org