Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/7601eda0-dbe4-3a50-a77d-16cdac328e8e.roa
File: 7601eda0-dbe4-3a50-a77d-16cdac328e8e.roa (raw, json)
Hash identifier: vaFCXc5vDRY/erS5z379TYLog3FyvVbtlAv+bcFg1+g=
Subject key identifier: 11:CE:15:5A:B0:9B:0B:6C:64:C7:11:3F:6C:1B:FE:D0:A7:2D:79:98
Certificate issuer: /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Certificate serial: 010D0C9F432858474F4B7BBE35DC2346B19B3A80
Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/7601eda0-dbe4-3a50-a77d-16cdac328e8e.roa
Signing time: Mon 23 Sep 2024 13:00:40 +0000
ROA not before: Mon 23 Sep 2024 13:00:40 +0000
ROA not after: Sun 22 Dec 2024 14:00:40 +0000
asID: 53855
IP address blocks: 185.224.64.0/22 maxlen: 24
2602:814:a000::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 30 Oct 2024 18:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:4f:4b:7b:be:35:dc:23:46:b1:9b:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3
Validity
Not Before: Sep 23 13:00:40 2024 GMT
Not After : Dec 22 14:00:40 2024 GMT
Subject: CN=3be9691c-7904-4d94-803b-2d290cda0dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:7a:ee:4d:86:75:bc:5d:63:ea:db:33:5d:
32:48:4e:40:56:94:89:0b:17:1f:c7:2a:25:2b:99:
53:da:fa:b6:a1:db:0d:f4:00:c4:f1:09:c0:e3:0f:
97:87:e0:c9:df:5d:38:af:da:a6:bf:f4:5e:92:0c:
a3:a5:bf:54:49:12:30:08:67:bd:69:aa:ba:b1:37:
0e:83:49:77:c1:80:f1:a9:35:81:74:46:af:41:6f:
1e:70:68:0f:e2:47:ab:35:93:82:fa:1a:dc:01:d5:
3a:4a:d8:87:29:e1:6c:86:3e:6b:7e:b8:bf:fd:0e:
4b:be:41:dd:68:e6:6f:68:da:ee:bb:37:4d:30:77:
c8:5e:09:ba:1f:44:d2:9e:bc:de:7f:ea:23:e4:2c:
89:8f:0d:ea:71:af:68:d0:6c:71:7d:0f:a3:fe:e3:
8f:f4:db:08:2b:e8:2a:b7:30:66:de:76:2b:17:00:
7e:5e:4b:aa:bc:b1:20:8a:eb:ab:3b:6c:08:34:98:
e1:9f:12:41:37:f9:6f:48:71:a5:4a:e2:b3:86:66:
d3:50:dd:b9:36:03:43:87:14:04:ac:be:ce:b9:6b:
a2:5a:52:a6:85:5f:ad:7a:3d:03:0d:2b:79:98:50:
d4:7e:08:b9:ae:03:46:63:9d:89:bb:df:81:f5:04:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:15:5A:B0:9B:0B:6C:64:C7:11:3F:6C:1B:FE:D0:A7:2D:79:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/7601eda0-dbe4-3a50-a77d-16cdac328e8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl
X509v3 Authority Key Identifier:
keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer
sbgp-ipAddrBlock: critical
IPv4:
185.224.64.0/22
IPv6:
2602:814:a000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c7:06:ec:0e:5d:db:b1:8f:2b:ac:ac:9e:16:62:d0:04:fe:
5b:ee:42:27:82:88:44:81:ab:36:60:87:12:01:fc:25:04:23:
e3:e3:1c:f6:10:cf:f2:8c:07:be:f1:96:c5:d0:32:7b:09:95:
e1:05:48:e0:00:55:2f:41:51:5c:6d:26:d4:7e:1b:ca:36:60:
35:7d:c5:e8:14:1f:e8:2d:55:f0:dd:c2:ba:34:80:1d:15:2a:
88:21:bf:ee:fb:71:4b:66:23:77:c2:56:b8:47:df:bd:95:4d:
cf:65:6c:76:d6:0e:e1:23:22:d6:5d:3a:ad:dc:73:c2:30:73:
fb:1e:00:f8:69:4b:a0:df:6f:e1:b7:e6:5e:0a:3c:96:76:d7:
52:47:97:40:7a:e5:ee:fa:e7:33:f2:dc:59:30:f5:ce:95:9d:
bb:5c:7b:31:d6:31:4d:97:42:6e:a2:64:c3:a5:c1:40:47:ae:
26:a5:c5:a0:c8:0a:ff:5f:22:bd:6c:e4:29:2b:6f:1c:d5:2c:
3e:7a:51:9b:59:99:64:ab:26:84:d8:3d:73:d5:eb:65:f9:a5:
67:76:87:46:c3:3c:e8:47:39:ca:d8:40:97:9d:80:d1:d0:23:
0f:43:a7:72:91:db:96:ee:00:6c:33:41:b8:03:02:1b:2f:ae:
34:bc:2d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 19:53:35 2024 by rpki-client on console-fra.rpki-client.org