Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/5af240b8-bece-36e6-b2e8-5e5306dfa7c4.roa
File: 5af240b8-bece-36e6-b2e8-5e5306dfa7c4.roa (raw, json)
Hash identifier: TEMdzdAQnjvwkH8K65LvoBnf76hGnPG62wqutXtwswg=
Subject key identifier: C3:E0:CC:9A:50:F1:31:5F:0B:23:DD:55:29:B9:30:50:1C:3A:66:4E
Certificate issuer: /CN=cfdb56e6-0b8f-487f-b55e-b0d93b59cc98
Certificate serial: 010D0C9F4328584625F96C67FAD492551B154A50
Authority key identifier: FA:1D:36:6E:77:B0:25:F2:A0:4B:F9:D2:4A:6D:85:A0:39:DA:CF:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/5af240b8-bece-36e6-b2e8-5e5306dfa7c4.roa
Signing time: Sun 09 Jun 2024 01:00:24 +0000
ROA not before: Sun 09 Jun 2024 01:00:24 +0000
ROA not after: Sat 07 Sep 2024 01:00:24 +0000
asID: 208078
IP address blocks: 192.80.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 04:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:25:f9:6c:67:fa:d4:92:55:1b:15:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb56e6-0b8f-487f-b55e-b0d93b59cc98
Validity
Not Before: Jun 9 01:00:24 2024 GMT
Not After : Sep 7 01:00:24 2024 GMT
Subject: CN=7b7768fc-746b-45d2-b2c4-9ed89bdcf995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:a6:6e:25:42:80:87:ed:20:38:fa:63:64:
64:17:41:cf:c9:e8:2f:4f:3e:90:fb:dc:e1:1a:8a:
8c:e7:36:c7:2f:3a:1d:89:df:f4:a4:6d:2d:ef:4a:
45:d0:85:e7:3c:e7:dc:2d:29:dc:31:fb:06:88:b4:
26:74:3f:55:cf:ed:17:ec:9f:6d:b3:0f:69:ca:8f:
57:e2:7c:1a:5e:98:f8:5f:76:18:c7:1c:1c:10:6e:
0e:64:1d:da:7b:d2:18:4e:98:3d:2e:86:d0:29:c7:
93:be:10:ac:29:04:c5:96:24:5c:73:62:c0:5e:d9:
f3:81:10:54:7f:f5:5c:98:b4:e1:70:1b:c8:50:49:
01:69:e6:fc:1b:f4:2b:9f:27:ad:8b:02:47:d1:8e:
79:02:f4:ea:96:9e:82:e0:a5:16:29:de:22:0b:2f:
c2:10:9d:aa:76:08:68:e9:4d:36:b4:60:da:e4:44:
49:92:51:27:94:30:5a:3c:df:de:59:f6:df:3a:7a:
3e:cb:bb:4c:7b:71:73:cf:b2:17:6f:26:c1:cd:07:
e0:fd:f9:50:35:03:8b:c8:b4:c3:9e:8a:e5:54:1f:
63:a1:66:81:00:47:0a:f1:2d:2e:7b:66:55:6d:5c:
87:a3:31:c9:08:ff:1c:11:b8:39:88:e2:af:c9:4c:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:CC:9A:50:F1:31:5F:0B:23:DD:55:29:B9:30:50:1C:3A:66:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/5af240b8-bece-36e6-b2e8-5e5306dfa7c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.crl
X509v3 Authority Key Identifier:
keyid:FA:1D:36:6E:77:B0:25:F2:A0:4B:F9:D2:4A:6D:85:A0:39:DA:CF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.cer
sbgp-ipAddrBlock: critical
IPv4:
192.80.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:05:e9:3c:b3:cd:78:43:dd:a3:49:1d:e9:1f:7b:a9:ca:e0:
45:80:01:87:68:f3:5d:73:0e:21:1f:f4:0e:0f:07:28:2a:9e:
99:c2:2a:d0:fb:bb:ee:7d:3a:53:c1:4f:cf:cf:30:8e:50:d5:
dc:54:6a:a3:a0:2a:d9:16:02:11:7a:09:37:c8:e4:a3:4a:68:
83:dc:f9:92:32:d0:cf:e6:3a:38:b0:9d:bd:82:1f:d8:ac:b5:
ff:67:cf:f6:7a:7f:45:ef:29:73:df:4d:26:df:47:2f:9a:bf:
c1:a3:34:d7:9c:cc:f4:1c:4d:00:73:a2:70:76:60:80:ec:ab:
6e:f8:2b:f3:3f:6f:c4:f2:67:a8:85:58:c7:11:af:8c:3e:a7:
40:8f:cb:f8:27:2a:b1:23:8b:dd:20:69:e8:bc:3f:a3:3a:cb:
cf:b9:8f:f4:f3:4f:07:e8:71:d7:40:06:28:1b:ef:5c:a9:b6:
66:3d:4c:eb:0c:2c:94:3d:88:87:f6:3d:32:3f:96:8a:1e:4a:
8d:c1:59:d1:e7:d7:01:bf:0a:c4:9d:b1:2b:ad:a7:f0:ec:be:
f9:92:68:10:28:ca:a1:e4:15:e9:b1:c8:14:ca:bf:97:bb:93:
1c:f1:a3:51:36:97:8b:c7:0b:32:0f:eb:d4:d0:06:b2:b9:11:
d9:d3:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 08:12:25 2024 by rpki-client on console-fra.rpki-client.org