Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/a6ff34ec-9823-3a4f-9e5a-8c2291311209.roa
File: a6ff34ec-9823-3a4f-9e5a-8c2291311209.roa (raw, json)
Hash identifier: w/PCA7cCgqicZfeXkvhDusUVoaQAESzH9p6t/CziYoY=
Subject key identifier: ED:62:9F:96:D6:3B:F9:18:12:35:EF:CB:45:B1:58:ED:9B:A8:00:20
Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial: 010D0C9F4328584126BFEFAB32CDBCB62FF96600
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/a6ff34ec-9823-3a4f-9e5a-8c2291311209.roa
Signing time: Wed 08 Mar 2023 19:34:09 +0000
ROA not before: Wed 08 Mar 2023 19:34:09 +0000
ROA not after: Tue 10 Jun 2025 04:00:00 +0000
asID: 0
IP address blocks: 69.80.227.0/24 maxlen: 24
128.254.185.0/24 maxlen: 24
128.254.187.0/24 maxlen: 24
2602:fbca::/36 maxlen: 36
2602:fbd0::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:26:bf:ef:ab:32:cd:bc:b6:2f:f9:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Validity
Not Before: Mar 8 19:34:09 2023 GMT
Not After : Jun 10 04:00:00 2025 GMT
Subject: CN=4c47493e-6ec8-4bf2-bc0a-69f1efd1ac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:ce:94:9e:1f:7a:58:bd:b0:7e:ae:f2:4a:
58:05:51:eb:10:70:c9:be:02:78:7f:e4:bf:3b:65:
93:2c:f4:e1:fd:b3:78:0a:57:c3:61:6f:65:b3:36:
d7:26:8f:61:ae:21:cb:8f:80:b3:0b:3e:4e:3a:e9:
0e:2a:1e:94:14:47:e4:21:4b:44:da:39:2b:85:1b:
41:d9:7d:73:61:4e:4f:78:f0:7c:ec:d3:eb:fa:b1:
2d:70:30:4a:42:d6:3d:4f:e0:c4:48:78:74:7d:99:
f9:0d:97:03:c6:a9:e1:88:4b:f6:82:d6:1c:1c:38:
42:fc:7e:6d:88:6c:26:8d:85:4e:68:81:cd:d9:22:
59:3b:e1:23:0b:50:18:92:0e:b5:b7:ae:5b:2e:dd:
46:c4:9d:0a:c7:18:71:a4:dc:23:f1:3d:fe:77:ef:
d9:98:a6:40:25:77:48:c9:e2:b3:6e:57:41:09:4c:
01:e3:2c:40:20:86:e9:d8:b0:ff:eb:8f:5e:37:50:
6e:45:d6:6f:c2:e0:21:fe:8f:e4:36:6a:7b:c3:c2:
32:86:eb:0c:7c:2e:fd:9b:30:0c:30:98:1e:27:5a:
58:9a:01:4b:cf:f8:9d:b6:b6:17:2c:a3:ef:ae:77:
48:21:5b:60:1d:f4:15:2c:ec:1b:2a:5b:cd:61:b8:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:62:9F:96:D6:3B:F9:18:12:35:EF:CB:45:B1:58:ED:9B:A8:00:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/a6ff34ec-9823-3a4f-9e5a-8c2291311209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
X509v3 Authority Key Identifier:
keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
sbgp-ipAddrBlock: critical
IPv4:
69.80.227.0/24
128.254.185.0/24
128.254.187.0/24
IPv6:
2602:fbca::/36
2602:fbd0::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:8a:bc:17:41:33:0d:17:91:95:db:28:18:8b:cc:ce:2d:d7:
de:61:e3:ca:ed:69:57:f0:4b:0e:b8:18:76:fb:62:13:9c:64:
d6:0e:d0:6f:5b:8a:96:41:1e:29:9c:6d:b9:d5:2e:2a:49:de:
18:a5:6e:27:2c:8e:ba:28:b6:85:e5:f3:35:67:a2:46:85:7c:
1e:63:0d:75:37:a5:a2:54:7a:16:a5:60:d4:ef:b7:76:13:99:
c5:c2:a0:b2:e0:98:fb:e2:a2:9a:67:48:a7:80:96:09:f5:0c:
79:cc:b1:80:45:29:41:0f:99:98:0c:99:a4:39:39:e3:bd:48:
ff:a1:32:04:cb:c1:a9:5b:76:bd:f2:c5:f6:01:a8:b5:91:3f:
f0:2b:6c:fa:9d:a0:61:51:d2:89:ab:6b:73:16:71:26:4d:0a:
40:d2:d3:99:91:66:16:91:b5:60:a0:2d:12:a8:ad:b8:d7:ea:
86:1f:b4:a0:13:56:d7:4f:3b:9f:51:6f:c1:03:e1:fa:5d:60:
1b:76:64:f6:c2:2f:a8:cb:77:4b:d9:a1:88:2a:4c:ce:52:2d:
be:22:22:df:36:d2:da:4e:b1:35:39:3b:6f:96:8c:6e:5c:e4:
db:0f:01:2e:c3:7f:a7:1d:0c:d0:44:02:23:a6:78:e0:ec:cd:
ac:e2:1f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:44 2023 by rpki-client on console-ams.rpki-client.org