Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/ace7c5c3-e4d6-3cbb-8b7e-66aa75f975aa.roa
File: ace7c5c3-e4d6-3cbb-8b7e-66aa75f975aa.roa (raw, json)
Hash identifier: h7y7jCA0fD5rOJC/RJQb+2Hj2oKwJHqL5q4JAOpO5fQ=
Subject key identifier: 3B:DA:E4:6D:59:CD:83:8E:6B:5E:63:E3:67:85:CA:C9:69:4E:AC:9B
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F432858419C3FAA91A2E6B949EE685020
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/ace7c5c3-e4d6-3cbb-8b7e-66aa75f975aa.roa
Signing time: Thu 06 Apr 2023 18:24:47 +0000
ROA not before: Thu 06 Apr 2023 18:24:47 +0000
ROA not after: Wed 09 Jul 2025 04:00:00 +0000
asID: 164633
IP address blocks: 173.240.128.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:9c:3f:aa:91:a2:e6:b9:49:ee:68:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Apr 6 18:24:47 2023 GMT
Not After : Jul 9 04:00:00 2025 GMT
Subject: CN=1c2e77b7-3172-407d-87b1-e1d2b06a518d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:3c:33:b6:eb:e7:e7:9f:a6:02:08:0c:48:
21:3b:e4:ea:2c:af:a8:cd:8d:5d:85:0a:b5:81:74:
49:38:4f:e7:9c:0e:ea:d6:09:2f:50:4b:0d:11:0d:
9b:9b:23:58:ac:e7:f2:1c:59:d7:c4:96:0e:be:eb:
b6:cb:be:78:e4:a6:d4:c1:7d:8e:e1:dc:52:05:7d:
36:2f:b4:8b:2d:d1:44:e4:50:0e:c3:5b:af:c1:c0:
5d:0e:b1:e5:30:06:85:cf:5b:e6:64:5b:d3:81:0a:
57:1a:16:c3:13:94:65:af:0f:7b:11:a4:1e:be:67:
ab:2f:af:df:24:92:51:2b:ab:28:d0:dd:eb:a6:7b:
1d:ac:99:c0:17:ef:d5:7a:8d:f6:34:69:26:97:38:
c3:69:e7:ab:9e:1f:7b:1c:df:ec:fa:7b:48:41:7a:
45:fe:ba:d9:6d:1f:ad:b9:3e:d0:ac:7e:28:5d:68:
e6:d6:16:c5:a9:0a:66:e8:42:64:b4:a9:7c:87:16:
f7:a3:16:d2:18:b9:40:69:0e:7e:45:4f:db:1d:eb:
0d:77:80:e7:08:2c:99:9e:92:66:09:a9:64:7a:10:
7e:27:9a:1d:9f:57:04:48:c8:dc:99:53:ae:ed:45:
2f:8b:7a:41:ad:29:e0:f6:63:a3:93:a7:7e:0a:39:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:E4:6D:59:CD:83:8E:6B:5E:63:E3:67:85:CA:C9:69:4E:AC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/ace7c5c3-e4d6-3cbb-8b7e-66aa75f975aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
173.240.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:27:22:88:8b:76:26:87:4f:4d:6c:7e:86:07:94:48:23:00:
b1:73:95:3d:2e:65:51:73:50:5f:06:11:1d:28:cb:7c:eb:0b:
b2:c9:07:91:a8:59:31:82:98:c2:74:a5:85:4c:07:b5:bf:83:
1d:49:c7:88:c1:95:11:39:9a:80:4e:4c:d2:73:4d:87:44:00:
20:48:ab:d1:d4:47:4b:56:51:41:88:50:b2:3b:04:c8:aa:d6:
80:7c:45:f2:64:c3:bc:01:24:99:e9:f4:ee:5a:7b:1b:0c:7a:
1e:41:ce:21:1e:da:43:71:c5:66:0e:26:41:dc:ad:83:ee:36:
d2:3a:24:83:3b:5f:04:14:a8:91:aa:97:6e:64:22:3f:1a:bc:
24:71:40:8a:da:56:b4:e4:cc:72:f0:c5:0f:2d:61:18:e1:b6:
93:fd:06:d2:15:c7:fd:21:93:f7:4c:90:c4:b6:66:8e:36:73:
e1:8e:d7:44:3e:94:80:2b:2d:0b:a5:35:f4:98:bb:28:43:bd:
f2:d1:e8:1f:8b:39:e2:1a:23:9c:90:7b:7d:20:fa:3e:a0:74:
23:59:6f:d5:1c:b4:f3:09:5c:8d:c5:0d:f2:47:3c:2f:72:ed:
bb:e3:2b:97:a3:58:4c:72:56:1d:1f:4a:92:1f:18:58:b0:e5:
a9:f4:00:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:48 2023 by rpki-client on console-fra.rpki-client.org