Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/0ea3a3ca-633d-3ae5-8658-53f97ba4b49c.roa
File: 0ea3a3ca-633d-3ae5-8658-53f97ba4b49c.roa (raw, json)
Hash identifier: U8xfQIO8kNXOuyrwd/EhivsCaclHjVD/tIQnmtIz3F8=
Subject key identifier: D4:77:17:53:C3:BF:07:95:1A:54:BC:77:51:40:29:28:C5:15:27:BE
Certificate issuer: /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial: 010D0C9F4328584038DEE7D99752F6559AEA8480
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/0ea3a3ca-633d-3ae5-8658-53f97ba4b49c.roa
Signing time: Tue 13 Dec 2022 14:35:54 +0000
ROA not before: Tue 13 Dec 2022 14:35:54 +0000
ROA not after: Mon 17 Mar 2025 04:00:00 +0000
asID: 205627
IP address blocks: 170.2.128.0/21 maxlen: 23
Validation: Failed, certificate revoked on Wed 29 Mar 2023 08:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:de:e7:d9:97:52:f6:55:9a:ea:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Validity
Not Before: Dec 13 14:35:54 2022 GMT
Not After : Mar 17 04:00:00 2025 GMT
Subject: CN=8d922eba-54e3-4ffa-a915-eaf716546377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:9a:15:43:39:40:f7:c9:09:7a:86:cd:bc:
ab:58:49:45:14:63:11:d7:07:08:ad:de:8a:b6:9f:
05:79:46:0c:e1:d5:20:c0:05:7f:06:9a:b5:c6:46:
52:41:55:dc:ab:e5:30:f8:0e:2f:14:48:8e:be:1c:
58:94:22:46:e8:44:6d:f5:53:d3:bb:e4:2a:2a:0b:
98:9f:de:7e:dc:67:d0:08:b1:95:5f:fa:5a:2a:26:
4a:10:7b:2a:8c:34:d3:a6:14:71:75:03:1b:db:a0:
db:62:88:44:57:e6:ca:08:f6:52:b7:c2:3e:37:75:
02:ba:f6:37:41:b1:5a:8f:35:5c:bf:e6:1d:d6:a2:
90:a7:19:73:46:27:1d:8a:4c:1b:c1:9c:08:dd:9c:
95:1f:74:1c:82:23:a1:6f:f1:28:ab:77:7c:e8:fc:
e9:11:86:ff:59:b2:8e:b1:e4:b7:71:3c:f0:52:8e:
f6:9e:13:a1:de:be:8d:d2:bd:02:1c:6d:ec:93:ac:
e4:94:b0:41:5b:9f:14:37:6f:6f:97:69:3e:c7:a1:
a7:44:83:2e:77:11:65:fe:5c:37:e3:79:3c:94:40:
32:a9:6f:c0:5d:82:1c:d5:66:5f:fc:d1:69:6f:fb:
20:3a:d2:bc:3a:27:3f:8e:b9:11:49:c6:48:c1:98:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:77:17:53:C3:BF:07:95:1A:54:BC:77:51:40:29:28:C5:15:27:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/0ea3a3ca-633d-3ae5-8658-53f97ba4b49c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
X509v3 Authority Key Identifier:
keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
sbgp-ipAddrBlock: critical
IPv4:
170.2.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:41:ab:82:18:d8:63:42:de:89:29:5a:78:61:eb:f7:dd:d6:
a6:c5:d2:4d:d5:13:da:92:a0:91:49:52:ba:09:07:b7:ea:28:
b0:29:c4:1d:b8:c2:3a:0f:64:2a:82:e1:08:93:dd:02:e3:54:
18:df:65:75:bf:d8:a7:2d:77:7b:40:9f:2b:ee:55:28:d7:fa:
72:ba:3c:75:8d:63:58:da:3d:21:7d:b5:ce:b2:fd:e6:70:fc:
2c:2b:05:4a:2f:26:68:fe:0a:01:38:0e:0c:23:6c:38:9f:d2:
32:d0:92:79:e7:10:95:bc:de:73:74:a5:1d:27:4c:85:d6:cd:
5a:90:29:31:fb:1b:f6:ba:fb:a7:e3:ee:56:68:c3:ba:a0:16:
26:fa:18:ff:de:08:92:a8:8f:cf:c1:58:0a:c3:ce:4e:aa:08:
8a:ae:b1:34:38:0a:f7:04:53:a7:30:c9:6c:91:e1:0c:52:8b:
2e:c6:98:77:0a:fd:87:5a:53:a5:41:d7:38:00:44:ee:8c:68:
90:dc:f9:78:ff:c0:18:7d:5e:95:d2:34:0f:2f:8c:ce:4b:c7:
ab:bd:b4:c0:c6:a1:01:d7:98:a7:8a:ec:9f:da:ca:ff:c9:96:
24:ab:b8:9f:30:bd:32:55:f5:b6:48:ce:40:c6:77:ea:29:81:
f8:e4:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org