Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/0fb1324d-9b9c-386f-85d1-48b749033df0.roa
File: 0fb1324d-9b9c-386f-85d1-48b749033df0.roa (raw, json)
Hash identifier: 9kCS7tcRsYLA89fnK3f4Q3uyJwF+JYrV6QfefBntJ3Y=
Subject key identifier: 23:90:59:E4:F4:27:43:6C:D3:45:D3:F0:2C:26:B8:77:12:E7:DD:C6
Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial: 010D0C9F432858411357D5141ACB1FEF4F535800
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/0fb1324d-9b9c-386f-85d1-48b749033df0.roa
Signing time: Wed 01 Mar 2023 19:23:24 +0000
ROA not before: Wed 01 Mar 2023 19:23:24 +0000
ROA not after: Tue 03 Jun 2025 04:00:00 +0000
asID: 14618
IP address blocks: 198.145.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Mar 2023 21:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:13:57:d5:14:1a:cb:1f:ef:4f:53:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Validity
Not Before: Mar 1 19:23:24 2023 GMT
Not After : Jun 3 04:00:00 2025 GMT
Subject: CN=340cce83-9c05-4275-bd55-dc9d3c8fa8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:9a:ed:10:86:54:3b:06:c3:33:e1:c1:c2:
7e:45:ac:a0:b7:2a:2a:2c:c5:82:77:4b:ce:8f:a4:
ad:6f:88:31:7b:7c:dd:c9:eb:a3:95:a3:21:2e:85:
f8:59:e7:35:d2:42:60:bb:27:c1:df:20:6a:ca:fb:
60:c9:43:a9:04:a8:58:61:ba:32:13:32:51:1f:6c:
38:84:b2:65:c7:e6:79:cc:d0:4a:ec:b5:1f:99:58:
03:b8:56:9c:c3:c2:8c:63:a3:2c:86:21:a3:04:1b:
9f:ca:86:19:63:de:87:b8:2f:28:9b:be:81:b3:2d:
79:8c:ad:dd:12:5c:f6:cb:5c:52:5f:c1:4a:75:9b:
82:04:67:43:7d:f2:90:18:62:8c:65:78:01:0d:ff:
fa:29:7b:eb:38:73:5a:06:67:52:58:00:51:ee:ab:
56:d4:c5:8c:79:8e:19:e1:2d:19:26:f9:07:85:ac:
d0:4e:c6:46:f9:2e:d2:03:68:a2:c8:11:72:c6:df:
54:7d:ca:03:02:f3:97:51:16:21:77:44:82:34:9b:
37:91:52:2a:74:da:c4:8b:b7:81:90:04:4c:a3:d7:
76:8a:8b:03:5a:96:08:a9:c3:46:7a:5b:65:b7:8f:
18:12:36:72:5e:44:3a:46:34:cb:f7:9f:13:59:fb:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:90:59:E4:F4:27:43:6C:D3:45:D3:F0:2C:26:B8:77:12:E7:DD:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/0fb1324d-9b9c-386f-85d1-48b749033df0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
X509v3 Authority Key Identifier:
keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:bd:5e:31:0e:06:c7:ed:9a:5f:3a:96:be:d2:a6:e4:92:55:
56:4e:53:37:0c:d8:d1:d4:fc:bd:16:7a:c1:42:0e:a4:fa:4f:
3a:5e:64:2f:83:44:b5:de:9a:e7:8b:59:6d:86:8f:52:59:0b:
98:93:3d:1b:7b:56:f8:87:bc:03:67:66:5c:3c:56:45:45:13:
6c:af:8f:d6:23:4a:36:ab:c5:c8:f8:07:5e:d4:97:c3:7b:fb:
5e:46:2e:cc:06:04:7e:ec:d7:f7:5a:3b:56:5e:44:46:1f:11:
00:e7:d9:7b:a4:70:88:98:6a:fc:74:90:c1:2f:32:6f:37:07:
c3:d9:89:da:a0:81:e3:c1:ac:50:01:1a:fd:96:0a:b9:53:91:
db:88:5a:84:39:9a:24:14:4a:3c:14:d3:b3:59:b9:8f:5a:61:
8b:7a:05:cc:4d:b2:2b:98:f4:ab:94:e0:6b:56:a3:88:d1:c2:
92:6f:88:fa:1d:64:4e:bd:6a:e2:e1:20:5c:c4:56:db:88:c2:
cc:6e:b8:bc:34:6d:b7:1c:81:99:ce:0b:ae:e7:be:db:9b:86:
5f:86:4b:08:ad:71:c4:d8:e0:5a:e3:dd:f2:47:d4:bc:23:3f:
e4:dd:5b:cf:5f:5e:33:25:99:35:71:9c:ea:3b:26:8e:9a:10:
d0:5e:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org