Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/394848ea-8aed-300a-8dc7-68bb62965ab3.roa
File: 394848ea-8aed-300a-8dc7-68bb62965ab3.roa (raw, json)
Hash identifier: mIEOg8iPkoRWvBbgIFZjXXqlwHb8JFveG2mGtt5BTg8=
Subject key identifier: 68:32:20:F5:41:26:8C:DB:F9:81:FB:0A:70:66:58:46:EF:8C:AF:5B
Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Certificate serial: 010D0C9F4328584632BEC610542F41B200A747C0
Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/394848ea-8aed-300a-8dc7-68bb62965ab3.roa
Signing time: Thu 13 Jun 2024 14:47:49 +0000
ROA not before: Thu 13 Jun 2024 14:47:49 +0000
ROA not after: Wed 11 Sep 2024 14:47:49 +0000
asID: 23162
IP address blocks: 128.163.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 00:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:be:c6:10:54:2f:41:b2:00:a7:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Validity
Not Before: Jun 13 14:47:49 2024 GMT
Not After : Sep 11 14:47:49 2024 GMT
Subject: CN=673523ef-4aaf-4eb6-84d9-5453066670c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f1:b0:2f:77:28:31:a7:e4:98:b0:5e:12:1f:
bf:a0:85:53:f0:93:5b:4d:ce:10:fa:de:25:f4:44:
24:97:6c:94:8a:de:8c:38:76:02:5c:ce:38:b7:b9:
33:38:2f:0a:2b:e0:e0:be:55:23:56:9d:35:00:06:
38:9d:ba:23:df:a0:04:d9:7f:ac:42:ff:11:b0:92:
02:d4:3f:ca:a6:58:74:be:37:18:f9:0d:b4:57:b3:
41:74:78:c5:1c:4a:a7:e4:99:1c:22:f6:8f:bd:fe:
18:e6:52:e9:51:b7:b7:d9:20:a1:3e:65:c5:f4:9d:
54:37:87:04:19:dd:b4:ef:91:1b:0b:69:39:ae:b0:
48:92:ee:f3:b8:54:07:7f:93:ef:11:58:5a:bb:47:
81:ba:5a:3b:e1:da:a0:35:cf:02:e2:11:5b:e4:47:
36:18:17:fa:40:a2:ea:e4:72:c2:35:f0:7d:c6:a8:
ce:2a:26:e8:4e:aa:81:a1:c3:d0:10:f5:09:58:cb:
ca:f0:76:ab:a6:a1:04:b9:bf:c6:ab:d6:d3:ad:de:
04:35:5d:03:5b:5e:da:da:4c:ff:f1:ba:7c:0b:e0:
81:d8:76:cb:51:a9:86:f0:66:c9:08:10:20:cd:d3:
91:04:2d:d4:d5:91:3f:17:57:84:56:09:2a:6b:ba:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:32:20:F5:41:26:8C:DB:F9:81:FB:0A:70:66:58:46:EF:8C:AF:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/394848ea-8aed-300a-8dc7-68bb62965ab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl
X509v3 Authority Key Identifier:
keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:c6:5f:ee:f7:d6:9b:42:9e:e4:d2:8e:14:4f:f7:90:0e:a1:
e5:70:7c:fd:c6:cc:33:ab:9f:4b:bb:49:f5:d8:36:2a:bd:6e:
d8:14:48:13:dd:6c:e5:f8:e2:a2:29:25:c0:c4:7c:0c:49:05:
ae:3a:4a:b8:d5:25:96:d6:e1:15:af:a0:f0:49:8b:2f:3f:7b:
b7:ff:a2:da:9a:62:21:34:0a:77:17:16:9a:42:7d:e5:a9:8e:
2e:30:b1:3c:08:e8:00:a6:44:a4:22:39:d0:32:08:1d:09:d1:
b7:3a:5e:7b:5c:ef:2a:d5:de:84:66:08:b5:4f:28:66:98:49:
ab:26:29:4c:b1:e8:b4:9f:63:6e:4e:bf:ed:ab:59:44:8f:36:
9d:7a:06:d5:7e:4e:94:f1:93:aa:2c:ff:14:5e:b4:b3:ad:22:
0c:c7:30:a5:3b:50:41:b7:37:ad:d4:c2:35:4b:4d:19:d8:82:
ed:4a:eb:53:9d:78:70:09:1d:f4:04:de:f1:6a:0c:1c:67:f2:
f9:d4:c6:81:cd:96:0c:58:e8:19:dd:84:a4:41:98:e3:b3:27:
7d:b7:f9:ee:f5:57:c4:7b:05:86:8b:16:34:fe:4a:a4:ed:d8:
89:3f:7b:95:37:e5:07:5e:86:c9:05:f7:30:d2:28:ae:2a:9a:
0d:3e:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 03:32:25 2024 by rpki-client on console-fra.rpki-client.org