Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f42f065b-9854-3149-97fc-13091c579941.roa
File: f42f065b-9854-3149-97fc-13091c579941.roa (raw, json)
Hash identifier: 9/QhYdHvU2xCl1v25YbM4Wzt1b8bpWkxpb65vw7mGFI=
Subject key identifier: F0:7A:21:FE:56:7D:14:2B:EC:A2:7B:1D:7A:71:29:2E:55:4C:76:DD
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285846C9EC7066A8BC519FFFBF2DE0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f42f065b-9854-3149-97fc-13091c579941.roa
Signing time: Tue 06 Aug 2024 18:26:53 +0000
ROA not before: Tue 06 Aug 2024 18:26:53 +0000
ROA not after: Mon 04 Nov 2024 19:26:53 +0000
asID: 13576
IP address blocks: 66.128.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 21:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c9:ec:70:66:a8:bc:51:9f:ff:bf:2d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Aug 6 18:26:53 2024 GMT
Not After : Nov 4 19:26:53 2024 GMT
Subject: CN=58b012a1-7a18-4448-88bc-4a3abaae52de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8a:4a:af:10:57:a2:b5:f2:39:bc:d0:6c:66:
f7:12:eb:e0:0b:a2:00:49:27:2b:1d:05:f9:28:6a:
5c:e1:0b:2d:2e:4d:71:04:12:b4:62:84:9c:2b:ac:
cf:6e:85:7d:82:d7:e3:b1:f9:5b:cc:71:45:fc:0f:
df:75:93:59:52:67:96:9c:dc:ee:e4:59:75:c1:7d:
5a:8f:2b:6d:cc:81:3b:51:99:ff:9c:2b:4a:54:d8:
c1:af:84:0b:df:90:dd:39:8d:1e:ff:61:c0:12:20:
cc:70:cd:6f:15:52:86:7d:14:61:d2:a8:aa:13:a1:
d3:94:57:59:37:bb:13:9e:03:0d:ac:5d:60:9a:d8:
12:09:6b:98:09:d8:a0:9f:eb:1f:f2:f7:e0:de:85:
df:b1:bb:f7:c7:6a:aa:69:f6:22:67:2f:07:2e:8b:
6c:f4:22:4c:24:66:46:49:5b:fa:cb:de:92:a8:76:
65:51:98:87:a3:af:63:b2:7b:c9:4e:5a:6f:72:86:
98:a8:1a:ed:fb:c0:c1:5c:50:a9:d8:ae:7a:0a:56:
50:d9:8a:a8:51:5b:b7:be:fe:2f:11:16:bf:20:8c:
81:ea:bf:01:bb:4c:ad:32:ef:68:5a:d3:33:d3:93:
d9:0c:10:41:70:16:11:aa:65:54:89:f5:c4:33:99:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7A:21:FE:56:7D:14:2B:EC:A2:7B:1D:7A:71:29:2E:55:4C:76:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/f42f065b-9854-3149-97fc-13091c579941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:a7:57:03:35:5e:9d:b0:36:43:a9:db:fe:9c:ba:1b:64:15:
31:5a:db:a1:59:7b:18:5c:ed:c4:1c:3c:c4:8d:bc:7c:4b:e4:
01:cc:47:0c:c3:02:62:92:10:5e:f7:bc:86:73:b1:7d:ec:6a:
06:78:6b:13:36:87:ba:91:85:b2:0b:8f:7b:c6:30:90:97:14:
44:ab:31:bd:17:38:4b:75:68:73:73:90:f8:94:e8:96:28:e1:
37:63:c7:14:dd:cd:cb:64:c2:fb:46:e9:2d:73:d9:2d:0a:74:
6d:2b:f8:4d:a5:5d:bd:83:86:08:45:ff:7c:8d:c0:cd:b6:32:
fc:08:49:97:45:cd:6d:cd:96:7a:6d:2c:4f:a7:90:71:4c:94:
ce:db:9b:13:ca:8c:72:1c:45:39:c8:d6:9d:b4:f5:3e:42:65:
f8:ac:33:5b:25:69:8a:4a:3a:6c:44:99:69:f4:c0:19:69:0d:
70:c9:7e:ff:ed:1f:02:04:40:18:04:b7:5f:1b:87:c7:41:25:
4a:73:d6:c6:92:5f:43:38:fd:ce:7d:f9:df:9e:af:36:4a:e4:
d0:fd:50:e6:27:79:ce:22:be:cf:f4:ff:87:3c:a9:03:2d:2d:
2b:ce:09:8a:df:78:37:63:89:4a:41:7f:0a:43:2e:c5:19:7e:
c2:ea:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 23:21:00 2024 by rpki-client on console-ams.rpki-client.org