Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d2a8581e-eb73-34e7-82cf-7f1a0cca37dc.roa
File: d2a8581e-eb73-34e7-82cf-7f1a0cca37dc.roa (raw, json)
Hash identifier: EnE0yRivZuD+jm0/bxsy7b3egOebM4t4v9uU+wXsdO4=
Subject key identifier: A2:E8:36:1F:CD:1F:76:FE:12:24:99:BB:7C:E8:33:4F:59:22:32:D2
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F4328583E563FF82E3855F29DCA2974C0
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d2a8581e-eb73-34e7-82cf-7f1a0cca37dc.roa
Signing time: Wed 22 Jun 2022 12:00:00 +0000
ROA not before: Wed 22 Jun 2022 12:00:00 +0000
ROA not after: Wed 04 Apr 2029 04:00:00 +0000
asID: 5645
IP address blocks: 167.88.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 05 Sep 2024 19:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:56:3f:f8:2e:38:55:f2:9d:ca:29:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Jun 22 12:00:00 2022 GMT
Not After : Apr 4 04:00:00 2029 GMT
Subject: CN=43b49518-4fe3-49eb-beee-2e8b617e0fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:b1:7f:1c:c4:02:98:51:51:94:6e:62:bb:
1d:23:31:29:f6:3f:cf:2d:7a:02:96:a3:35:52:5a:
43:ee:72:89:6a:ad:c3:d4:b1:0b:c2:59:d1:73:26:
31:fc:e8:7f:7c:f2:a2:49:52:48:5e:37:23:f1:62:
99:81:cf:ca:08:2f:87:f9:26:2b:07:cb:5a:3c:98:
73:6a:c2:09:1f:1c:8a:2d:70:c0:fc:f8:af:eb:d8:
e7:ac:9b:ac:f9:d3:1a:02:fa:80:f3:2e:25:4f:2d:
30:88:3a:84:2e:7d:5f:7e:62:dc:76:34:93:f7:ec:
68:cc:21:15:4a:79:a8:95:56:1c:70:48:e5:e3:45:
f7:0e:16:1b:ab:ad:48:9d:2e:ce:2f:59:5f:25:a6:
24:c1:ec:2e:9b:ed:f6:3f:76:72:87:cd:c5:e1:9b:
11:12:83:ac:c5:d7:94:a2:15:61:14:37:8a:f6:90:
37:39:66:72:29:ea:97:13:48:b1:b3:90:6f:34:2f:
fd:ad:6d:b8:4b:fb:a2:9f:84:a9:a6:5e:81:93:f0:
48:77:2f:6b:5c:38:da:38:00:53:32:30:a9:ad:96:
07:c1:3e:6b:87:65:cf:e8:e4:f1:ce:35:f0:15:0d:
a1:64:3b:47:4f:62:ee:07:f4:05:44:f9:50:b3:4b:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E8:36:1F:CD:1F:76:FE:12:24:99:BB:7C:E8:33:4F:59:22:32:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/d2a8581e-eb73-34e7-82cf-7f1a0cca37dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
167.88.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:07:1a:4f:e2:8f:71:b2:ed:0e:a2:e1:d1:06:b0:c1:e6:d9:
67:63:e0:83:c3:1b:23:9f:66:97:63:3d:dd:af:cf:b3:57:e6:
25:aa:0c:f7:38:65:e2:51:72:ad:69:db:c7:26:9f:60:52:3b:
fa:9c:e0:99:d3:19:05:c1:52:b9:6d:31:b8:43:45:c0:53:85:
6b:df:36:46:54:fc:3d:c2:68:61:cc:d4:76:a4:7d:62:42:95:
58:25:3b:d6:de:29:aa:fc:e4:d2:0b:03:63:98:e9:6c:34:32:
55:55:60:e2:3e:4d:fb:e8:c4:8a:46:35:a2:4f:82:2b:25:c9:
7c:e5:4a:ac:b3:84:18:91:7e:4b:1a:de:ae:aa:cc:bc:ec:cd:
66:70:02:6f:7c:ce:15:79:57:f3:a0:83:47:db:28:5e:34:79:
1e:e9:b9:e4:56:12:c1:23:65:9e:e8:86:52:39:c7:f4:d3:e1:
6f:aa:db:ce:a9:a5:19:24:80:f1:67:58:69:3b:aa:61:57:45:
d2:02:aa:cd:fb:99:38:2e:c8:71:56:7c:14:07:18:5a:33:cd:
fb:d4:0b:ca:51:8d:5d:b8:18:00:bc:e0:88:6d:cc:a0:fe:e1:
aa:88:03:38:84:9d:6e:6e:76:2c:64:ef:88:c6:f8:64:2d:8a:
2e:e3:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org