Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/87517aea-6096-3cb5-83eb-f839a456b637.roa
File: 87517aea-6096-3cb5-83eb-f839a456b637.roa (raw, json)
Hash identifier: xKmPQklCW6bfzRcsY9kYw3wIm/f6SHiUjGDX6elKK3o=
Subject key identifier: F3:7D:62:ED:2F:FE:85:71:5F:B0:DB:66:CA:F0:65:EB:38:D7:07:78
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F4328584166528BE9158A024148286AE0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/87517aea-6096-3cb5-83eb-f839a456b637.roa
Signing time: Thu 02 Mar 2023 19:48:12 +0000
ROA not before: Thu 02 Mar 2023 19:48:12 +0000
ROA not after: Sat 03 Jul 2027 04:00:00 +0000
asID: 3507
IP address blocks: 67.214.180.0/24 maxlen: 24
67.214.179.0/24 maxlen: 24
162.255.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 17:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:66:52:8b:e9:15:8a:02:41:48:28:6a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Mar 2 19:48:12 2023 GMT
Not After : Jul 3 04:00:00 2027 GMT
Subject: CN=3cfe6b4c-b431-443e-96b6-444cd0a10237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:c4:a5:b8:f3:80:f0:a3:ba:2e:30:b4:b5:
eb:32:35:ce:40:ed:4e:99:51:74:c7:30:ec:75:16:
d1:6d:0c:7c:17:16:0e:09:85:47:fd:f8:40:8a:b5:
ae:03:1f:25:68:d5:23:06:f7:e2:c9:c4:35:07:51:
eb:3a:bb:ac:1a:28:4e:36:a9:06:20:84:4e:5a:e6:
fb:1d:27:46:fa:65:81:f1:ce:2d:3a:99:c2:ed:2a:
af:1f:f9:58:90:ce:25:16:9c:b3:91:93:fd:32:31:
15:f9:bb:b7:e4:3e:9c:08:90:f8:62:f2:79:5c:93:
1e:23:1a:b0:5e:cb:35:ac:1d:78:8c:60:fb:70:4e:
6d:d7:df:77:28:3f:b7:21:ca:e3:2a:33:b1:3d:6f:
fa:3f:be:19:6d:4a:f6:11:08:67:60:08:ee:04:29:
33:05:14:1a:2c:20:fb:1c:00:56:9d:19:9f:66:8f:
2d:97:e5:f9:02:a7:4f:13:f1:81:56:f0:9e:7e:01:
83:24:f5:48:fe:6b:3e:60:b7:55:d0:23:8f:a3:c4:
df:ca:17:c4:a5:52:26:1c:75:a7:f1:28:dd:44:f1:
a8:03:5f:88:89:12:80:9c:69:a9:df:8b:5e:4a:e1:
4f:af:ac:1a:07:ac:37:34:f8:96:2d:f7:29:6a:31:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7D:62:ED:2F:FE:85:71:5F:B0:DB:66:CA:F0:65:EB:38:D7:07:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/87517aea-6096-3cb5-83eb-f839a456b637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
67.214.179.0-67.214.180.255
162.255.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:6f:95:4d:97:c4:08:24:3d:92:8e:9e:11:d0:f0:f2:0b:e6:
8e:fa:38:83:4e:55:12:0f:27:67:bb:1a:c1:26:0d:4f:0f:9f:
4f:d8:32:6b:24:4b:36:59:cf:ed:22:63:b9:cc:ed:50:6a:84:
38:26:bd:b4:ec:7a:d2:ee:2b:1c:52:a4:f8:16:ef:88:ed:49:
7f:c4:02:00:97:9d:87:87:04:38:30:23:31:9d:fa:e5:56:11:
bc:52:94:d9:bc:f2:cd:f2:82:8b:9f:6f:49:38:b3:bd:01:b9:
e2:98:c8:3f:84:23:94:97:51:b0:fc:0f:17:be:f6:1a:3e:61:
b8:75:71:68:7f:ea:de:89:62:5e:b8:6d:c3:15:f4:98:2c:d4:
85:d5:b2:77:81:c0:85:81:ef:9c:2a:5c:c1:73:04:0e:c4:40:
45:04:32:3d:75:a5:ba:77:fc:13:f1:bb:c4:b1:07:24:3d:4d:
b8:fe:c7:5e:2a:1b:0c:f7:b1:70:0c:c7:fb:ba:e6:79:5d:fd:
e6:9f:c7:18:64:df:91:35:aa:b1:52:dd:c9:8d:0f:28:6a:4a:
a4:99:de:d7:1c:94:a7:c5:67:19:68:a6:2f:c5:66:e4:ea:2b:
5c:8f:bc:83:c6:dd:0f:9c:f3:1f:15:98:80:cd:06:2f:24:cc:
cb:5d:6b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org