Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f366211a-dc6c-3e32-a79c-32a66a2dc5c6.roa
File: f366211a-dc6c-3e32-a79c-32a66a2dc5c6.roa (raw, json)
Hash identifier: QICvJoazlwPRfu6utK7Q4GQ6TjgXTQfQ7y2TNr/a8Hc=
Subject key identifier: 6D:EB:4D:7E:18:AE:1B:45:E5:DD:2C:6D:8A:98:5D:A0:66:18:4A:32
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F432858476E01032E01D3C0D21B1BE8C0
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f366211a-dc6c-3e32-a79c-32a66a2dc5c6.roa
Signing time: Fri 04 Oct 2024 13:00:42 +0000
ROA not before: Fri 04 Oct 2024 13:00:42 +0000
ROA not after: Thu 02 Jan 2025 14:00:42 +0000
asID: 49600
IP address blocks: 206.212.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 15:42:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6e:01:03:2e:01:d3:c0:d2:1b:1b:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Oct 4 13:00:42 2024 GMT
Not After : Jan 2 14:00:42 2025 GMT
Subject: CN=7ec13a6b-a982-4c14-8304-d72d6ab5f4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2d:a9:43:80:a8:08:50:68:d2:2c:b9:11:7a:
83:b7:fb:eb:a5:e8:4a:bb:5a:5e:01:30:8a:a1:80:
5e:d8:71:00:00:f3:6c:92:25:f9:80:a6:fb:24:17:
2b:fe:06:24:53:2a:dc:ba:9e:42:54:23:0d:7f:86:
e8:82:d5:2c:3c:c8:6a:fc:20:49:ae:e8:34:ef:4a:
1f:b0:f3:f9:23:f0:87:e6:19:c3:9f:fc:d2:03:aa:
6a:36:74:bb:98:bb:3a:8f:57:21:23:91:1f:a1:17:
71:29:01:15:9e:55:24:ea:3d:64:73:62:38:5c:3c:
6d:30:79:36:5d:c3:63:80:74:95:15:2f:7e:d4:61:
de:0b:73:6c:df:e1:de:14:cb:ae:da:a2:f9:d5:bc:
95:b4:70:41:e4:1d:66:2d:ed:a9:67:01:a5:cc:3b:
44:b2:aa:b9:c5:39:7a:a4:9a:b1:11:88:c9:51:ae:
6c:79:1a:81:5d:2d:0a:dc:bc:6a:e3:f3:c1:b0:bf:
fb:d2:03:84:e1:d5:b0:a9:cf:e9:f0:3c:c6:87:f4:
dd:04:17:7d:dc:4a:a4:eb:5d:50:22:6c:71:f4:30:
1c:9f:5e:ba:d5:14:16:85:60:16:38:7e:8e:18:e3:
4b:37:49:25:e3:ac:15:aa:37:e9:1b:a4:d4:1c:a1:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:4D:7E:18:AE:1B:45:E5:DD:2C:6D:8A:98:5D:A0:66:18:4A:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/f366211a-dc6c-3e32-a79c-32a66a2dc5c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.212.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:d0:79:37:71:49:57:b5:55:7c:c8:7d:a6:88:62:2f:d0:85:
0d:17:aa:b6:81:56:21:51:6d:36:10:a1:78:53:d6:4d:98:75:
0d:80:a2:97:1d:eb:a4:48:fc:84:15:ef:0f:c4:01:ca:66:a4:
6d:14:c5:b8:3d:c2:70:0f:45:74:96:2d:e3:61:5e:d9:95:32:
89:39:ad:07:76:c4:d9:c0:22:bd:d3:35:d8:cf:f6:ca:16:34:
ab:0c:ef:3c:28:d0:d6:52:47:94:5f:b2:68:7b:d2:06:94:ad:
cb:57:46:97:47:e0:6f:53:fc:d1:4c:d4:79:07:92:10:0c:cd:
0a:0a:43:43:70:c2:e8:8b:d9:30:0a:78:83:42:71:15:53:4d:
94:2d:b8:46:96:f2:eb:cc:17:6b:0a:dd:d4:84:68:d3:2e:cf:
f1:4b:cd:3f:8b:20:b6:cd:ed:f7:03:70:e4:b7:c1:21:47:d3:
12:9d:c9:c5:85:9e:4c:30:0c:a0:29:b2:15:87:9b:82:c5:f2:
f2:5d:4b:37:62:47:61:8f:d2:25:c5:db:5c:75:40:2d:9b:57:
95:05:5e:5e:65:c6:75:3b:c8:d2:85:02:1d:fb:84:e4:4f:67:
aa:bb:7a:b0:27:95:e5:aa:b0:24:24:b3:b1:40:c5:ea:f9:a3:
85:e7:d2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:49 2024 by rpki-client on console-ams.rpki-client.org