Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/58530500-4ed4-3b8a-8caa-a6f1fef7a9c9.roa
File: 58530500-4ed4-3b8a-8caa-a6f1fef7a9c9.roa (raw, json)
Hash identifier: P+avzsIrFM3OUIyAeiuKUq84A6eWcVUkErXr67sq664=
Subject key identifier: 58:98:CF:64:60:C5:32:8F:C6:2E:AB:CC:C0:AD:0C:EF:84:BD:C2:45
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328576D51CC73C042CFC172AF0A45C4
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/58530500-4ed4-3b8a-8caa-a6f1fef7a9c9.roa
Signing time: Sat 13 Jun 2020 18:56:25 +0000
ROA not before: Sat 13 Jun 2020 04:00:00 +0000
ROA not after: Mon 08 Apr 2030 04:00:00 +0000
asID: 8069
IP address blocks: 20.47.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Oct 2022 21:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0a:45:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jun 13 04:00:00 2020 GMT
Not After : Apr 8 04:00:00 2030 GMT
Subject: CN=e3f848a6-1013-4277-8306-5b91d5a62e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:7e:8f:50:d5:2f:87:4c:96:c5:06:2a:27:
5b:aa:7c:79:79:3e:54:8b:52:30:e9:55:ef:1e:82:
f1:be:da:11:ba:c7:a6:4d:43:6e:f2:d1:07:44:8e:
e1:6c:d2:98:5b:0f:19:2d:b8:1d:86:b0:70:69:a4:
32:c7:0a:1c:7f:c8:f3:9c:4c:3d:bb:a8:58:ab:1e:
d5:b9:f5:2a:87:e6:81:dd:f4:12:7a:19:d8:67:9b:
61:85:32:d0:47:f5:5a:ff:68:df:51:61:8a:8d:b8:
b1:e4:b6:56:27:36:93:62:62:36:71:5b:50:06:ca:
0a:6d:20:80:d1:fd:f8:f0:7a:91:34:91:16:80:17:
89:e4:6c:1b:d4:80:4f:6a:0f:d6:bf:32:5e:87:dd:
60:6c:30:6d:8a:5b:5c:c5:05:1e:8c:86:d0:c4:ad:
de:69:4e:41:4f:9c:cd:61:74:5d:05:2c:de:76:d0:
76:92:7b:2c:74:b3:f8:ea:48:ac:d9:48:87:e5:48:
7d:e3:60:75:4b:3b:11:6b:20:ca:92:a3:33:54:b3:
87:ef:c0:62:de:d1:e1:d5:24:87:79:5c:ae:ae:99:
f2:e8:da:92:50:22:98:c4:c1:88:9b:9f:fc:e6:62:
d5:35:31:b3:09:b0:b8:5e:8e:32:71:90:d7:24:ed:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:98:CF:64:60:C5:32:8F:C6:2E:AB:CC:C0:AD:0C:EF:84:BD:C2:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/58530500-4ed4-3b8a-8caa-a6f1fef7a9c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.47.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d9:68:99:e2:0f:72:7d:f3:97:8b:f0:dd:68:4b:d9:3e:24:
5c:05:cb:98:fd:bf:b0:a4:b6:2d:10:1f:79:a9:a2:bf:c6:b1:
16:d6:bc:52:70:7a:6a:6f:18:aa:0d:7a:6b:fb:51:8b:51:d3:
bd:6d:3f:62:68:5c:27:e3:7f:fd:62:57:e8:16:2f:a8:bc:6d:
52:db:6e:c1:7c:67:18:9f:ee:45:a9:84:42:ee:33:a5:56:b0:
2d:93:15:e0:92:65:61:3c:d4:71:cb:e7:d8:62:3d:9b:3a:db:
7a:3c:7e:2e:34:eb:ca:10:47:1e:b5:9b:82:f0:47:7d:13:78:
df:3b:de:4a:59:bd:29:b3:99:e2:13:39:b6:a3:59:af:2d:e0:
45:00:21:ce:c3:7a:79:c6:c5:d0:06:2f:d2:10:56:40:8e:5a:
fc:7f:45:5f:a5:33:e6:bd:9b:dc:52:cf:ad:3d:57:55:4d:89:
ba:ed:dd:6f:e4:5f:c4:73:de:79:b5:db:0b:61:1c:d6:f1:46:
90:34:25:02:74:4e:41:63:b2:7d:9a:19:41:7e:2c:0e:fd:0d:
b6:8a:ad:bb:7c:14:aa:ba:d2:cb:d3:5a:b0:c4:7d:86:22:b6:
9f:5a:d0:ae:83:c4:92:65:51:57:9c:41:ef:44:de:9f:38:79:
84:e5:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org