Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bc63375-4372-31bb-936b-45b6c3ea689a.roa
File: 4bc63375-4372-31bb-936b-45b6c3ea689a.roa (raw, json)
Hash identifier: dVs+W6n4eR48ok+DSlPF3y32Zf/DM3QueIxoHGl3CL8=
Subject key identifier: 34:9F:07:AF:D6:E9:13:D5:DB:A9:BA:3D:4F:88:89:92:C9:85:2E:13
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583F0731BE8246E209476FB38180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bc63375-4372-31bb-936b-45b6c3ea689a.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Sun 24 Aug 2025 04:00:00 +0000
asID: 701
IP address blocks: 68.238.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 05 Dec 2023 19:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:07:31:be:82:46:e2:09:47:6f:b3:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Aug 24 04:00:00 2025 GMT
Subject: CN=086b7665-b54e-4440-8dc0-c797217d8e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bf:40:ea:ac:05:27:d6:fe:c7:f4:5b:96:af:
6a:c8:87:a0:2e:d6:8b:84:08:b3:0f:7d:98:3f:04:
44:4d:46:39:1d:cf:4a:60:69:d6:2f:bd:ee:36:c1:
01:cc:af:0d:c8:50:97:13:30:d7:58:ef:7e:47:9e:
70:a7:f1:5f:35:7f:ce:62:2a:af:3d:44:2d:98:cc:
b9:2b:7d:af:86:91:9f:91:51:3c:e7:59:fc:58:2d:
f5:af:7b:93:c0:54:19:ff:7f:8f:33:8a:3f:08:0c:
5c:7c:06:d6:1c:2d:2c:4c:d7:a3:1a:3c:73:2d:62:
42:7c:48:fa:0f:82:38:68:41:44:38:9b:b8:e2:0d:
9e:94:ea:a2:c3:fd:79:75:f0:e0:81:e2:89:3c:f9:
4e:73:36:ac:4a:14:f2:29:f1:c1:aa:7c:1b:32:a2:
08:ca:df:0e:b0:1d:03:1f:0b:11:da:87:2d:2f:87:
a1:bc:c0:46:7d:ea:45:b9:1b:18:fe:1c:4a:62:9a:
fd:a6:89:1a:2e:8a:02:12:11:4c:e5:a0:9b:06:13:
bd:43:c8:11:f4:fd:44:99:d1:1b:87:86:9c:6d:8e:
04:a0:e6:17:1a:52:48:59:9f:7f:b2:5d:20:69:87:
60:48:f4:b1:16:a0:33:b7:4b:4a:c3:a7:7f:89:fc:
df:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9F:07:AF:D6:E9:13:D5:DB:A9:BA:3D:4F:88:89:92:C9:85:2E:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bc63375-4372-31bb-936b-45b6c3ea689a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.238.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:0f:32:62:84:90:53:96:38:29:25:fe:b7:45:c4:8c:28:53:
36:46:15:ab:83:bb:68:65:92:f9:0b:2c:3b:d0:0c:b5:47:ba:
03:80:7d:9d:fc:6b:76:23:f4:c0:ee:6b:bf:4f:3f:9e:28:9c:
e8:6d:86:f1:b4:35:2f:2c:4b:c5:2e:8a:52:a7:e2:1b:d9:5b:
a8:40:78:50:8e:0f:fb:d3:19:ef:b9:4b:32:85:46:28:ac:eb:
13:96:7f:d6:01:81:20:97:39:f2:08:f7:a5:96:be:d7:c3:db:
b3:8e:b7:43:18:99:11:50:ec:6d:12:3d:28:11:d0:23:36:65:
5c:45:42:03:41:7a:2f:e6:48:4c:48:7c:a8:3b:e7:1b:32:57:
80:f1:cf:68:a7:20:3f:d5:28:5c:34:ce:59:86:72:18:33:59:
50:c6:67:97:d5:92:99:4f:68:07:28:46:0c:b7:24:eb:15:74:
8e:9c:04:d1:6c:af:79:45:22:c7:60:7f:e0:70:78:ef:8b:b6:
a2:cb:89:ac:bf:f2:79:c7:de:ed:57:38:b6:7e:eb:41:24:09:
9b:6e:20:90:fb:1e:08:36:4e:00:5e:ab:73:f0:3d:d9:2c:55:
70:54:32:59:57:97:d7:75:16:24:20:56:57:ec:e7:99:3c:50:
f6:40:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:32 2024 by rpki-client on console-ams.rpki-client.org