Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/868e8c9d-a763-305a-ae47-08c421c99c59.roa
File: 868e8c9d-a763-305a-ae47-08c421c99c59.roa (raw, json)
Hash identifier: wLT/Z+Cag9Pt/WDMq9fOikBU6cIprBAGORWXVodsArs=
Subject key identifier: 65:95:03:8B:F2:36:C8:8B:1A:F9:8F:58:5F:0E:99:90:02:F0:6C:14
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DDC4566E2B21172AC39B0CE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/868e8c9d-a763-305a-ae47-08c421c99c59.roa
Signing time: Tue 10 May 2022 12:00:00 +0000
ROA not before: Tue 10 May 2022 12:00:00 +0000
ROA not after: Fri 09 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 70.17.0.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:dc:45:66:e2:b2:11:72:ac:39:b0:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 10 12:00:00 2022 GMT
Not After : May 9 04:00:00 2025 GMT
Subject: CN=111ab26e-287f-411e-aa46-057b22447b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:af:ea:63:84:84:51:d8:f7:ed:9d:1c:aa:
8e:9b:a9:2f:f4:f3:2d:30:60:32:dd:c1:dd:c5:6e:
21:8a:eb:aa:b2:35:b0:ac:6d:2d:53:09:b8:70:e7:
72:df:b8:eb:d5:b6:a1:ce:f2:e3:37:88:9d:f2:bb:
e9:55:a5:70:3f:33:b9:0e:6a:0e:b3:2c:7c:83:66:
02:da:ea:b0:a1:5e:ca:cf:18:21:69:ce:0a:68:07:
1f:26:93:ce:7f:e4:a7:d8:13:79:33:23:7b:99:87:
7e:5d:76:54:8d:dc:f0:c7:00:96:fa:ac:54:82:0c:
b2:4f:02:d1:e8:e5:a3:42:70:40:12:7c:d3:ef:26:
9a:8e:29:a5:47:49:b0:9e:a1:05:01:cc:6b:0d:ae:
58:2b:d4:15:6a:35:8e:87:60:75:61:9f:37:b7:24:
64:f6:12:d8:30:95:31:7e:ba:37:6e:b9:eb:23:bc:
bb:80:d5:40:5d:8f:d8:03:fe:d3:fc:4f:1f:12:f6:
a2:61:ef:05:0f:86:a1:3b:13:b3:df:10:ed:2a:e2:
fa:39:d3:a8:7e:54:a3:88:c9:34:eb:09:cf:8b:03:
7c:90:ad:7d:10:8f:54:e1:eb:cb:55:51:f1:f7:a0:
97:c4:23:51:5f:37:ff:1a:44:7f:c9:fb:ce:19:0f:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:03:8B:F2:36:C8:8B:1A:F9:8F:58:5F:0E:99:90:02:F0:6C:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/868e8c9d-a763-305a-ae47-08c421c99c59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
70.17.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:af:1c:82:bd:0c:0e:17:5e:56:60:a1:ec:ea:c7:0e:b5:cd:
eb:2a:31:59:f7:40:66:0c:6f:ee:d8:6d:4d:b0:3b:84:15:60:
ee:46:89:a1:a7:dc:8b:43:59:52:1a:d7:a6:2d:e3:01:7e:67:
01:d7:ab:5f:1d:f5:9e:04:c8:2c:d3:d2:ad:d9:0f:f2:bc:96:
d3:24:5f:e2:87:ee:ce:d0:a9:6e:e5:fc:6b:5a:ef:35:3e:14:
8d:ee:6b:c8:11:49:ae:f4:e7:f3:ad:fe:a8:62:37:9b:f9:4d:
dd:ed:33:90:80:f8:ed:02:e5:49:3c:64:42:ce:44:77:62:59:
f5:2b:44:e6:fa:35:de:ab:71:42:bd:bf:df:26:f1:6a:a5:00:
2a:a7:5e:1d:2c:78:23:50:31:07:0e:b3:3d:24:9d:60:13:17:
a8:26:ee:75:98:d1:a0:b5:ec:12:8f:ed:45:4a:b5:9c:08:b6:
59:24:00:80:45:89:27:4c:88:d9:16:21:59:04:77:12:92:31:
94:76:bc:ce:eb:5b:90:ad:5a:cb:76:66:a2:bb:ee:5e:84:36:
8a:68:e2:ef:44:26:49:39:05:c0:1e:52:95:e9:93:84:c0:2a:
9a:ba:b7:f0:83:e5:89:19:94:cb:e6:58:3a:ff:f6:f0:21:58:
69:7f:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:43 2024 by rpki-client on console-fra.rpki-client.org