Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f330544-da0c-3a57-9e9a-de85d4ce5df1.roa
File: 9f330544-da0c-3a57-9e9a-de85d4ce5df1.roa (raw, json)
Hash identifier: rB7S0kI5XYWC1g+Xc6cJb7HRp5gGIQda3WBZ2legsFQ=
Subject key identifier: A9:72:F3:8C:62:8D:63:92:FF:32:0E:5C:AE:F1:14:EF:76:44:C5:F1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583AAE5D30CFD35C6B76DCBF13E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f330544-da0c-3a57-9e9a-de85d4ce5df1.roa
Signing time: Fri 23 Jul 2021 04:00:00 +0000
ROA not before: Fri 23 Jul 2021 04:00:00 +0000
ROA not after: Tue 23 Jul 2024 04:00:00 +0000
asID: 14717
IP address blocks: 65.249.132.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 19:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:ae:5d:30:cf:d3:5c:6b:76:dc:bf:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jul 23 04:00:00 2021 GMT
Not After : Jul 23 04:00:00 2024 GMT
Subject: CN=243475c6-0659-47b1-8722-65084684a2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:03:06:d3:fc:2c:e3:6b:16:44:41:60:da:
04:be:6d:24:ff:59:88:79:87:97:9c:d9:52:a8:bc:
ff:29:d8:4f:36:b7:35:ec:b8:79:89:b4:cb:c8:74:
5d:fb:2a:91:66:21:95:ea:d6:db:b2:6a:3e:4e:a1:
88:7c:2e:9b:e0:a3:c9:95:5c:e0:35:81:3b:77:9e:
fa:3a:00:f6:df:8e:11:ca:01:59:b4:1a:4a:2f:82:
91:7a:40:db:dc:6f:9c:cd:d4:5c:63:c2:85:c4:df:
d0:47:a4:7f:cf:7b:a5:98:68:8f:a5:92:bf:0f:ee:
08:1b:c6:6e:8d:dd:ca:12:f1:83:1b:c2:53:94:87:
84:e5:87:d3:35:f8:14:6e:bd:37:1c:2a:7f:ef:90:
3a:9b:c0:b2:3e:6d:42:04:60:65:67:1b:1f:51:fa:
95:49:8c:3b:b2:70:bd:5d:d9:db:2d:12:5e:7c:b5:
7d:e7:c6:5d:37:7d:25:9d:25:1b:86:c6:ad:1a:9e:
b3:4a:75:54:72:b6:4e:39:01:73:04:b6:d2:8e:9d:
c7:e2:fd:07:b1:c0:10:90:e9:8f:20:00:09:d8:69:
f9:38:41:15:81:87:cd:4a:a7:f6:54:19:3a:b7:15:
08:3c:a8:af:e0:0b:6e:ef:2d:85:ad:e2:24:9b:b5:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:72:F3:8C:62:8D:63:92:FF:32:0E:5C:AE:F1:14:EF:76:44:C5:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9f330544-da0c-3a57-9e9a-de85d4ce5df1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
65.249.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:39:82:d3:6a:c4:57:bd:8f:10:9f:28:db:83:c9:b1:82:a4:
19:5e:d9:7f:2d:0f:fa:8b:3d:44:72:8e:de:23:32:55:01:06:
a4:d3:04:2f:ca:3f:dd:cb:3c:23:04:e2:b0:9c:ac:76:5b:69:
92:59:86:a1:77:cf:6f:6a:f9:d8:52:d3:28:80:b2:9f:d8:73:
51:c0:92:46:5a:9c:e0:ca:b9:6f:f2:e5:0d:af:51:c8:84:66:
ac:06:91:79:ec:64:37:c7:5a:f9:02:e9:d1:c7:fb:ac:5b:0f:
62:be:07:5c:5a:bd:c7:1f:4a:20:bd:51:2b:4b:d1:7b:d7:b0:
9b:db:e6:dd:5d:e4:db:a3:66:2d:0e:58:9d:f3:44:c0:b3:a3:
3b:c2:da:89:91:c7:31:29:c8:d2:e4:99:93:f2:1a:c2:b0:7a:
3a:39:af:94:49:49:bc:a2:83:ea:e1:de:14:4d:22:e4:d0:74:
fe:4c:48:19:e0:2b:8d:9b:2e:c8:fb:bb:bf:f4:48:57:ac:d2:
bc:86:47:77:ef:db:c9:5e:3a:5b:bf:75:ea:7f:ca:76:8b:1f:
1d:40:ba:38:8a:33:f3:b3:dc:93:68:05:16:66:ec:8e:38:bd:
d0:75:21:53:95:fe:83:cc:55:d4:dd:85:dd:72:00:a3:82:e6:
d3:93:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:43 2024 by rpki-client on console-fra.rpki-client.org