Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aecabead-49a1-3bc6-8edb-5b796499ade2.roa
File: aecabead-49a1-3bc6-8edb-5b796499ade2.roa (raw, json)
Hash identifier: dmcpftmHgOaxxv6TeWVEryictZOSn9sqZX5V8NfVUf0=
Subject key identifier: A1:63:DA:13:F2:E0:CE:46:96:1F:2F:95:9A:2C:87:2F:AA:1A:66:54
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DC8C277F737719EF63CD29480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aecabead-49a1-3bc6-8edb-5b796499ade2.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Fri 02 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 71.168.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:c2:77:f7:37:71:9e:f6:3c:d2:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : May 2 04:00:00 2025 GMT
Subject: CN=b7eb87e6-b4e1-4852-9261-040d97edcf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:85:a0:f9:fb:8c:20:77:dd:f5:f0:b8:bf:
4a:7a:0a:13:c1:05:7e:28:bd:45:01:a5:19:9d:c1:
66:e2:1d:68:81:39:2d:e5:2d:c0:9e:57:d6:d4:97:
ba:03:e3:b6:e6:ed:f4:05:d2:17:f8:54:c7:0e:47:
a0:a5:08:aa:d7:3e:8e:8e:06:ce:0a:23:16:5c:fe:
cf:49:95:af:b5:12:80:0e:6f:e6:a7:39:de:e0:1f:
4b:95:f6:7e:cd:4a:d1:a2:a3:7a:f9:be:6a:eb:69:
1e:64:1f:ef:fe:19:51:ed:da:5f:68:50:2a:03:87:
ca:2e:af:d9:29:69:86:c4:2c:52:c9:d2:53:97:26:
7c:c3:0a:cc:6a:de:07:aa:2b:cc:bc:b7:f3:15:9f:
8e:3a:a3:91:b1:5d:a2:e5:29:f4:66:c2:74:c7:d6:
5d:28:0b:dd:1f:14:28:03:95:fc:e5:00:b0:5b:36:
be:00:23:d4:e1:92:dd:27:1e:66:13:e4:f7:15:79:
0d:96:a3:94:3f:86:2e:8e:59:42:dd:08:8a:c0:47:
14:11:a6:3f:e7:05:de:92:d8:13:10:5a:38:45:ad:
fb:32:b7:82:7d:3a:72:62:32:df:82:28:e7:d6:cd:
7d:02:c0:be:d8:57:08:97:ef:6b:85:11:f2:ce:a7:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:DA:13:F2:E0:CE:46:96:1F:2F:95:9A:2C:87:2F:AA:1A:66:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aecabead-49a1-3bc6-8edb-5b796499ade2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
71.168.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:7d:d2:6f:44:e2:93:6b:73:7a:4c:c7:35:3c:cd:b3:04:7d:
7d:f0:bb:f1:62:7c:f4:66:82:b0:fc:95:91:b2:cd:55:5a:71:
20:ba:95:af:3a:06:4b:ce:b1:bc:78:a7:99:b2:85:e8:b3:de:
a2:c9:90:2f:27:1b:a1:f6:ce:5f:0e:e2:7e:bd:99:b2:85:41:
a5:68:5c:45:17:47:5a:34:38:30:48:e8:bd:cb:d3:68:b4:d5:
b5:41:34:ce:d4:cc:30:e6:1e:28:d5:32:dc:07:df:5c:1f:4c:
f5:ad:2b:37:81:95:f1:98:7a:91:a5:61:5a:ff:77:57:30:7c:
b5:12:b3:d2:03:15:f2:7c:f6:ac:f5:42:70:d2:f1:67:dd:e0:
a6:81:1c:e8:e0:fc:32:43:4a:04:51:13:7f:ba:a8:c2:06:32:
9d:a9:fb:0f:2c:a2:15:cd:33:31:5d:24:49:76:3b:0a:77:cb:
24:e4:f7:2d:7b:86:80:90:06:ee:f7:01:d6:43:5d:ae:8e:5d:
b9:9c:d5:3e:db:3f:24:a4:66:5b:31:2a:5a:10:1e:9c:cb:57:
70:a0:fd:0e:e0:47:8e:89:74:3f:a9:42:14:93:19:d0:2e:9e:
38:4c:16:56:3a:80:e9:42:e1:db:6a:77:49:0d:3e:ab:72:56:
b6:8e:49:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:36 2024 by rpki-client on console-ams.rpki-client.org