Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd1c009e-622f-3faf-a683-8599bda5465d.roa
File: bd1c009e-622f-3faf-a683-8599bda5465d.roa (raw, json)
Hash identifier: 5LVcnDiNOv0Xmm8tMW1JANfEOfNN5owYcSk9asROAZw=
Subject key identifier: 61:84:8A:C1:FD:EA:3F:1C:E3:19:E8:A2:56:77:5A:7A:82:97:01:A2
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DC8C51AE94652F1A7FBDCE800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd1c009e-622f-3faf-a683-8599bda5465d.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Fri 02 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 72.95.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:c5:1a:e9:46:52:f1:a7:fb:dc:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : May 2 04:00:00 2025 GMT
Subject: CN=fd8f1fb3-ad16-4538-a386-3948f59077eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:da:55:f0:e9:0b:e6:f3:26:ab:27:85:f9:
6b:d0:77:bb:64:e3:08:4e:7f:e4:ab:54:f3:78:52:
ee:2a:ba:b9:32:27:40:98:a8:56:6c:1e:6f:93:9c:
6c:3c:06:bf:a4:3a:fd:05:b8:86:29:80:d9:db:be:
59:e5:bf:cc:fb:8c:42:49:0c:ba:24:2e:b4:06:ca:
40:45:7d:95:62:39:94:e7:1a:ba:90:37:d8:6e:5a:
bb:77:55:85:67:c7:f1:e4:6b:68:44:4b:d9:0c:16:
b2:8f:c6:c6:66:a4:99:f3:44:53:53:4b:7e:ac:49:
20:0b:04:18:f8:3a:87:d7:5d:c2:e5:12:38:54:6f:
5a:47:67:5b:ac:b4:98:17:d8:2f:a2:46:bd:4a:0b:
59:84:11:a3:c3:f3:0e:47:d5:89:2c:2b:a9:ba:83:
1f:c0:2a:66:92:5a:fa:38:c0:2b:a7:c9:9d:b2:0e:
2f:30:9a:4c:2e:b3:7b:f4:a6:e6:3b:bd:2e:16:23:
b8:85:55:1e:8c:8b:59:af:87:68:77:a4:d2:c3:dd:
e5:36:33:be:28:1b:27:3a:6d:87:d6:81:db:57:f7:
09:61:56:c5:f6:58:8c:09:04:dc:75:76:55:47:70:
68:5d:c1:f5:32:ed:93:13:5f:e3:d0:6d:8f:cb:ae:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:8A:C1:FD:EA:3F:1C:E3:19:E8:A2:56:77:5A:7A:82:97:01:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd1c009e-622f-3faf-a683-8599bda5465d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
72.95.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:40:64:77:f8:cf:c8:1c:7a:9a:47:5f:44:86:2f:a7:25:a3:
63:22:2e:62:bb:46:f0:e3:67:77:51:54:7b:b8:bb:8a:f0:e9:
e2:9e:b3:eb:02:31:58:8f:21:95:cb:9e:78:3e:f6:10:5a:32:
ce:51:e1:60:26:c7:68:30:30:5b:f1:bb:9d:12:09:0e:af:96:
c3:ef:04:d2:1a:fc:c9:74:30:13:7d:18:93:52:bf:ac:e1:c9:
b3:40:cc:56:f0:12:59:5a:23:82:59:f6:75:a9:ce:6e:1f:aa:
e7:fd:2e:77:36:2b:30:f4:b8:c0:1c:09:07:7d:6d:b1:ec:9f:
ee:29:cc:ed:4d:b2:9e:b8:d9:b9:4f:54:0d:25:de:a7:7b:88:
00:96:a4:97:9c:66:f1:9a:59:ac:7b:9e:aa:ee:b3:56:be:bb:
b6:37:a6:2c:66:5d:79:68:9b:65:61:32:20:8e:7a:d8:fe:0f:
ec:6f:b7:45:e2:7f:93:1c:06:3d:fd:e4:b5:c5:99:d1:8d:34:
30:8e:c8:73:05:4d:43:95:f8:74:68:a7:93:43:12:cc:c7:c0:
13:7c:e9:7f:06:27:88:ce:62:52:58:51:50:8b:0c:4d:32:c5:
77:a0:ab:94:6a:3b:f2:4a:67:09:4a:c7:de:c5:97:72:2a:02:
2d:58:96:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:36 2024 by rpki-client on console-ams.rpki-client.org