Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c1c5ee-b6d7-3072-b5a9-af390e142091.roa
File: d2c1c5ee-b6d7-3072-b5a9-af390e142091.roa (raw, json)
Hash identifier: wO4ElzMES8gc/3YrH5yuVPgwuMYaflhv97L9k328C4w=
Subject key identifier: 37:53:65:85:72:48:41:44:DE:A3:D1:AA:7A:E7:12:92:56:E8:E7:F9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DB5351C5F8919D47274492A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c1c5ee-b6d7-3072-b5a9-af390e142091.roa
Signing time: Tue 26 Apr 2022 12:00:00 +0000
ROA not before: Tue 26 Apr 2022 12:00:00 +0000
ROA not after: Fri 25 Apr 2025 04:00:00 +0000
asID: 701
IP address blocks: 199.202.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b5:35:1c:5f:89:19:d4:72:74:49:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Apr 26 12:00:00 2022 GMT
Not After : Apr 25 04:00:00 2025 GMT
Subject: CN=4ca900a4-7593-48b5-8255-4a90914607ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e4:5a:5a:96:e6:d3:aa:c0:96:d7:e8:47:f0:
19:be:d4:f6:69:04:63:47:66:f7:99:03:c1:23:76:
e7:9b:68:7a:a0:ec:55:bb:0a:dd:42:de:ae:3d:47:
75:7f:e3:61:56:4b:b9:05:40:e7:e4:09:2b:48:7f:
ce:22:45:16:bf:11:2f:f6:5c:42:3b:e0:32:b7:b1:
a9:b6:c0:3e:a8:c0:13:1c:8c:78:ba:60:9d:ca:7d:
15:1c:a1:32:e7:0c:91:d6:f1:4c:52:c6:8b:d1:05:
4d:12:3e:87:e4:15:14:34:1f:a9:91:2c:99:b9:c1:
6d:4e:41:35:0a:68:b3:41:df:60:3f:7a:ba:e3:a8:
13:ca:c6:e7:cc:47:48:4f:fe:59:ed:c0:28:36:52:
7e:0f:88:c3:0d:3f:8a:65:65:11:89:69:fd:2e:9e:
b5:cf:a0:5e:0e:76:7a:d6:93:ee:ef:04:af:b3:fc:
53:45:84:4e:b8:c2:07:24:32:03:5e:e6:b1:d6:26:
ca:70:b6:c6:32:4a:0a:56:e6:0c:90:bb:bf:01:64:
91:5f:01:05:a4:54:b5:38:b9:67:41:00:80:28:49:
c9:9d:45:fe:27:f0:1b:48:fa:52:ad:5a:fa:94:1a:
a4:d6:0a:63:84:7f:ed:5b:5d:40:d4:2c:da:a3:0f:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:65:85:72:48:41:44:DE:A3:D1:AA:7A:E7:12:92:56:E8:E7:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c1c5ee-b6d7-3072-b5a9-af390e142091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.202.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:8c:7c:ca:46:42:b4:93:9e:1d:d5:2e:54:2b:af:c5:80:5e:
b7:94:12:c3:aa:86:f1:35:ff:83:b3:87:4b:eb:5d:db:e3:a2:
b9:80:3b:d1:1b:39:f4:b2:d2:ad:7b:cc:4a:38:c7:b6:e6:93:
a9:09:32:db:2e:65:07:e3:aa:16:56:a3:f6:54:72:09:c2:22:
66:d2:29:0b:95:3d:67:39:a7:0d:e8:fb:c5:f8:e9:cf:38:be:
11:03:4e:8b:07:74:43:46:bb:00:2d:82:3e:64:df:23:e9:b5:
29:68:a6:73:bc:e5:ed:f5:60:8a:ff:4c:f7:39:ab:86:54:2a:
2d:99:0b:5c:99:0a:5b:10:1b:2e:24:e2:1f:e8:bd:fb:60:a7:
e5:34:14:af:9a:00:9c:c9:d7:fe:d0:1f:b3:c1:1b:29:97:5b:
3f:d1:cb:e7:49:d3:91:13:d0:40:35:e2:e0:49:5c:0d:34:38:
0e:6c:10:af:e8:40:61:7a:73:9c:b8:65:bf:ed:8b:67:e0:c0:
9a:b4:12:60:f5:a9:a3:44:9f:d1:31:87:a4:95:1c:f6:1e:be:
75:e2:5c:38:60:02:b4:ac:d2:28:2a:46:7c:f2:ae:83:d5:ab:
28:01:da:47:93:d7:d2:c2:5b:e7:4b:18:e6:99:1b:7c:cc:82:
bc:83:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:37 2024 by rpki-client on console-ams.rpki-client.org