Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/a832e12f-e138-3da5-a4c4-138d3ddf80b5.roa
File: a832e12f-e138-3da5-a4c4-138d3ddf80b5.roa (raw, json)
Hash identifier: X0/q9uVzSr6G/PW3/NHSM6XOCUMKu163gvPXTx9FRnw=
Subject key identifier: 47:7C:AA:7E:67:68:B0:F5:0A:A0:48:69:B2:07:27:43:2E:89:0E:D5
Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial: 010D0C9F4328576D51CC73C042CFC172E8700AA1
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/a832e12f-e138-3da5-a4c4-138d3ddf80b5.roa
Signing time: Wed 24 Jun 2020 22:25:56 +0000
ROA not before: Mon 11 Mar 2019 04:00:00 +0000
ROA not after: Sat 10 Mar 2029 05:00:00 +0000
asID: 134521
IP address blocks: 170.10.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Aug 2022 22:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:70:0a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Validity
Not Before: Mar 11 04:00:00 2019 GMT
Not After : Mar 10 05:00:00 2029 GMT
Subject: CN=38c58ef4-60aa-418b-af71-ffee066ef36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:2b:3a:53:91:1e:27:9b:81:07:e7:b3:47:
e3:8f:9d:df:a2:47:19:29:96:47:d2:ed:49:0f:9a:
54:63:99:19:da:a8:31:79:0f:7c:f0:94:e6:37:c7:
4b:6b:81:00:b4:d3:16:1c:88:d6:04:c9:d2:9d:f7:
81:a2:18:00:fd:8c:57:da:88:ef:41:0c:5c:d2:b2:
4e:89:0a:6f:93:85:da:f2:19:0d:8a:81:9b:06:1e:
01:2b:cb:0b:d3:fd:fc:16:60:89:55:c4:75:f6:80:
3b:03:49:79:65:9c:02:ee:c0:c5:9d:1e:73:f4:33:
a4:72:7c:91:3b:ed:53:be:08:b0:16:c6:60:e8:69:
41:86:2a:61:40:b4:ee:e0:01:c4:02:43:8b:35:18:
cf:e8:ec:f9:c2:c4:29:d2:86:4f:04:e1:bd:4e:40:
ee:b3:70:98:c9:9f:3a:72:3f:03:07:84:67:09:d5:
9e:c1:a1:8c:ec:7c:f1:6c:08:9b:a8:fa:11:39:3d:
f8:31:8c:4e:88:0b:94:78:ac:c9:7b:f5:2d:9c:47:
6e:b1:e5:27:67:c9:f0:94:8d:e6:eb:f5:af:27:5c:
0d:f6:dd:01:06:65:30:6b:ab:0b:bc:b4:45:39:12:
a3:d1:49:eb:27:01:7a:d5:5c:f1:e9:08:09:db:b5:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:AA:7E:67:68:B0:F5:0A:A0:48:69:B2:07:27:43:2E:89:0E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/a832e12f-e138-3da5-a4c4-138d3ddf80b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl
X509v3 Authority Key Identifier:
keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
sbgp-ipAddrBlock: critical
IPv4:
170.10.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:39:51:c8:4a:fa:94:72:07:28:1b:00:b4:2e:61:f2:99:60:
e1:33:f1:c8:d1:fd:f6:d2:72:54:a6:cf:7a:d5:73:18:20:87:
3e:f9:27:66:6b:b2:bf:ca:93:a0:8c:41:67:1e:3e:01:9a:a8:
77:13:71:ac:64:cf:3e:83:e8:56:7f:c8:92:e7:5d:10:15:1a:
31:1e:51:b7:87:d8:30:fe:30:11:25:3e:7a:9e:3f:7b:1e:a0:
ac:01:a4:61:9b:07:32:fb:75:f4:c9:c1:a3:37:0b:f5:03:30:
ec:f6:bc:8a:8e:5b:6b:a5:de:12:5f:28:aa:be:6f:68:18:9b:
35:2b:82:36:3b:f2:51:4a:05:1b:50:5f:30:c2:24:be:5d:e2:
9d:3f:f0:ee:e8:04:5a:c6:7e:eb:af:b1:8e:cc:fb:d1:c9:cd:
ec:af:fc:d9:52:2b:51:43:ac:f6:6c:e9:6a:54:a0:88:0b:53:
95:10:25:d3:fd:5d:ce:2e:1c:d2:ec:92:95:7f:31:be:d0:e9:
14:56:3a:df:60:4e:0c:34:e3:d6:1f:c3:4b:3e:23:e7:24:e8:
52:6f:53:2d:de:d5:95:70:11:f0:67:6c:c4:2f:22:30:37:4b:
10:af:54:20:c3:54:d1:ff:02:68:09:e4:83:ee:ce:6b:19:52:
0c:87:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:40 2024 by rpki-client on console-ams.rpki-client.org