Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2a48f8db-0b44-33ce-a071-6b3419a7f6e8.roa
File: 2a48f8db-0b44-33ce-a071-6b3419a7f6e8.roa (raw, json)
Hash identifier: 1HbJ8MC5DF4LXIiZv7Hk4/3N6yS+X8mdblwrcUGpp1M=
Subject key identifier: 7C:8F:03:22:A7:DB:08:EB:C1:A3:E4:8D:88:EA:61:0B:33:E2:B6:87
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F432858452C7920A8875A62AA60CF34C0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2a48f8db-0b44-33ce-a071-6b3419a7f6e8.roa
Signing time: Mon 11 Mar 2024 16:05:42 +0000
ROA not before: Mon 11 Mar 2024 16:05:42 +0000
ROA not after: Sun 09 Jun 2024 16:05:42 +0000
asID: 16509
IP address blocks: 67.43.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 09:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:2c:79:20:a8:87:5a:62:aa:60:cf:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Mar 11 16:05:42 2024 GMT
Not After : Jun 9 16:05:42 2024 GMT
Subject: CN=20f3786e-4a91-41de-b085-e14dfb96ef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:d4:ae:fe:8e:ce:d2:3f:45:e8:0a:90:65:
d2:37:60:40:84:9f:2f:11:93:92:a8:70:05:2b:10:
1d:fb:8e:90:89:a5:5b:b8:b0:bc:a6:fb:ab:85:75:
8e:a3:1b:ab:00:99:1f:c5:dd:29:d8:be:08:02:b5:
68:a1:75:26:af:a7:c7:c4:0f:e3:1f:d8:0c:75:ba:
50:4e:19:45:1b:31:73:83:46:aa:ce:35:cc:63:43:
63:8e:ff:e0:00:22:41:d9:18:52:8c:7f:bd:6c:9a:
4d:a9:54:d6:e4:0d:87:3b:6e:fb:a2:a7:31:08:f5:
29:25:fa:59:73:6c:73:65:7c:15:b4:0e:ae:12:14:
e7:3d:8f:fb:d0:4b:8d:d8:ec:40:29:9f:52:73:ff:
cf:6a:48:2c:6f:44:54:35:15:ec:57:90:cc:70:e2:
90:a2:05:01:7e:0b:eb:c0:c9:ca:31:24:47:c6:f7:
f0:13:dc:d0:9c:30:80:25:4d:09:da:8b:04:6c:27:
45:a7:16:ba:4b:bc:cf:7a:51:c1:5c:90:47:36:29:
6c:9d:2d:2a:85:f5:6f:cc:35:5c:3a:5d:ac:bc:0e:
d6:6e:25:d1:8d:85:6f:17:41:b6:c3:b7:dd:f1:59:
38:65:37:61:31:ad:a9:59:84:34:c2:b6:4a:a2:2a:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8F:03:22:A7:DB:08:EB:C1:A3:E4:8D:88:EA:61:0B:33:E2:B6:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/2a48f8db-0b44-33ce-a071-6b3419a7f6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:57:1d:13:3a:ac:db:65:38:ac:19:39:a5:24:e1:53:fb:37:
b6:23:4d:cd:62:51:b4:4f:9a:dc:30:86:f1:7d:56:b2:1c:c7:
a1:73:4e:39:bd:66:e7:15:82:4a:09:2c:b1:7f:8c:21:c6:06:
6c:e8:7e:52:68:7e:e6:43:e1:f3:d4:fb:c5:67:dd:79:b1:2c:
64:c4:30:88:0a:4f:63:63:7c:6d:53:84:31:01:86:d3:85:d7:
17:4e:99:59:a4:62:57:0a:7b:2f:9c:13:2d:64:02:74:f6:5a:
c2:9a:fe:16:5a:62:d7:c9:32:ba:f0:e4:90:c4:42:a7:40:4e:
99:ed:9e:ac:74:3d:e5:33:a9:1c:19:62:f5:50:a0:bd:59:12:
d4:e2:87:fa:2b:40:71:b8:52:b2:5c:0b:6b:f5:04:41:36:d8:
26:20:f2:c7:41:60:11:91:98:19:47:fc:84:e0:7e:2e:04:a4:
79:8f:74:c5:e9:63:a7:ca:dd:52:80:2d:6d:07:29:14:b2:2b:
35:60:54:25:64:55:53:12:d7:16:75:be:db:9f:64:30:bc:1b:
4a:bc:62:b6:17:cf:3d:9f:22:f1:db:7c:58:59:30:9d:d9:98:
19:34:de:3f:c8:c3:83:93:9f:bc:b2:a8:30:c2:17:a7:44:42:
13:7f:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 13:52:06 2024 by rpki-client on console-fra.rpki-client.org