Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/976ecf35-e843-32ec-b3ec-bc04114afd10.roa
File: 976ecf35-e843-32ec-b3ec-bc04114afd10.roa (raw, json)
Hash identifier: /JdxH5CsS39yXkbWyuSYRYGz4/TkVl9kAsuKBz2gXXU=
Subject key identifier: E2:38:28:F0:40:2D:4C:50:1B:CA:B6:5B:B9:37:65:BE:34:74:4A:CE
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328583CBE46F7E789D2BD4957088C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/976ecf35-e843-32ec-b3ec-bc04114afd10.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Thu 28 Jan 2027 05:00:00 +0000
asID: 6939
IP address blocks: 216.218.240.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 20:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:46:f7:e7:89:d2:bd:49:57:08:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Jan 28 05:00:00 2027 GMT
Subject: CN=1d0029ee-ff3f-492a-8eae-c134ea190903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:d3:e5:9c:56:9d:e4:52:20:ab:ea:f6:4a:
3c:d0:07:45:d0:0f:74:62:26:e1:1f:56:05:41:b5:
f9:8a:07:83:de:92:31:86:d0:73:74:43:dc:d1:34:
85:d9:d2:a5:f2:49:98:e2:d8:bb:fb:83:8f:81:bb:
17:29:d1:8b:6f:df:6e:f9:99:3b:49:50:98:5c:cc:
3e:11:a8:a3:88:a5:8d:46:1e:ad:30:b1:21:e9:1a:
ea:5a:d0:1e:7c:4e:a8:86:ad:53:ba:c9:3e:0c:d8:
63:62:2d:60:51:44:79:31:36:4b:20:c7:31:e9:15:
60:3c:3e:fb:c1:f5:6e:c7:08:66:36:7e:ff:54:95:
b0:64:c7:2a:a3:89:fc:95:f9:9a:49:83:f2:18:52:
8a:be:8a:cf:e0:08:88:a6:e4:53:93:9f:18:35:f9:
6e:c2:8d:34:99:2f:4d:5a:ad:c3:62:e9:7b:dd:7b:
83:c0:66:2d:39:f1:35:36:7c:ca:1b:20:95:fb:dc:
88:f3:62:07:ef:d7:b2:0d:16:ed:17:03:78:e0:0d:
2f:af:4f:d7:db:c9:40:2f:94:3a:93:5a:d5:a7:4f:
7e:a4:2e:85:53:ed:fd:56:0a:5c:f5:cb:42:a6:0c:
8d:82:cd:d4:e2:d2:39:46:56:2d:3e:e7:bd:43:da:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:38:28:F0:40:2D:4C:50:1B:CA:B6:5B:B9:37:65:BE:34:74:4A:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/976ecf35-e843-32ec-b3ec-bc04114afd10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.218.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:bd:1e:99:4a:a0:08:6d:fd:40:1e:83:2c:eb:db:7d:a9:cc:
da:80:1d:da:24:2e:aa:ad:34:e4:c9:11:f6:09:17:1a:92:15:
15:f9:15:dc:51:86:2e:54:22:4c:42:85:9a:78:10:bd:e6:29:
5e:e1:4b:19:0f:ce:34:53:8e:ca:52:f5:bd:c3:08:a8:a3:f7:
5b:94:22:3c:fa:ba:3a:b7:d3:82:82:c9:99:3a:ed:b2:31:61:
0f:d8:3b:11:b0:75:74:bd:f1:c2:4d:f9:f3:a1:97:2b:cf:2d:
de:e3:1b:f4:e6:67:4b:ed:6a:0d:96:a3:f8:f1:c9:22:33:fe:
fb:74:d3:68:72:f5:20:d4:8f:e9:92:f1:e0:60:81:57:5d:cb:
dc:88:54:93:f2:f0:5b:b9:08:6c:7d:5a:1d:01:b1:1e:dd:c5:
47:98:f6:d5:58:66:59:9b:1b:59:f2:9b:bd:a0:fd:9e:dc:ad:
7f:7c:09:d8:d3:bd:ab:72:ed:0b:f2:06:62:2b:02:42:16:9c:
8b:fa:70:5c:79:0a:0f:77:b2:f9:28:24:b6:3d:5c:ec:18:6b:
7d:54:c0:c9:51:72:00:7c:11:e5:85:71:fd:97:06:d1:1f:86:
32:95:d2:c6:7e:19:9b:e9:2a:16:6e:86:b1:f3:e2:3c:f5:e2:
81:76:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 20:59:06 2024 by rpki-client on console-fra.rpki-client.org