Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/85bd8c30-29c7-36b2-90bf-a021602bd5ec.roa
File: 85bd8c30-29c7-36b2-90bf-a021602bd5ec.roa (raw, json)
Hash identifier: bZDCNjbce8Q1jN73m5z25iH2NmIgYtFN3mew5Wt5XzQ=
Subject key identifier: A5:E0:81:24:6A:B7:EB:13:C7:C5:F9:42:7D:82:AF:95:2B:96:67:B6
Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial: 010D0C9F4328583E53CC77CDD2DD7E7598649EC0
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/85bd8c30-29c7-36b2-90bf-a021602bd5ec.roa
Signing time: Tue 21 Jun 2022 12:00:00 +0000
ROA not before: Tue 21 Jun 2022 12:00:00 +0000
ROA not after: Wed 04 Apr 2029 04:00:00 +0000
asID: 5645
IP address blocks: 198.48.128.0/17 maxlen: 17
198.48.128.0/20 maxlen: 20
198.48.144.0/20 maxlen: 20
198.48.160.0/23 maxlen: 23
198.48.162.0/23 maxlen: 23
198.48.164.0/22 maxlen: 22
198.48.192.0/21 maxlen: 21
198.48.200.0/21 maxlen: 21
198.48.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 05 Sep 2024 19:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:53:cc:77:cd:d2:dd:7e:75:98:64:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Validity
Not Before: Jun 21 12:00:00 2022 GMT
Not After : Apr 4 04:00:00 2029 GMT
Subject: CN=dbc25745-7e75-492a-8c1b-c4806bdffb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c7:4e:de:98:89:08:e9:bf:29:64:7a:4e:d3:
66:59:fc:c1:f0:32:d2:6e:81:1f:da:49:c5:fa:15:
20:d8:d6:67:56:a0:d4:cd:c7:04:a2:42:a5:a9:17:
eb:1a:53:a0:39:fe:85:4c:d9:fc:5d:d3:c2:ee:fc:
d4:55:89:eb:e2:8e:40:e4:bb:93:45:b4:0f:f7:b0:
68:1b:64:68:0a:45:3b:5f:d3:03:b3:ee:71:40:28:
8a:ec:ac:db:79:6b:ca:f7:6e:e5:fa:f8:35:43:9d:
49:ea:b7:e0:29:c1:24:4f:b8:14:61:81:22:bf:c8:
d7:74:db:be:ba:25:90:f7:30:64:eb:89:b9:68:6f:
ba:73:e9:64:06:06:e3:33:9d:02:54:7f:32:cd:e0:
05:5f:78:aa:08:26:bb:1a:88:00:b2:11:53:92:66:
d0:b5:5d:13:67:e7:62:4f:71:70:0f:b1:41:2b:0b:
ca:a0:f5:e2:8a:98:34:99:5a:f9:c0:8b:9b:7d:b9:
ec:4c:ab:3c:4a:fe:50:6f:11:bf:96:c0:45:a7:3f:
57:a6:57:a6:0d:52:3b:bb:9c:23:be:ff:c2:5a:ea:
b4:14:e2:be:42:85:b5:5e:9e:e8:f3:5f:ef:fc:5e:
5f:0d:70:c2:1d:48:c4:0b:be:c5:34:13:bb:91:5f:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E0:81:24:6A:B7:EB:13:C7:C5:F9:42:7D:82:AF:95:2B:96:67:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/85bd8c30-29c7-36b2-90bf-a021602bd5ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
X509v3 Authority Key Identifier:
keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.48.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:5c:95:f9:2b:1a:d7:8f:75:8c:3c:6d:b5:d0:ce:28:40:71:
33:dd:b7:c3:6a:e5:ba:65:f3:af:91:10:41:58:ce:41:ae:15:
20:3c:a0:df:41:8e:c9:78:98:ba:0e:9d:17:5a:fa:1c:28:4c:
16:b6:cc:6a:2b:46:3a:e1:5b:9f:83:7c:3b:6b:59:a9:65:c1:
d9:38:e7:bf:0d:43:ee:15:27:15:e7:f6:be:8f:0a:e7:01:23:
58:3a:6b:ca:29:d1:9f:f5:71:a0:7f:91:21:07:43:c8:71:2c:
e2:73:84:21:29:32:b2:07:f8:07:82:28:93:dd:bc:21:5a:78:
3b:d8:40:cf:bc:67:6d:bd:ae:3b:33:ce:d0:5b:b1:5c:15:e8:
57:f8:5f:72:60:aa:5f:d8:71:32:20:4c:0c:b5:73:0c:c5:a2:
8d:b1:a7:52:6d:06:58:f7:75:31:92:38:14:5a:e0:b7:9f:5b:
1d:fa:e7:cf:7d:77:5a:de:65:cb:47:f4:8d:52:d8:02:ac:96:
c6:38:a5:63:66:1f:70:71:65:82:97:8a:5d:2f:3d:a3:41:96:
c7:02:12:59:db:a5:30:9a:96:d9:14:79:fc:82:0b:4f:71:83:
5b:cd:0e:b1:4c:03:c0:3b:03:d9:c9:14:05:be:b5:ce:e3:7c:
96:a8:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 20:59:19 2024 by rpki-client on console-fra.rpki-client.org