Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/37d0cc0c-685a-303a-b82e-588241e5be45.roa
File: 37d0cc0c-685a-303a-b82e-588241e5be45.roa (raw, json)
Hash identifier: 28G9y3YSPx35kGWS6iUD7x/6qjneusjy+Wn0zpl+3dw=
Subject key identifier: A2:CD:A2:5E:96:A4:19:12:48:CE:63:8A:3C:51:F7:AC:5B:66:82:B9
Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial: 010D0C9F432858416F7C2F07D91D7D9BE1EEE140
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/37d0cc0c-685a-303a-b82e-588241e5be45.roa
Signing time: Mon 03 Apr 2023 19:33:12 +0000
ROA not before: Mon 03 Apr 2023 19:33:12 +0000
ROA not after: Sun 06 Jul 2025 04:00:00 +0000
asID: 918
IP address blocks: 206.168.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 07 Apr 2023 11:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:6f:7c:2f:07:d9:1d:7d:9b:e1:ee:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Validity
Not Before: Apr 3 19:33:12 2023 GMT
Not After : Jul 6 04:00:00 2025 GMT
Subject: CN=5a08f371-bd6c-4fd2-9c01-b8fe7ea574b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:84:03:41:a0:fb:5b:72:ef:78:b0:30:78:
10:87:ec:9f:6b:f6:c2:03:5b:3f:d5:83:df:95:99:
d1:e0:2f:a8:c5:9c:d6:d7:d0:b7:a5:e7:2e:bc:19:
66:fd:e2:8e:12:f8:3b:53:1f:0d:d9:27:bb:06:78:
b8:0d:83:65:0c:c1:60:9a:7b:fe:a3:72:d0:a6:c2:
a5:08:7f:3c:47:3b:67:74:48:19:47:21:eb:88:14:
dd:c1:83:e8:90:41:90:fd:08:7c:c9:c2:74:75:64:
0b:1b:1c:38:fe:e1:97:93:19:69:8a:f6:5d:39:11:
1d:e3:ee:03:02:83:63:85:43:d7:ac:d5:8d:6c:50:
2c:8e:30:8c:5c:5e:cf:67:10:2e:31:63:85:36:6e:
f3:f1:4e:a9:54:92:81:e5:2a:51:7a:69:bd:91:3c:
e0:8b:68:6a:96:f6:9a:f6:61:bd:94:06:45:f6:6e:
a0:88:1d:4e:51:ed:85:32:74:0a:30:a0:ce:0e:34:
48:40:f1:68:7b:7c:e5:d6:8f:b1:ca:f2:2f:8d:98:
9e:ab:d8:19:4a:4a:18:64:9e:77:df:ad:a9:e7:a7:
83:bd:f3:4a:43:e5:a4:61:19:0b:d3:c7:d1:e5:cf:
8d:49:2d:4f:23:2b:05:73:a4:b3:ac:b1:fa:54:19:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:A2:5E:96:A4:19:12:48:CE:63:8A:3C:51:F7:AC:5B:66:82:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/37d0cc0c-685a-303a-b82e-588241e5be45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
X509v3 Authority Key Identifier:
keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:4c:ac:e3:e8:a6:44:97:48:46:24:7a:fd:b2:f0:0f:f1:9a:
15:e5:f9:4c:9f:3d:dd:70:06:40:73:15:f8:35:71:96:ae:74:
40:3d:57:16:8c:07:9b:1a:69:d4:a7:04:e7:10:ca:80:09:7a:
b9:ac:0a:ec:1e:c5:d4:a8:91:e5:a3:4c:a7:76:09:46:12:71:
b3:7c:70:20:f6:b1:f7:16:63:7c:2d:b9:11:31:dc:14:10:2a:
90:6f:f6:87:c3:46:55:77:ee:4f:38:82:7c:dc:9e:2b:40:72:
2f:40:e8:55:79:4b:73:ac:7e:88:dc:41:bd:6c:6c:1e:78:5f:
d0:2c:59:3d:ee:9f:8a:d9:d7:ae:71:c2:66:d4:79:09:0c:5a:
c0:8b:e9:b2:dd:8f:5a:dc:b5:41:6a:ff:68:f2:d8:3c:19:fd:
0f:ee:88:85:a5:ac:d8:9c:9e:77:07:f5:c5:52:08:a1:59:c9:
fd:7c:f1:40:d2:a6:22:29:b1:5c:f3:eb:af:d3:82:d5:af:ae:
4d:68:73:de:75:1c:07:ad:10:68:fa:3b:78:65:3d:20:bc:cc:
62:1d:22:d3:7a:ff:83:2b:eb:ea:13:aa:f8:a5:80:3a:58:a4:
cc:55:d3:1c:9f:7b:b8:a8:d8:f0:3f:82:61:09:b1:d4:b8:49:
13:07:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:55 2024 by rpki-client on console-ams.rpki-client.org