Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef99cf3f-44e7-397a-ad05-04f1eb76cc1c.roa
File: ef99cf3f-44e7-397a-ad05-04f1eb76cc1c.roa (raw, json)
Hash identifier: qJ3Ntrh5rRfYaiJC0/o3Ukq8WC1sJh5ScAovwai80qo=
Subject key identifier: 12:3C:7B:FA:A7:8B:A0:84:2D:82:34:CA:00:D2:B9:DD:C4:F3:4C:A8
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584566F1E982E6EC8A8419E80E10
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef99cf3f-44e7-397a-ad05-04f1eb76cc1c.roa
Signing time: Mon 01 Apr 2024 14:45:57 +0000
ROA not before: Mon 01 Apr 2024 14:45:57 +0000
ROA not after: Sun 30 Jun 2024 14:45:57 +0000
asID: 16696
IP address blocks: 45.248.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 15:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:66:f1:e9:82:e6:ec:8a:84:19:e8:0e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Apr 1 14:45:57 2024 GMT
Not After : Jun 30 14:45:57 2024 GMT
Subject: CN=7a57ada0-4fbc-426a-99a8-7937ae832869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:7f:b4:a3:b9:af:16:ea:b5:c6:5f:db:43:
ce:ba:c1:af:c1:79:a2:a7:bb:21:bf:3e:47:9e:90:
46:48:92:fa:6f:8d:b1:36:5c:29:97:e7:dc:f9:02:
32:70:c8:9f:5f:a0:cf:ed:c3:8a:78:32:3e:7f:ea:
64:d0:57:cd:3f:43:27:e7:a1:62:f2:2d:d4:d2:8e:
cc:05:a9:bc:6a:59:0b:6f:e1:e0:db:07:f4:6b:66:
5b:73:6d:b3:2b:7f:f7:53:31:c3:bc:0c:77:ba:bd:
63:a0:c4:3b:de:5d:1d:ce:33:68:36:eb:ac:f6:12:
d9:99:6b:bc:04:70:f6:8c:5b:47:5b:95:53:8b:e2:
5b:74:13:8f:a1:df:ad:79:ea:5c:07:1c:a9:fa:31:
96:71:5a:d7:bd:da:c7:32:8e:fb:fa:b7:82:1a:eb:
0e:b8:1c:21:9b:89:2c:fa:05:ef:a9:2b:2f:4b:9e:
a7:15:57:b7:c7:54:75:66:e3:64:b1:e5:e8:fd:bb:
5c:f3:d6:09:dd:c7:b5:a5:ba:af:88:fb:64:ec:d2:
ba:8c:c7:d5:e9:5c:d6:65:57:42:87:d3:98:34:6e:
e6:d6:ec:28:aa:b4:bf:8d:41:a9:6f:d7:31:4e:9b:
1b:1a:51:69:9f:36:b9:95:6c:42:7c:ee:c6:fa:6d:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:7B:FA:A7:8B:A0:84:2D:82:34:CA:00:D2:B9:DD:C4:F3:4C:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ef99cf3f-44e7-397a-ad05-04f1eb76cc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
45.248.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:01:cf:0a:a8:b0:fc:35:d6:97:75:7e:7c:d8:57:36:76:6e:
4a:65:bc:2d:b4:bf:70:32:f8:1e:df:8c:da:49:ca:61:eb:4c:
59:8c:f7:3c:fa:fb:f5:d5:23:06:91:08:01:87:84:ad:ba:cd:
01:6b:9c:d1:e5:49:3e:f2:fe:2e:b4:53:42:cf:04:87:d3:0b:
cf:1e:60:0e:8c:c1:74:d5:29:fe:50:e7:ee:92:24:b8:c8:c3:
1f:24:78:af:d1:34:a7:f9:3a:2c:ac:22:d7:81:02:42:a0:f2:
a6:75:bd:71:58:60:5d:fe:cd:3d:c4:ee:a8:db:52:42:80:80:
b3:7c:48:4f:f7:9f:5a:c6:9f:12:cc:a9:d8:3c:3d:a7:7b:2d:
0a:91:c1:83:78:3a:80:29:c9:f1:50:6d:b4:40:24:f5:f5:51:
ed:42:25:c3:b4:c0:1b:87:77:48:6d:fa:6c:40:94:54:30:d4:
d0:da:dd:a7:a6:72:98:c4:e4:dd:4b:f9:09:d6:db:d8:33:fb:
b1:fa:f6:0e:a3:00:32:d4:a4:d3:5d:bc:aa:9b:97:d4:6e:c3:
3c:d9:2e:e5:41:da:0f:24:e0:ee:9b:ad:2b:0d:70:ba:5d:bc:
6a:7e:4c:c3:84:70:d6:1c:b9:82:3d:dc:64:5e:81:62:3b:c5:
83:72:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 20:28:32 2024 by rpki-client on console.sobornost.net