Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/40af87e7-b3ca-3f24-832b-7c2c3f523d41.roa
File: 40af87e7-b3ca-3f24-832b-7c2c3f523d41.roa (raw, json)
Hash identifier: NTWP5l929N+7XdtUg/CrfL5G3I5x/vJpLfE2PtWMGMo=
Subject key identifier: 65:0A:C1:41:50:3D:BB:F3:B3:E6:CC:AD:F4:C8:F3:10:8F:B2:B5:BD
Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Certificate serial: 010D0C9F43285843227571BD9A006D0F760A4D80
Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/40af87e7-b3ca-3f24-832b-7c2c3f523d41.roa
Signing time: Wed 06 Sep 2023 16:26:19 +0000
ROA not before: Wed 06 Sep 2023 16:26:19 +0000
ROA not after: Tue 05 Dec 2023 17:26:19 +0000
asID: 3356
IP address blocks: 104.143.48.0/20 maxlen: 24
199.247.144.0/21 maxlen: 24
2604:cf00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:22:75:71:bd:9a:00:6d:0f:76:0a:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Validity
Not Before: Sep 6 16:26:19 2023 GMT
Not After : Dec 5 17:26:19 2023 GMT
Subject: CN=d059f1d6-78e1-4f7e-b8b1-a3ade9ac1b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:47:ec:4c:e8:7e:5b:8d:a6:f2:68:34:fb:
5c:e5:16:d2:d8:77:70:86:4f:fe:cc:2a:08:7f:e4:
dd:ef:5d:2f:7b:7e:10:ba:e5:ab:af:13:c5:2d:23:
1f:9b:e6:8a:b5:51:47:db:47:fb:1e:69:fc:94:71:
de:dd:4f:9f:ac:f1:cb:67:a6:6c:55:7e:6d:70:b6:
34:a4:54:40:5a:b5:3f:30:88:53:ea:05:b5:59:41:
13:d7:25:a5:2b:25:38:e1:42:73:cf:2f:e6:c2:4f:
44:e7:fe:da:a0:c1:7e:55:aa:f9:02:bf:59:5d:8d:
ca:85:94:92:7d:3a:52:ff:77:41:08:ca:7e:a4:56:
a8:d0:1b:24:7a:11:db:95:9b:1d:c8:6d:00:aa:57:
5d:07:87:97:4a:38:09:e7:6c:b7:c8:ee:d8:f6:f1:
f7:1b:c5:24:4d:9e:6f:ab:5a:ff:86:20:a0:2b:af:
9d:47:13:49:c3:ce:c7:49:29:1f:2a:ff:8b:ac:55:
e8:0b:65:83:ee:b7:01:0b:5a:b7:15:6e:18:59:dc:
22:2b:9d:b7:e1:a6:7a:00:be:56:3f:f8:99:0a:06:
75:60:4b:f1:89:e2:12:0a:bb:77:4e:d6:7a:76:18:
58:a8:81:f6:4b:f3:b3:d9:be:3c:a1:32:ad:b7:c2:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0A:C1:41:50:3D:BB:F3:B3:E6:CC:AD:F4:C8:F3:10:8F:B2:B5:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/40af87e7-b3ca-3f24-832b-7c2c3f523d41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl
X509v3 Authority Key Identifier:
keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.48.0/20
199.247.144.0/21
IPv6:
2604:cf00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:22:15:e4:ec:71:b1:52:8c:16:08:a5:99:97:c0:cd:0c:a9:
95:30:82:81:38:09:42:6a:0f:84:0c:7b:5a:06:7d:e1:bd:30:
9b:0f:6f:4d:d2:98:f9:78:7d:12:71:2b:00:2b:c2:bf:dd:b4:
d9:e2:a9:12:34:49:83:a8:e4:4f:9c:1c:cd:92:b7:4a:66:1d:
e1:6f:44:7b:aa:c1:47:4e:49:02:e9:41:41:b0:19:d8:7b:66:
98:b3:b9:3d:3c:51:41:94:49:83:1e:95:b0:59:cc:8c:f2:cc:
91:06:8a:2b:da:92:66:b3:ad:7a:b4:9c:37:b6:49:bb:ae:3b:
02:76:8b:41:9a:14:a5:45:41:ee:d2:12:92:20:1d:5b:6e:d9:
c0:9c:33:75:d6:3d:96:02:94:a8:89:ab:34:59:18:9e:c7:b7:
72:08:00:d9:b3:a1:bf:5a:29:95:9a:89:47:5d:d5:e3:2a:60:
0a:bc:43:27:98:3a:02:89:89:51:3e:57:e4:bd:86:58:a7:11:
9f:11:a1:2f:a3:aa:82:cd:f7:e5:25:75:05:f7:ac:0d:0c:d4:
6a:c7:fa:f6:a8:48:bb:9f:15:d6:b9:49:de:e9:35:82:3e:7c:
79:9a:71:7d:d9:e3:4b:8d:59:66:20:ef:20:55:de:78:ff:5a:
ec:41:04:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 21:02:06 2023 by rpki-client on console-fra.rpki-client.org