Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/cabf586e-799e-38ae-880d-a1317d9e451b.roa
File: cabf586e-799e-38ae-880d-a1317d9e451b.roa (raw, json)
Hash identifier: 6Ab3qffP/SplNAKSEpqhnl2N4BD2lX5tgz5IaQcMhQY=
Subject key identifier: 0C:5A:96:1D:94:9F:9F:FC:D1:85:4B:5B:04:C4:D7:3C:7D:AA:F1:14
Certificate issuer: /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial: 010D0C9F432858426FDE6EA114820332BAD98180
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/cabf586e-799e-38ae-880d-a1317d9e451b.roa
Signing time: Tue 04 Jul 2023 17:08:10 +0000
ROA not before: Tue 04 Jul 2023 17:08:10 +0000
ROA not after: Mon 02 Oct 2023 17:08:10 +0000
asID: 49999
IP address blocks: 199.101.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:6f:de:6e:a1:14:82:03:32:ba:d9:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Validity
Not Before: Jul 4 17:08:10 2023 GMT
Not After : Oct 2 17:08:10 2023 GMT
Subject: CN=1469a581-247a-4170-91d5-48a3c89cbbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:9a:a6:51:90:4e:cb:1d:b6:8f:0e:51:40:
7b:c6:f7:36:50:ca:74:09:94:f6:86:e8:8e:ed:bb:
56:bb:42:f5:85:8a:b2:7d:a9:6b:32:aa:89:bf:fc:
7e:b1:ab:31:d2:3d:3a:46:b0:1f:15:63:47:26:0c:
81:82:de:54:c6:f5:d5:a7:8c:6f:c2:5c:29:0e:ef:
f0:e2:d1:7e:bb:4d:8f:13:cd:71:2a:3c:91:e5:92:
7d:7b:4a:a0:f0:53:bf:47:51:f4:d5:1e:58:cd:92:
64:9e:a6:dd:bb:3c:b8:1a:85:15:0b:73:e0:22:6a:
fd:c5:fd:36:07:36:cd:9c:e2:cf:0b:92:3f:2e:15:
b6:82:e0:23:bd:9c:f8:94:f0:fc:f0:de:60:07:c7:
6a:87:06:b4:5b:97:c2:45:d4:5e:ba:59:63:77:64:
7d:06:91:83:41:fd:ed:81:36:c2:60:a1:30:c6:0e:
00:f8:37:17:1a:b3:16:d3:34:ea:a1:12:20:ec:05:
ef:d1:6c:9b:8e:27:7e:e4:43:e3:11:fe:1c:6f:92:
e8:4a:f1:34:10:dd:28:a0:33:99:00:77:e8:64:09:
0a:e5:77:28:78:3e:c7:a9:46:01:cb:c8:76:e8:26:
dc:8d:3c:bb:0a:b3:92:19:fa:6e:d4:47:cc:22:ab:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:96:1D:94:9F:9F:FC:D1:85:4B:5B:04:C4:D7:3C:7D:AA:F1:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/cabf586e-799e-38ae-880d-a1317d9e451b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl
X509v3 Authority Key Identifier:
keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:6e:86:75:37:57:cc:cf:cd:14:c2:33:c2:81:77:75:43:27:
5f:a3:67:4a:cd:ad:35:8a:b6:f2:df:f3:a0:51:dd:d8:35:13:
d2:d7:9b:cb:91:3d:1e:f1:e5:89:e9:0a:aa:c7:91:cf:9c:07:
25:90:e3:0f:c9:d4:e4:78:35:29:07:07:4d:74:c0:cf:f5:e1:
0b:2c:6a:e7:7d:45:99:45:b4:54:35:d7:3b:dc:ab:77:59:49:
59:c4:41:4c:bc:22:41:e0:c3:7f:5e:66:37:49:b4:89:50:1a:
a5:53:12:28:ae:ea:d2:95:17:40:00:fa:4a:5e:95:b2:e3:05:
8a:61:4c:b0:25:7a:82:2b:35:63:de:ee:f9:9f:05:12:90:7f:
04:ba:dd:be:ed:ab:bd:d1:3e:65:10:f5:e1:02:9c:f8:94:75:
9d:f1:dd:37:68:e7:19:31:b9:b2:9b:40:c6:6b:0d:ce:89:de:
d3:ef:b2:98:88:eb:da:8d:29:f8:b0:bf:a8:88:50:a0:8a:27:
29:76:c5:a1:e5:0d:52:68:d6:17:0b:1b:54:38:42:b3:ba:59:
c2:16:1f:a0:1c:5a:13:2a:23:b7:81:50:4b:98:84:ec:8a:5f:
f4:7a:94:b6:74:5f:82:94:06:bf:3f:ae:8e:f8:18:47:d5:6b:
a3:11:1c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 16:05:36 2023 by rpki-client on console-fra.rpki-client.org