Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/cb9f8f00-014c-36a0-b3ab-4b62a234a8d0.roa
File: cb9f8f00-014c-36a0-b3ab-4b62a234a8d0.roa (raw, json)
Hash identifier: qpth4AO/b6bKHUcNlYSSKQ9VzIp06oxTK7sBDLqn4GA=
Subject key identifier: E1:13:D8:11:C2:13:4D:DE:0C:9C:03:BA:71:AA:2B:86:84:D9:AD:3B
Certificate issuer: /CN=47c38599-11bd-476a-9b98-d0fb43b76d60
Certificate serial: 010D0C9F432858410224107D44EC3EC302CD22C0
Authority key identifier: 69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/cb9f8f00-014c-36a0-b3ab-4b62a234a8d0.roa
Signing time: Tue 21 Feb 2023 16:12:14 +0000
ROA not before: Tue 21 Feb 2023 16:12:14 +0000
ROA not after: Mon 26 May 2025 04:00:00 +0000
asID: 19845
IP address blocks: 192.131.147.0/24 maxlen: 24
192.131.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:02:24:10:7d:44:ec:3e:c3:02:cd:22:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c38599-11bd-476a-9b98-d0fb43b76d60
Validity
Not Before: Feb 21 16:12:14 2023 GMT
Not After : May 26 04:00:00 2025 GMT
Subject: CN=10285f95-bf59-4064-bd71-3f27a1691d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:f0:19:7a:d4:96:50:42:6a:21:b9:5b:9f:
d7:02:7d:a9:8b:7d:fe:70:54:b6:04:c4:38:55:bd:
67:ea:91:ca:bb:7d:82:89:a7:4c:01:3a:a3:d2:01:
07:d9:2e:ff:13:2e:4b:9a:c3:56:77:59:8f:77:e7:
b8:fb:9f:d7:ff:75:ee:37:62:db:4e:b4:ad:03:e2:
4e:53:89:81:cc:d7:7f:35:8e:f8:17:f5:91:d5:28:
34:6e:74:31:a8:8d:df:dc:b6:b6:98:12:34:84:37:
f1:8d:39:98:e3:d6:69:63:30:7b:e6:0d:de:57:a0:
d4:8a:a3:f5:90:32:c6:8c:08:c8:f1:d5:67:cf:c3:
19:45:b8:17:d4:4f:6d:17:be:28:57:a0:e3:a2:c7:
5f:92:56:e9:f3:6d:4d:1d:3e:0d:66:50:04:9b:66:
40:3e:26:2d:9b:92:57:6b:50:3d:06:c8:69:18:80:
df:59:ee:d6:5b:60:bb:bc:01:d8:dc:73:47:e4:4c:
ed:8f:c6:0a:56:15:0d:30:24:7d:d6:6b:6d:a2:03:
e5:46:d7:bd:e8:a0:ac:3e:0e:c6:5a:de:95:57:02:
c4:11:b9:fe:be:90:3f:0e:e0:2f:01:75:1f:7e:9c:
69:82:a5:6e:50:20:77:0b:9c:b2:94:72:8b:8b:0b:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:D8:11:C2:13:4D:DE:0C:9C:03:BA:71:AA:2B:86:84:D9:AD:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/cb9f8f00-014c-36a0-b3ab-4b62a234a8d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60/47c38599-11bd-476a-9b98-d0fb43b76d60.crl
X509v3 Authority Key Identifier:
keyid:69:46:23:EC:B6:C3:CA:38:B8:F3:C4:E6:21:A8:0A:E9:19:05:81:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47c38599-11bd-476a-9b98-d0fb43b76d60.cer
sbgp-ipAddrBlock: critical
IPv4:
192.131.147.0-192.131.148.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:c9:9c:1a:03:03:56:57:9e:db:44:6d:d8:80:f9:bd:40:9b:
ae:64:2b:2b:0c:fa:ea:68:33:ac:b2:5b:1a:af:50:f0:f7:f9:
99:4f:8f:b9:c0:52:47:6c:c8:9a:53:6d:1b:18:42:43:28:b5:
ba:9d:4d:b1:4e:d6:bf:df:5a:28:3e:a2:0e:33:3e:9c:38:68:
a5:92:bc:88:d8:74:3d:d6:4e:b9:1e:dc:d8:8d:b2:6b:ed:cf:
07:31:05:79:c3:74:06:7e:c9:09:a1:4b:47:a2:ac:57:6b:f9:
09:75:76:03:bb:e4:e3:36:c0:49:8d:80:50:f4:1c:8f:6b:47:
c3:21:c1:88:f4:62:ef:bf:e3:da:46:97:5b:f2:40:1e:6f:3d:
53:94:88:b9:10:8b:19:d2:ce:20:e6:9a:62:7b:37:cf:d4:73:
6a:c8:2c:22:c2:7d:50:a3:82:db:d5:85:5b:04:a4:85:07:51:
31:ed:bc:b2:36:91:95:15:a1:ae:15:61:a6:8f:32:9a:b1:98:
6f:5f:23:8d:c0:60:82:f9:cf:27:fa:a9:93:cc:2e:03:d4:79:
10:cf:45:13:b7:7b:84:ee:6e:71:d8:7d:23:77:e7:23:a9:42:
1d:f3:52:16:ec:3e:08:b3:29:2e:f2:2f:7c:86:f1:ce:78:38:
d7:2c:33:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:49 2023 by rpki-client on console-fra.rpki-client.org