Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/894f22d5-2077-3ebd-9e2e-e6c2b8471ce8.roa
File: 894f22d5-2077-3ebd-9e2e-e6c2b8471ce8.roa (raw, json)
Hash identifier: r0hiYzpExO6OPzPI7s7LOFhvzzQQCdm3EgI5QuDslhg=
Subject key identifier: 2A:00:4B:4A:08:E4:00:61:A2:6E:8B:40:D8:4D:77:A1:E8:C7:63:09
Certificate issuer: /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial: 010D0C9F43285843E39AC748CC502047B38F0780
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/894f22d5-2077-3ebd-9e2e-e6c2b8471ce8.roa
Signing time: Tue 14 Nov 2023 20:52:33 +0000
ROA not before: Tue 14 Nov 2023 20:52:33 +0000
ROA not after: Mon 12 Feb 2024 20:52:33 +0000
asID: 21693
IP address blocks: 151.215.0.0/16 maxlen: 16
192.92.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e3:9a:c7:48:cc:50:20:47:b3:8f:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Validity
Not Before: Nov 14 20:52:33 2023 GMT
Not After : Feb 12 20:52:33 2024 GMT
Subject: CN=cefbc5ed-7047-4d61-952b-bd06b45b0b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:65:8f:51:bf:b7:6c:36:76:22:3d:93:a1:
09:f2:48:29:6c:e4:c6:66:26:d6:0b:c3:56:94:ac:
fc:8b:99:41:e9:1f:91:5b:8e:d9:b8:ac:79:36:c1:
be:34:b4:85:87:1a:48:90:60:89:f2:82:07:1b:d6:
b9:ed:53:f0:cb:35:ec:a2:c5:96:68:43:51:85:ef:
84:5e:76:65:04:b0:91:9f:e1:2e:e4:3c:3f:a4:48:
0a:71:85:d4:34:53:4d:04:b1:97:95:74:2e:20:40:
b6:33:6a:d4:13:3e:6a:b3:d0:7f:43:79:66:04:e5:
dc:bd:6b:aa:95:89:1a:e3:95:85:f1:38:9a:1e:f6:
e3:cc:6d:86:85:29:c5:b1:00:99:ee:40:97:5d:ed:
da:f1:ea:cd:8c:6b:49:93:43:a3:83:c1:17:b9:ee:
97:53:e0:7d:9c:31:74:79:ce:cf:34:20:3f:94:f0:
d7:de:69:20:15:8d:9e:d6:90:f4:4c:8b:e2:50:01:
6a:2f:35:0b:9d:02:37:1e:5d:5c:fe:84:44:14:1f:
cf:83:28:6d:79:4b:e0:a3:04:4d:7a:d3:b6:76:c7:
a5:62:b7:d8:f8:26:5b:6e:6f:bc:a0:7c:4d:93:e0:
90:3d:c4:6d:e2:d8:49:f3:90:f3:5b:b9:ab:ad:f7:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:00:4B:4A:08:E4:00:61:A2:6E:8B:40:D8:4D:77:A1:E8:C7:63:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/894f22d5-2077-3ebd-9e2e-e6c2b8471ce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
X509v3 Authority Key Identifier:
keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
sbgp-ipAddrBlock: critical
IPv4:
151.215.0.0/16
192.92.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:e3:5b:2c:17:aa:7f:72:74:27:78:7a:3d:db:28:35:b2:b7:
dc:f3:45:14:6b:98:31:a8:03:3b:b2:a4:35:43:18:c0:99:48:
ab:f7:ba:f6:6a:66:de:2e:12:b1:48:19:2e:2e:08:97:66:a0:
dc:d9:33:05:5e:08:55:2e:5a:65:55:b0:df:09:c1:f4:08:11:
4c:19:f4:ee:07:c2:0d:1a:49:c3:11:0a:5b:b0:9c:b0:f3:c7:
cf:9d:e3:da:a4:f4:2a:4e:b6:12:cc:90:4a:30:e5:8c:61:00:
87:36:e5:81:f1:b5:06:1e:1b:e3:5f:e9:bd:ed:c0:b4:44:f1:
09:40:c1:49:29:e6:35:7d:d7:c2:ff:4f:07:da:83:2b:9c:c0:
24:4c:94:1f:e4:52:43:24:c4:c0:a6:59:ef:3c:c5:31:e5:7d:
97:d7:83:b8:09:1a:64:fe:44:68:6d:ba:d1:57:7e:e1:ed:e2:
36:e3:c3:2b:45:d8:ab:8d:22:88:4a:d4:b2:67:df:38:99:37:
01:72:70:21:77:65:76:93:49:e5:22:10:ce:2f:d2:2d:29:0e:
88:db:6f:38:5f:4a:f5:90:47:11:84:39:d9:9d:d0:36:f4:cd:
3e:c7:bf:a0:74:b3:33:2d:ce:b5:89:bf:f5:24:c6:29:40:1a:
d0:10:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 20:48:58 2023 by rpki-client on console-fra.rpki-client.org