Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d8e195d-c26f-3446-96d8-05d1b689e472.roa
File: 1d8e195d-c26f-3446-96d8-05d1b689e472.roa (raw, json)
Hash identifier: 7mcIyxxM9Nf7Q52bQ6JdDo9sa8QIl6K1hrMspDq95FM=
Subject key identifier: 4B:C7:DC:A9:F0:D7:96:DF:4B:43:DE:C6:C0:38:3F:F4:09:3A:A3:57
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AA2BE5996FE80085757F1C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d8e195d-c26f-3446-96d8-05d1b689e472.roa
Signing time: Tue 26 Sep 2023 19:22:52 +0000
ROA not before: Tue 26 Sep 2023 19:22:52 +0000
ROA not after: Mon 25 Dec 2023 20:22:52 +0000
asID: 397220
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:a2:be:59:96:fe:80:08:57:57:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 19:22:52 2023 GMT
Not After : Dec 25 20:22:52 2023 GMT
Subject: CN=c39bab34-1463-4ae3-90c0-53ca87562488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:30:3a:75:d9:1e:af:65:bb:4f:c5:1a:bb:
bd:22:62:51:e7:0a:c0:be:b4:cb:00:af:9d:c1:a8:
80:17:4c:d2:32:03:ad:2e:28:34:36:e1:33:40:8c:
79:ab:90:d5:59:94:a4:2c:a6:48:6e:3a:5d:34:17:
7a:3d:4a:dc:fc:23:07:c7:6a:59:24:45:e5:c2:b5:
86:40:ae:07:79:38:1f:94:df:4c:20:a5:69:7b:50:
dd:15:46:f5:69:e1:b5:76:9d:f3:e3:cf:dd:88:64:
61:a2:14:d6:fa:0f:28:ad:78:fc:3f:74:22:63:45:
39:9d:6b:34:9c:90:61:d1:2e:26:2c:7a:a9:03:1b:
40:90:a4:9f:d2:f9:ba:81:f3:89:c2:19:d5:99:82:
6b:49:ec:ff:87:23:d0:cc:53:17:bc:cc:73:51:60:
34:e1:c8:65:fc:ad:08:5b:cd:a7:a7:c4:98:ff:d8:
44:ba:52:04:3f:c5:fa:2a:3d:c0:f9:ce:a5:6d:f9:
49:55:98:40:cf:a1:a1:ff:9c:6b:93:cc:4d:b1:31:
a0:c7:41:be:88:6a:7e:25:4a:54:07:10:0d:60:2b:
0b:c1:92:82:39:38:a4:78:e8:97:36:00:1f:44:8a:
29:27:f3:8e:6e:7a:63:64:67:bf:8e:f9:38:c4:f6:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:DC:A9:F0:D7:96:DF:4B:43:DE:C6:C0:38:3F:F4:09:3A:A3:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1d8e195d-c26f-3446-96d8-05d1b689e472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:9d:e7:f4:78:5c:31:0d:c6:bf:a7:01:ce:c8:4c:3c:f7:30:
77:31:0b:71:df:fa:bb:25:0d:28:98:c1:bb:5c:2d:44:7c:41:
b9:99:e8:ff:8a:9c:ef:c9:1e:c9:b1:8f:44:6b:39:af:fe:f3:
89:dd:70:12:94:14:4e:ec:aa:0e:94:71:19:04:33:67:8e:74:
b2:d2:4e:23:ab:a9:c6:d8:28:a0:fa:8a:30:76:37:3e:7a:4a:
31:11:f4:c6:b4:52:bd:75:b9:82:c6:98:2c:7a:66:cf:35:2a:
b0:cf:ef:48:06:b6:c3:d6:ad:d7:43:f2:63:25:c3:76:bf:80:
25:2c:b2:8b:5c:9e:d5:13:93:23:c8:60:50:31:80:59:db:0b:
35:fd:c8:2c:bb:00:0b:c4:5f:8c:85:fc:c3:54:2a:9c:88:1c:
71:b6:dd:f3:ee:a4:45:67:8b:85:45:7c:8c:99:e5:6c:b9:9f:
42:b0:8f:4f:31:83:da:d7:50:e0:68:01:20:5c:4d:08:a8:a5:
16:c0:b7:61:1a:eb:b8:d1:a3:65:52:16:2b:d8:8c:26:83:2a:
ee:dc:7c:9f:0d:6c:d0:5d:d5:36:59:6f:1a:56:d6:2f:76:7f:
16:cc:87:d3:30:bd:69:a2:e0:b9:9b:75:83:b8:48:d5:63:1e:
2a:75:0c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 20:19:51 2023 by rpki-client on console-ams.rpki-client.org