Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1beda8-8065-34c5-85e4-1e74341439ed.roa
File: 2b1beda8-8065-34c5-85e4-1e74341439ed.roa (raw, json)
Hash identifier: NLnTzL+o6E20j0zRhDNTWDefhwZPh3GvPXo3vTrQ4rk=
Subject key identifier: C6:40:2A:F9:69:D1:EF:FE:5D:C5:DA:78:85:51:4E:5E:47:04:C7:E4
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD6DF117492CBFEF2E3FD70
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1beda8-8065-34c5-85e4-1e74341439ed.roa
Signing time: Tue 26 Sep 2023 21:07:53 +0000
ROA not before: Tue 26 Sep 2023 21:07:53 +0000
ROA not after: Mon 25 Dec 2023 22:07:53 +0000
asID: 397218
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d6:df:11:74:92:cb:fe:f2:e3:fd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:07:53 2023 GMT
Not After : Dec 25 22:07:53 2023 GMT
Subject: CN=873c9808-b81e-48da-81cc-0decb2954ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:e5:46:57:fb:1c:22:06:a6:07:51:97:f5:
98:1b:5d:68:b0:20:86:f7:a9:2c:4e:37:a4:56:e7:
e2:cd:5d:27:67:c9:cc:ab:aa:7a:34:fa:45:c9:78:
1c:a5:1b:a5:f0:4d:bf:63:61:81:d8:a1:9a:d8:04:
91:27:b2:a3:d3:a8:7e:c1:3a:50:0e:1c:1a:f1:40:
30:c5:29:3f:dc:bc:7f:df:b1:a8:b1:ef:11:e8:04:
5b:3e:e3:2c:91:6c:21:6b:7b:2a:96:df:31:2c:04:
85:f7:f1:95:4b:82:c9:a1:ce:b3:cc:f9:72:d5:f4:
2d:12:4f:ce:c4:fa:01:42:f4:28:01:21:0e:49:c5:
8c:d0:f1:67:6b:32:59:53:d7:98:11:93:32:00:23:
10:d9:71:b1:92:70:d6:23:64:a6:3e:b2:27:35:3c:
72:fa:63:b3:bb:62:9e:8e:90:fd:8f:7d:dd:ac:f2:
c4:dd:56:ee:18:40:a6:0c:87:2b:10:db:cb:bb:95:
2c:cc:a1:2b:a1:2f:13:a2:48:29:87:18:68:39:54:
99:72:fd:c7:16:bc:37:39:07:f1:fe:37:da:7c:c0:
93:31:6c:1b:c4:4e:10:6d:70:01:e1:ff:de:2e:46:
d7:96:cf:a6:62:82:45:4e:72:51:de:69:69:d8:74:
a7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:2A:F9:69:D1:EF:FE:5D:C5:DA:78:85:51:4E:5E:47:04:C7:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1beda8-8065-34c5-85e4-1e74341439ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:42:78:21:c9:2e:2a:d0:ea:72:e5:e1:9b:90:8e:64:a2:d8:
c7:bc:e5:d2:44:02:bb:dc:d4:2c:c4:f2:b3:1c:cb:e0:a5:87:
3e:18:5e:c2:96:bd:52:2c:14:95:ca:2d:1b:13:3f:ff:a4:b1:
0c:9b:7b:58:ea:c9:bf:83:2f:9c:8f:ee:8c:f6:e2:7b:f1:a0:
78:39:d8:44:19:0c:25:9e:f1:29:fd:bc:c3:d7:02:d5:9c:0a:
af:c9:8e:20:b4:90:3c:fd:80:c5:7c:22:85:7d:a2:8b:1f:b1:
62:ab:ca:0e:a3:cc:81:9c:41:00:f1:ad:14:f0:fe:fc:75:a0:
f2:94:7c:50:fe:38:68:43:61:0f:3f:87:ad:40:a8:c6:02:1c:
48:98:24:a0:78:04:da:fe:6e:e1:6c:37:37:b7:e4:40:fd:a9:
0f:f3:f4:a5:dc:79:19:6b:e2:75:b4:a6:40:0a:19:2a:df:81:
ab:3c:1a:ac:c7:05:94:ac:4a:10:e4:e4:01:30:42:98:c1:5b:
b7:32:71:8b:0d:e0:39:d2:77:40:4d:c6:84:9b:13:e6:f0:25:
68:66:a2:44:11:6c:e7:30:db:28:a3:82:3e:3f:c7:97:06:53:
89:f2:fa:35:7d:54:d7:c9:88:18:06:4b:49:1b:84:d9:2f:9c:
fe:bb:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 22:25:57 2023 by rpki-client on console-ams.rpki-client.org