Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/406acaf5-95f5-378a-a638-ae0e121bf34c.roa
File: 406acaf5-95f5-378a-a638-ae0e121bf34c.roa (raw, json)
Hash identifier: cpDM7yygFn4K80a6Qwx+S9VoSppdugKd0WDe/ZUPB8Q=
Subject key identifier: A0:11:EC:0B:F2:B9:34:44:AF:92:00:F4:DE:FC:EA:66:64:6A:FD:6F
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AA2BF5EE38CFB981CC9F260
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/406acaf5-95f5-378a-a638-ae0e121bf34c.roa
Signing time: Tue 26 Sep 2023 19:22:52 +0000
ROA not before: Tue 26 Sep 2023 19:22:52 +0000
ROA not after: Mon 25 Dec 2023 20:22:52 +0000
asID: 397239
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:a2:bf:5e:e3:8c:fb:98:1c:c9:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 19:22:52 2023 GMT
Not After : Dec 25 20:22:52 2023 GMT
Subject: CN=e82ab0e2-0797-4281-9e9d-f5d543158b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:e9:cd:b8:f1:29:b8:b2:f9:69:d0:98:6a:
29:06:19:3c:ce:99:3e:46:29:93:ba:2b:be:8f:76:
1e:23:93:e3:fd:01:98:0c:f7:27:b1:35:5f:dd:ef:
10:7d:76:85:e2:12:c5:60:5b:13:f0:f7:48:21:ef:
1d:3c:e5:16:76:90:92:93:03:3f:de:5e:38:46:33:
6f:54:ce:7b:2e:cb:4d:4b:e7:a3:d0:e3:8a:8f:e5:
5b:b8:8a:e6:16:9d:5c:d7:3b:c5:38:ba:f6:87:b3:
44:a8:26:0a:66:18:22:00:e6:63:7e:8c:f4:d7:cc:
a6:b6:f7:f5:2b:6f:4d:88:f2:f4:aa:a4:a0:ce:3f:
4d:49:e2:62:57:19:f9:2d:44:3b:c8:7d:92:ac:09:
84:73:e0:75:2b:a2:60:fc:06:63:07:44:f9:ae:2e:
62:aa:bc:3a:71:2d:b6:3c:c5:51:f0:82:31:7c:ba:
c0:f4:04:55:0e:09:3c:ce:ae:1b:f0:d6:45:97:ec:
f7:d6:df:52:c0:56:9c:14:65:04:1f:63:ed:a7:f0:
f9:f5:84:a9:e5:92:ce:87:05:11:d9:fa:1d:ae:b3:
e3:66:c6:c9:4f:20:70:68:f1:dd:6a:60:93:b9:5c:
51:db:92:8d:92:ac:c1:46:c1:83:38:8e:07:15:8f:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:11:EC:0B:F2:B9:34:44:AF:92:00:F4:DE:FC:EA:66:64:6A:FD:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/406acaf5-95f5-378a-a638-ae0e121bf34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:fb:1f:3f:84:23:4b:7c:2a:79:98:42:d9:b9:fa:6c:cf:a3:
54:d3:48:9a:1c:ea:92:bf:11:75:28:54:d6:be:0d:c4:77:a0:
9e:bb:a6:76:c2:1d:dd:95:3d:86:7e:b8:3f:6d:e1:c6:f9:dc:
50:c2:00:30:26:2f:d2:1f:01:b5:9d:59:81:5a:2a:68:ea:65:
01:da:73:75:af:68:08:da:32:86:db:4f:c3:e9:cd:c2:62:7a:
f1:1f:70:07:f9:db:0f:d0:34:36:4b:55:b6:3d:e3:31:20:1e:
3d:8c:d8:79:7b:60:cb:cc:70:18:93:83:27:16:8c:10:2d:21:
01:bd:23:b9:ce:16:1a:41:bb:5f:59:65:75:a3:56:d2:40:2c:
e5:56:47:f5:af:2f:95:fb:f9:3a:b7:63:8d:3e:79:40:72:76:
99:f7:cb:ed:a0:f4:9f:68:36:fd:65:79:b7:be:75:76:86:b5:
22:31:8a:0a:b1:93:39:c2:d7:ae:e5:6a:49:e1:a4:a2:32:c7:
a3:2e:c7:a7:99:dd:67:13:8d:e4:7f:93:65:10:23:b4:ca:50:
7c:ab:44:8a:0f:8b:b5:c4:93:5e:30:98:36:c7:b4:e4:dd:2d:
2c:dd:29:e5:d1:d3:0c:af:7c:ad:89:43:99:50:37:7c:c9:1c:
c0:81:3a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 20:19:51 2023 by rpki-client on console-ams.rpki-client.org