Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5b8f0e27-e465-3cc2-bcbf-a1265d586cc2.roa
File: 5b8f0e27-e465-3cc2-bcbf-a1265d586cc2.roa (raw, json)
Hash identifier: 2ehaP0rjCcE1GLqGAu49if4PR99palzu+MRziiAVuII=
Subject key identifier: 61:90:2B:98:0F:6A:37:8D:32:FB:86:D4:CC:B9:91:FA:4C:68:33:1A
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AA2BDD89C4033E28F6D0500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5b8f0e27-e465-3cc2-bcbf-a1265d586cc2.roa
Signing time: Tue 26 Sep 2023 19:22:51 +0000
ROA not before: Tue 26 Sep 2023 19:22:51 +0000
ROA not after: Mon 25 Dec 2023 20:22:51 +0000
asID: 397233
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:a2:bd:d8:9c:40:33:e2:8f:6d:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 19:22:51 2023 GMT
Not After : Dec 25 20:22:51 2023 GMT
Subject: CN=4af4dc0b-ecd8-4bfa-8675-3da99b3c549d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:35:92:00:69:f8:d7:43:e7:1c:56:57:98:
09:76:7b:53:fe:9a:8a:02:8a:d1:79:f0:bc:39:be:
c6:11:8b:50:f4:0e:a3:3f:d4:35:c5:42:8b:cc:68:
8d:7e:91:6b:11:c1:c6:8c:73:b1:3c:1d:3f:c1:ba:
f9:d8:64:71:0e:6e:ec:47:ed:51:89:57:d3:7c:a9:
b9:bb:50:3b:14:b6:48:b2:0d:9e:65:47:ed:96:c7:
fe:d5:5b:92:f9:aa:5e:eb:ea:3c:7c:5d:17:72:d6:
73:94:eb:8f:c4:89:72:1e:3d:4a:7d:40:b9:25:8c:
1a:94:21:b3:24:8f:0a:dc:52:55:6a:eb:87:08:1f:
aa:4b:26:c4:3d:52:4a:f0:78:79:a7:e8:d8:26:a3:
c6:95:06:41:90:ba:c0:24:b6:88:da:31:77:66:f5:
0c:24:bf:67:58:4c:cb:83:a5:87:af:fa:ce:cf:4c:
c9:45:dd:84:be:cd:3b:f2:55:41:62:47:a4:d9:83:
6d:e6:ca:56:44:8e:6d:22:e6:46:23:a6:0a:ac:f0:
5b:be:05:01:7d:15:f1:8b:c8:e5:ec:f9:23:24:97:
c7:b1:37:62:cf:01:10:23:7f:b0:97:37:bd:07:3d:
79:eb:eb:9b:f9:e7:f8:df:bb:be:3f:ad:84:dd:0a:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:2B:98:0F:6A:37:8D:32:FB:86:D4:CC:B9:91:FA:4C:68:33:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/5b8f0e27-e465-3cc2-bcbf-a1265d586cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:46:83:d1:e3:f8:bd:85:f0:2f:ad:f2:4a:94:0d:cb:3a:df:
d4:52:5c:92:4f:1e:e9:e1:4a:86:4e:c7:fd:a6:bf:c4:d9:42:
c6:4f:c4:01:8f:da:15:9f:7f:34:5c:13:b0:29:a1:18:8d:d2:
ec:ed:cd:20:14:3e:32:12:be:a5:7e:c4:22:d6:6c:0a:eb:23:
3e:ad:7e:d8:bd:37:c3:b3:ea:06:d8:32:72:cd:e8:c9:25:61:
7f:47:b8:2b:f5:36:d0:f7:50:1b:c4:38:96:a1:e2:2e:13:96:
9e:73:56:f0:fb:ba:26:25:4b:57:07:06:ed:9a:ec:9d:2d:7f:
64:b5:55:06:7a:e1:31:f0:11:d5:21:34:66:19:84:92:bc:a4:
68:0d:31:a5:c9:a2:9d:d1:cc:e5:95:be:17:82:7c:8c:f9:da:
7a:af:c5:0c:94:1e:42:6d:03:87:8b:1d:b8:83:1d:ea:f2:67:
03:4c:59:67:f2:07:fd:61:78:57:18:fc:71:32:d4:0c:e7:6d:
a2:69:e0:8e:b8:00:64:ae:37:ac:65:e1:76:76:25:c0:66:d6:
e4:0a:68:c4:c8:ad:8a:53:ac:d6:5c:05:35:2e:99:a5:0d:59:
da:6e:d4:f9:4c:52:f0:ee:e7:81:c8:3d:97:be:e2:bc:b3:43:
dc:b8:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 20:19:51 2023 by rpki-client on console-ams.rpki-client.org