Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0bb409b-b5b8-395a-90df-f75fc6d82028.roa
File: c0bb409b-b5b8-395a-90df-f75fc6d82028.roa (raw, json)
Hash identifier: s++abLaSGtreqNc6R0k2/BADbRlBBNQY6KyvvWOH7kE=
Subject key identifier: E7:2C:CE:F1:E2:58:2F:39:41:36:57:DC:22:2E:58:F1:8D:90:56:15
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD6DEE84606534C3335EB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0bb409b-b5b8-395a-90df-f75fc6d82028.roa
Signing time: Tue 26 Sep 2023 21:07:53 +0000
ROA not before: Tue 26 Sep 2023 21:07:53 +0000
ROA not after: Mon 25 Dec 2023 22:07:53 +0000
asID: 397228
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d6:de:e8:46:06:53:4c:33:35:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:07:53 2023 GMT
Not After : Dec 25 22:07:53 2023 GMT
Subject: CN=eaccd03e-1f47-4cc6-82ae-c8a9c4fd7ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:86:8f:79:09:64:d0:01:a4:e8:9b:2b:39:
f6:b0:d7:ab:df:99:99:8b:55:c5:f3:98:e8:84:ce:
90:db:1b:70:30:28:b9:ad:e4:eb:21:e9:c8:51:a8:
9f:6c:a9:1f:98:3e:d3:e2:f3:4c:74:67:01:58:fc:
61:c1:11:a1:29:f2:c3:a0:17:ef:a3:c8:05:01:c9:
af:ac:ba:02:fb:ff:be:4c:e0:94:06:ea:45:c6:aa:
0d:32:25:36:a5:c8:66:0b:1b:a4:ff:0c:76:9a:75:
70:04:5f:17:f8:8b:fb:6f:98:7c:98:60:e1:17:e8:
12:cd:dc:03:83:37:0c:0f:f4:b7:1e:31:4e:8b:6b:
0b:cc:93:3a:88:d6:b2:f4:65:e9:7e:20:60:2b:75:
91:57:69:81:28:11:48:eb:6c:c6:c9:0e:4e:b8:4b:
b5:15:51:1b:dc:1c:be:ea:3d:c2:77:1e:be:d1:85:
2e:9f:94:38:0e:3f:56:2a:3d:5e:37:46:40:57:95:
b2:f3:59:56:b5:96:5c:9d:13:a2:f3:5d:a0:d4:41:
7a:4d:c8:0e:ea:0e:25:29:6f:38:38:2e:a9:41:1e:
10:3b:da:00:ed:81:15:1f:5c:62:46:4f:a4:da:8c:
18:ad:cd:c3:6f:d4:85:5a:e0:41:5a:6e:cd:b0:e7:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2C:CE:F1:E2:58:2F:39:41:36:57:DC:22:2E:58:F1:8D:90:56:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c0bb409b-b5b8-395a-90df-f75fc6d82028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:26:ed:af:43:ee:e2:d6:86:f9:40:3a:0c:50:0b:77:f3:b5:
ae:41:34:23:74:2f:22:74:7d:1f:66:1a:02:87:aa:41:18:ce:
9b:59:8a:27:b4:9f:cc:30:c9:db:e2:4e:f2:c2:90:3b:10:32:
a0:80:2c:e2:8a:de:ba:9c:4c:af:eb:e2:8a:36:3b:44:be:19:
af:15:34:a1:86:2c:f2:18:41:d6:10:d4:f1:8c:aa:05:b9:39:
18:89:d1:6f:b3:d1:d3:ea:e9:3f:26:f4:0b:23:b0:5e:02:31:
75:37:0a:e5:a1:fb:0b:fe:e5:fc:75:ea:fd:7a:c1:85:15:35:
7b:32:3f:6a:ba:12:83:4d:da:68:64:d1:d2:96:eb:da:6a:bb:
ee:06:cc:b5:de:14:e1:92:0d:1e:22:74:21:41:80:fb:79:2a:
78:c7:e3:63:10:bc:86:be:89:ad:21:61:28:ed:0e:cb:6a:94:
f0:98:d1:dc:af:c4:a3:d6:fc:cf:ca:e1:35:3b:85:f2:d7:6b:
ef:b3:e6:65:21:7c:a6:10:54:84:98:51:24:c3:49:01:8f:90:
d3:55:39:de:db:07:5e:20:6b:f4:36:83:41:ea:0b:fc:7e:68:
29:42:3e:20:cf:3f:52:3f:f3:50:dd:02:79:fc:c0:4d:e5:3e:
6f:6c:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 22:25:57 2023 by rpki-client on console-ams.rpki-client.org