Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fb2e68a1-9ad9-399b-a6dc-af1de87d5e79.roa
File: fb2e68a1-9ad9-399b-a6dc-af1de87d5e79.roa (raw, json)
Hash identifier: 6IgtnW0VoEi3J7ncD8+FxEMWOOhwA9ljOxM7WnPtf30=
Subject key identifier: 1D:DB:F5:31:6C:59:A6:FA:5D:D3:38:65:4D:A7:AD:AA:20:70:FC:C2
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F4328584360081306366D4A17A09AE3A0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fb2e68a1-9ad9-399b-a6dc-af1de87d5e79.roa
Signing time: Thu 28 Sep 2023 17:46:04 +0000
ROA not before: Thu 28 Sep 2023 17:46:04 +0000
ROA not after: Wed 27 Dec 2023 18:46:04 +0000
asID: 397242
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:60:08:13:06:36:6d:4a:17:a0:9a:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 28 17:46:04 2023 GMT
Not After : Dec 27 18:46:04 2023 GMT
Subject: CN=0f7b4757-3aae-4a2a-9a5a-c7cbc272c5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:da:f5:e5:60:7e:b4:95:18:db:de:4b:47:
a7:59:e7:a6:af:db:4b:03:95:1a:d0:6c:0e:ba:f1:
85:0a:5d:45:2b:ae:3b:ad:9c:25:e0:0b:c2:b4:9b:
b8:48:8c:8e:70:7e:69:19:3a:ba:19:fc:6a:5c:81:
4f:8f:9d:b8:67:46:9c:66:10:45:4f:11:6a:91:64:
20:80:b3:ee:dc:62:c2:13:07:11:9e:8f:a1:04:1c:
2d:16:a0:41:a6:61:dd:e1:af:87:73:5e:92:77:52:
dc:87:07:d7:9a:40:17:5c:f4:17:2d:a6:da:02:a1:
c8:22:52:f7:2e:71:54:5d:69:6b:07:d0:3c:fb:5d:
68:4d:a8:c1:87:7b:9b:a6:72:92:80:1c:41:0d:fe:
c8:4a:b7:8b:1c:97:de:04:36:82:19:f4:4f:00:75:
41:5a:71:cb:8b:c7:6c:6e:c1:39:03:80:b1:ab:9d:
60:f0:0a:34:93:84:03:f7:33:51:84:0e:ef:a9:35:
a1:84:aa:1a:2e:7e:7c:45:b5:64:8a:f4:ff:5a:55:
37:63:98:40:14:2e:fe:9a:b8:1c:49:4b:7a:e9:c9:
c0:2e:29:8f:d0:9b:c4:32:2d:37:a6:a2:10:a1:12:
1d:ad:4f:9a:09:fb:09:88:f7:7f:4e:0f:58:02:ec:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:F5:31:6C:59:A6:FA:5D:D3:38:65:4D:A7:AD:AA:20:70:FC:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fb2e68a1-9ad9-399b-a6dc-af1de87d5e79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:1d:27:d8:de:25:cd:b8:6f:b8:3f:a5:f9:f1:16:90:e8:29:
a1:a8:70:15:10:01:80:ce:24:b7:57:1d:63:1a:3a:df:8b:7f:
6d:fe:3b:40:14:2f:48:68:1d:d6:1a:41:1a:34:94:37:b2:7d:
25:67:59:ca:50:1f:b6:a1:35:46:fc:80:4e:e2:6a:79:2b:e5:
86:ee:06:ea:f6:13:bf:eb:34:2d:3e:4c:a9:c7:44:a6:1a:d8:
60:65:37:9b:2c:0f:7d:f4:ca:2f:08:65:9f:6f:df:34:8c:39:
dc:19:65:d1:4c:15:d9:13:44:50:ba:0f:c5:05:85:88:b8:eb:
77:19:02:d3:ce:de:fa:2e:40:cb:d8:b0:d4:93:67:93:31:a0:
17:be:d2:6e:cd:e9:f3:33:cc:87:39:39:e4:d6:75:bb:3e:0f:
62:25:e6:49:de:2b:0b:e2:f4:02:24:a9:90:9c:99:cb:a9:2a:
48:6c:57:a4:f6:cb:6b:35:be:5d:d1:b7:5b:3b:7e:ee:29:72:
a2:dd:5c:92:cd:62:2c:2b:67:4b:2a:95:97:08:dd:ae:2d:0f:
a3:04:5f:65:1a:fa:b7:8a:4c:08:3f:7f:e3:a9:77:5f:88:9e:
71:ba:32:7f:50:5b:0c:04:2d:7c:7f:62:37:6e:08:94:8f:ec:
dc:3f:d1:d0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWENgCBMGNm1KF6Ca46AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTIzMDkyODE3NDYwNFoXDTIzMTIyNzE4NDYwNFowLzEtMCsGA1UEAxMk
MGY3YjQ3NTctM2FhZS00YTJhLTlhNWEtYzdjYmMyNzJjNWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkva9eVgfrSVGNveS0enWeemr9tLA5Ua0GwO
uvGFCl1FK647rZwl4AvCtJu4SIyOcH5pGTq6GfxqXIFPj524Z0acZhBFTxFqkWQg
gLPu3GLCEwcRno+hBBwtFqBBpmHd4a+Hc16Sd1LchwfXmkAXXPQXLabaAqHIIlL3
LnFUXWlrB9A8+11oTajBh3ubpnKSgBxBDf7ISreLHJfeBDaCGfRPAHVBWnHLi8ds
bsE5A4Cxq51g8Ao0k4QD9zNRhA7vqTWhhKoaLn58RbVkivT/WlU3Y5hAFC7+mrgc
SUt66cnALimP0JvEMi03pqIQoRIdrU+aCfsJiPd/Tg9YAuwFPwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB3b9TFsWab6XdM4ZU2nraogcPzCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmIyZTY4YTEtOWFkOS0z
OTliLWE2ZGMtYWYxZGU4N2Q1ZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnJo6AwQA
nJq/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABsdJ9jeJc24b7g/pfnxFpDoKaGocBUQAYDOJLdXHWMaOt+L
f23+O0AUL0hoHdYaQRo0lDeyfSVnWcpQH7ahNUb8gE7iankr5YbuBur2E7/rNC0+
TKnHRKYa2GBlN5ssD330yi8IZZ9v3zSMOdwZZdFMFdkTRFC6D8UFhYi463cZAtPO
3vouQMvYsNSTZ5MxoBe+0m7N6fMzzIc5OeTWdbs+D2Il5kneKwvi9AIkqZCcmcup
KkhsV6T2y2s1vl3Rt1s7fu4pcqLdXJLNYiwrZ0sqlZcI3a4tD6MEX2Ua+reKTAg/
f+Opd1+InnG6Mn9QWwwELXx/YjduCJSP7Nw/0dA=
-----END CERTIFICATE-----
Generated at Mon Oct 30 22:39:19 2023 by rpki-client on console-fra.rpki-client.org