Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/6e2c571e-0288-3d74-9b29-434914011208.roa
File: 6e2c571e-0288-3d74-9b29-434914011208.roa (raw, json)
Hash identifier: 0bZbW9cN0+H4wnXxjobztfrMrDLSRXfTibKMJPd68LU=
Subject key identifier: B7:51:6D:A2:9D:9C:3A:C6:DF:93:63:88:34:C3:EB:17:51:50:F9:81
Certificate issuer: /CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
Certificate serial: 010D0C9F4328584283561896AF59CC08C29AF4C0
Authority key identifier: 83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/6e2c571e-0288-3d74-9b29-434914011208.roa
Signing time: Tue 11 Jul 2023 16:29:38 +0000
ROA not before: Tue 11 Jul 2023 16:29:38 +0000
ROA not after: Mon 09 Oct 2023 16:29:38 +0000
asID: 8075
IP address blocks: 147.140.224.0/24 maxlen: 24
147.140.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:83:56:18:96:af:59:cc:08:c2:9a:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2
Validity
Not Before: Jul 11 16:29:38 2023 GMT
Not After : Oct 9 16:29:38 2023 GMT
Subject: CN=9d989c4f-c10f-4a5e-ae52-af5b992e85a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:83:99:e1:f6:74:59:c0:e5:92:05:56:8d:31:
ab:cc:80:81:08:76:52:9e:5b:8a:77:cf:8c:c1:f3:
b3:d5:36:45:73:47:b5:b3:7f:24:8e:75:2c:60:1c:
87:f1:dc:08:78:7d:9c:55:77:16:c7:f5:1d:8c:bc:
44:5d:46:50:b1:49:56:60:20:95:de:22:f4:f5:da:
ea:5b:34:99:7e:85:22:11:a3:55:0b:a6:35:6d:56:
f3:69:11:12:56:52:14:1f:45:88:a5:15:b7:51:a2:
3e:80:1c:62:5a:de:6f:15:22:98:79:c7:53:2f:c8:
65:c7:dc:c9:0f:ae:46:c7:50:8e:99:bd:18:c4:2b:
d9:4d:44:0d:ae:e9:17:ab:82:87:a4:b2:81:ff:e3:
18:06:ac:a3:9d:76:86:f6:91:cc:2a:b6:2b:a8:fa:
8e:cc:30:3b:98:56:91:5c:60:ac:f5:72:5e:ef:56:
e4:d5:be:95:4d:ac:d8:2e:45:90:9c:b6:70:84:70:
a6:08:02:aa:c1:9b:36:86:6d:21:a4:17:a9:26:52:
be:ac:15:11:16:39:3f:ff:d9:6d:d0:62:57:86:8a:
90:54:98:61:89:70:5d:59:3d:79:25:c5:d2:cf:a7:
2d:4f:7c:6c:c0:46:3a:de:cd:73:ae:d7:13:2c:69:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:6D:A2:9D:9C:3A:C6:DF:93:63:88:34:C3:EB:17:51:50:F9:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/6e2c571e-0288-3d74-9b29-434914011208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.crl
X509v3 Authority Key Identifier:
keyid:83:1A:B2:D7:19:72:57:1F:DB:58:AD:92:20:97:13:91:29:4A:3E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e4fa05b6-d1b7-43cf-aa9b-4d3abce2dde2.cer
sbgp-ipAddrBlock: critical
IPv4:
147.140.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:39:97:b4:ed:96:25:61:4e:15:88:c0:1b:c0:c3:0f:df:9f:
b7:f1:f2:22:e9:b3:66:84:4b:52:36:09:47:af:cd:36:9e:ea:
74:1d:46:66:cd:d3:e5:82:87:1e:69:09:fc:be:a8:47:f0:ee:
77:4b:3b:eb:bd:b3:fd:5e:5c:40:0b:88:d6:d5:c4:35:7b:30:
fd:1a:9a:54:d2:d4:7b:26:40:74:72:58:7a:18:da:5b:f1:5a:
e1:0c:b6:f6:38:14:eb:34:ca:d2:59:af:eb:28:f0:bb:14:03:
1d:a1:de:89:86:75:b2:a5:64:b8:85:8c:a9:a2:15:f7:f3:b5:
25:c8:16:7d:20:69:5d:ce:a0:b9:aa:af:e2:f2:39:1f:d2:f9:
0f:f1:a7:05:4d:8f:ec:b3:ea:8b:ba:d1:3f:8c:e6:1b:85:51:
86:34:ea:8f:d0:e7:da:2e:96:ba:35:76:0e:89:b1:97:73:4c:
6f:5e:e0:8f:0f:e4:1a:57:c8:35:33:85:bb:d3:a9:14:00:79:
11:2b:a9:6c:87:d5:88:34:39:3f:50:7f:58:ae:53:50:91:f8:
c9:b1:9d:ce:a1:4d:11:94:e1:c4:5d:54:2f:19:44:27:07:16:
b2:4a:dd:f5:78:6b:b0:ed:a4:c4:1a:07:ec:8e:e1:24:e1:a7:
7e:3f:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:47 2023 by rpki-client on console-ams.rpki-client.org