Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/8054a03f-c076-3cf4-b141-b486165b2f02.roa
File: 8054a03f-c076-3cf4-b141-b486165b2f02.roa (raw, json)
Hash identifier: OIIWDQuX23HHLB/8Nw+hKeTLV2CaPHMF8KRDu09DbuM=
Subject key identifier: 88:C0:3B:47:29:01:73:C5:1D:21:7A:08:52:A0:BA:AE:D9:E4:EF:AE
Certificate issuer: /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
Certificate serial: 010D0C9F43285840EECA82060AD931FA264E2280
Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/8054a03f-c076-3cf4-b141-b486165b2f02.roa
Signing time: Wed 22 Jun 2022 14:48:08 +0000
ROA not before: Wed 22 Jun 2022 14:48:08 +0000
ROA not after: Thu 01 Jan 2032 05:00:00 +0000
asID: 701
IP address blocks: 147.185.88.0/24 maxlen: 24
147.185.89.0/24 maxlen: 24
2602:fb56::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ee:ca:82:06:0a:d9:31:fa:26:4e:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
Validity
Not Before: Jun 22 14:48:08 2022 GMT
Not After : Jan 1 05:00:00 2032 GMT
Subject: CN=0250fa32-b810-46e4-b206-c06579504b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:b2:b7:17:a1:ab:19:1f:bc:8b:7a:d5:5a:
b6:73:1b:e9:de:5c:9a:80:99:72:67:bd:4f:bb:80:
d2:cf:9c:00:fe:44:a0:3f:e9:37:76:60:06:fb:42:
7c:b9:52:2d:33:0e:c4:9c:0d:52:0b:01:25:c8:dd:
d6:87:95:6a:9a:4d:f7:dd:15:77:5e:74:7a:6b:5d:
87:b7:14:41:5d:01:a8:b9:03:da:a5:5c:01:67:65:
cf:57:ba:49:04:66:d8:71:6b:13:be:da:6e:d2:88:
19:8a:45:a4:68:f0:15:54:e8:ed:ba:38:f0:38:cc:
63:a8:bf:af:3b:2e:02:19:61:73:02:bd:3b:36:08:
0f:dd:a2:97:63:d1:06:43:df:80:e6:03:50:2f:f2:
0a:7a:74:d9:b8:5e:18:a1:32:98:38:76:3a:03:d8:
e6:fc:49:71:0b:e0:70:ad:ee:5b:45:ad:ef:a9:da:
fa:fc:3c:ac:1e:5e:0d:e7:99:fc:e5:c1:42:f0:4a:
00:4b:af:b6:fe:c0:41:11:cb:0b:86:89:2a:8b:27:
47:ab:63:dd:81:c0:a1:1b:17:96:10:98:1f:e9:59:
5f:4f:90:b7:bb:67:fb:c7:ad:e1:08:1b:59:6f:8c:
f4:22:68:42:23:78:d8:d8:84:d4:7f:69:7c:c0:c5:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C0:3B:47:29:01:73:C5:1D:21:7A:08:52:A0:BA:AE:D9:E4:EF:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/8054a03f-c076-3cf4-b141-b486165b2f02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl
X509v3 Authority Key Identifier:
keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
sbgp-ipAddrBlock: critical
IPv4:
147.185.88.0/23
IPv6:
2602:fb56::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e9:a1:63:8f:53:ce:19:00:a7:e9:e8:92:78:bc:5c:b2:93:
59:b1:ab:e4:c8:a4:e5:a4:c6:fb:53:10:68:83:aa:f1:b9:b4:
04:6f:04:14:8c:5e:9c:3f:5c:e6:fd:8b:68:9f:2b:b5:7f:0f:
3e:20:52:dd:47:08:40:96:2c:03:1f:89:fd:5d:d2:71:d7:14:
08:90:40:40:be:d8:48:fa:32:5a:8b:db:37:6f:83:9a:1d:5d:
ee:af:e9:7b:21:ea:9c:06:9b:02:31:cd:5b:46:72:bc:77:b9:
d6:de:78:ab:fa:8f:fa:f2:77:2d:ee:f0:6b:7f:93:9c:bc:98:
e6:5a:6f:c0:ef:2a:a4:85:e6:17:a6:8c:eb:c9:c1:ca:c7:96:
23:be:a6:6e:5e:89:2a:b4:f5:44:03:40:ed:0d:db:2c:92:5b:
53:cd:1e:92:64:34:e6:8a:dc:1c:ee:15:e5:d0:c2:4a:b4:b4:
6e:3a:45:40:0a:e5:c3:57:b9:b5:f6:d2:c4:ee:bd:ee:28:bb:
77:f0:6a:3d:82:f1:c9:ea:14:2e:be:91:3a:42:3d:ce:f0:8b:
8d:ce:68:e9:67:d5:4f:a2:34:e1:28:ac:97:67:b6:ae:ea:43:
45:b4:01:50:f8:95:92:6b:7d:bc:0b:c7:b2:c6:9b:fb:8e:36:
1c:47:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:16 2023 by rpki-client on console-ams.rpki-client.org