Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/1b650035-95a9-3f22-953e-09c0f40270e3.roa
File: 1b650035-95a9-3f22-953e-09c0f40270e3.roa (raw, json)
Hash identifier: USwlGCkRDcFrq1EUSPTZ00vfHzkT1Jl3LI/QaqfMWO8=
Subject key identifier: 79:1C:62:B4:E0:85:24:39:33:55:AF:03:E1:C8:71:D5:84:FA:11:26
Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial: 010D0C9F432858420E684AF330EC511885E34C00
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/1b650035-95a9-3f22-953e-09c0f40270e3.roa
Signing time: Tue 30 May 2023 19:16:43 +0000
ROA not before: Tue 30 May 2023 19:16:43 +0000
ROA not after: Mon 28 Aug 2023 19:16:43 +0000
asID: 3356
IP address blocks: 156.146.224.0/19 maxlen: 19
156.146.128.0/18 maxlen: 18
156.146.192.0/20 maxlen: 20
156.146.208.0/20 maxlen: 20
158.41.128.0/19 maxlen: 19
158.41.160.0/20 maxlen: 20
158.41.176.0/21 maxlen: 21
158.41.184.0/21 maxlen: 21
158.41.192.0/20 maxlen: 20
158.41.208.0/20 maxlen: 20
158.41.224.0/20 maxlen: 20
158.41.240.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:0e:68:4a:f3:30:ec:51:18:85:e3:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
Validity
Not Before: May 30 19:16:43 2023 GMT
Not After : Aug 28 19:16:43 2023 GMT
Subject: CN=a39c80ad-c94c-4fbf-a76e-6e17304f4b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2d:9a:f5:71:49:11:76:a2:d0:74:ca:5e:92:
87:eb:af:e5:ac:27:b5:8e:8a:ab:2b:9e:12:d7:6e:
66:d7:cc:ec:ca:27:a1:96:fd:e8:33:a3:bc:62:4c:
99:73:ca:fd:ba:91:e8:c0:37:59:61:5d:4e:2d:7d:
6c:a9:38:c3:73:c4:c0:02:ca:bc:35:7f:84:95:4c:
2d:0c:21:7a:5e:f3:69:3a:51:cb:5b:ea:31:34:64:
9e:ec:8e:36:ba:67:15:dd:f8:8c:02:a9:8e:de:87:
84:91:79:5c:52:6d:3a:4c:30:1a:b1:c3:f8:68:61:
e6:b3:9b:5f:ff:f9:2b:bf:30:b8:4b:96:b2:52:c8:
39:80:87:4e:c6:5a:dc:2e:3d:40:b2:82:ac:d6:15:
0f:df:9c:6d:72:0a:96:77:83:04:96:12:00:bb:d0:
b4:da:f7:3e:fd:18:73:7c:85:c2:ab:26:74:d4:5c:
0e:90:12:7b:eb:9e:eb:00:e9:72:c6:c6:34:9b:9b:
7a:5f:44:8f:44:fb:8e:23:af:55:49:4e:d8:20:e1:
bc:f5:b3:4f:b8:05:28:5f:f0:34:f3:7a:ed:a6:06:
e9:34:be:95:f9:a5:a0:e8:27:9b:28:03:77:16:b7:
e0:af:17:da:a4:fa:bb:05:ea:27:4e:79:19:14:5f:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:62:B4:E0:85:24:39:33:55:AF:03:E1:C8:71:D5:84:FA:11:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/1b650035-95a9-3f22-953e-09c0f40270e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
X509v3 Authority Key Identifier:
keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
sbgp-ipAddrBlock: critical
IPv4:
156.146.128.0/17
158.41.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:4d:d1:03:6b:19:cd:96:d6:74:20:5f:f5:34:75:27:df:d6:
8e:07:ae:88:16:7a:69:72:da:e4:c7:23:80:1b:6c:25:66:14:
75:61:2a:64:cc:ba:39:f6:20:77:8c:ec:f5:62:a4:5f:3f:c2:
ac:49:1a:b5:d0:a0:eb:28:65:6c:1d:17:f8:99:d0:37:e3:19:
10:81:4b:07:a6:b1:00:b8:f9:eb:eb:c7:26:9f:90:e3:85:86:
10:02:ff:7c:24:fb:04:87:e5:d4:d6:57:d9:29:80:d7:93:65:
46:68:86:cd:65:55:f2:5d:1c:24:8a:12:38:99:a3:45:01:d0:
6e:cc:cf:5a:6e:0b:7b:fc:36:48:e5:a4:d4:99:63:3c:12:f6:
43:b6:bd:35:91:57:a8:1e:c5:a8:aa:92:c3:4f:b3:ac:11:e8:
85:69:1d:6e:9e:35:b3:d4:67:44:9c:90:e6:7f:be:3c:11:3d:
22:a3:f3:25:01:f3:92:0b:06:19:06:25:76:2e:29:47:d7:db:
b0:4a:88:ea:26:4a:e0:56:67:73:31:20:9e:94:23:04:9c:e3:
e4:9e:ca:74:96:90:bc:53:25:1e:d8:e2:c7:71:dd:47:cc:75:
03:14:4d:af:55:b3:46:c9:09:e8:2a:43:06:d2:c7:9e:5f:bc:
86:98:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org