Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/158d6c07-8246-3848-b108-3a413fa2e784.roa
File: 158d6c07-8246-3848-b108-3a413fa2e784.roa (raw, json)
Hash identifier: R4zFqTqGBaHe44MB8lXDSG32lgS6yR23srSEDDV5IoI=
Subject key identifier: D4:D8:70:31:5B:8B:E1:B1:70:EF:67:51:17:2A:D8:66:84:DB:82:08
Certificate issuer: /CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Certificate serial: 010D0C9F43285840A5DC9F170D04F3AD649D3D00
Authority key identifier: AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/158d6c07-8246-3848-b108-3a413fa2e784.roa
Signing time: Wed 18 Jan 2023 16:52:41 +0000
ROA not before: Wed 18 Jan 2023 16:52:41 +0000
ROA not after: Tue 22 Apr 2025 04:00:00 +0000
asID: 1239
IP address blocks: 134.172.0.0/18 maxlen: 18
134.172.64.0/18 maxlen: 18
134.172.128.0/18 maxlen: 18
134.172.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 13 Feb 2023 16:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a5:dc:9f:17:0d:04:f3:ad:64:9d:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c993bd-0997-43a9-a584-9bfe93e5b3cb
Validity
Not Before: Jan 18 16:52:41 2023 GMT
Not After : Apr 22 04:00:00 2025 GMT
Subject: CN=fceefef9-13ec-4d9b-bd88-bef08be9dc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:5b:e6:5b:df:f6:ff:60:83:be:95:71:22:
77:45:fd:22:32:74:10:ef:9d:37:93:79:58:8c:d8:
fa:22:29:dd:8e:03:d9:ad:24:1b:91:a7:cd:f1:51:
6f:ae:23:4b:7b:28:ab:86:e1:3a:41:9a:ff:fe:93:
fe:65:6f:d9:85:70:72:06:fa:e3:dd:b1:91:8d:ed:
77:76:ed:96:55:7b:45:d4:d2:74:14:9b:d9:f7:84:
4e:df:be:35:28:96:8e:fd:52:a4:0c:f6:8b:e2:4a:
d8:5c:13:7d:a5:9f:e8:bf:27:fb:58:46:c8:bc:fa:
06:fd:fe:ab:01:11:39:95:89:a6:d5:0f:35:ac:e5:
98:21:40:ba:dc:4d:df:0d:e2:00:0f:9a:ff:94:80:
de:d5:d2:93:3c:7b:4c:4b:b8:85:7d:a8:97:9d:8f:
6a:fd:94:d3:4f:10:b2:04:97:4b:91:80:d6:63:f5:
f3:ba:6a:fc:0a:91:2b:89:29:20:c7:64:2c:bf:00:
08:e4:ff:a0:2a:62:df:4a:c0:18:bd:e1:be:b4:58:
4f:6a:21:9b:19:df:66:99:62:c8:11:b0:b6:f6:8c:
79:15:00:c3:3b:78:73:54:50:d9:fc:4a:e2:13:60:
d3:89:e9:70:3a:b7:30:e6:4c:22:d9:f8:8c:f7:ba:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D8:70:31:5B:8B:E1:B1:70:EF:67:51:17:2A:D8:66:84:DB:82:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/158d6c07-8246-3848-b108-3a413fa2e784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb/66c993bd-0997-43a9-a584-9bfe93e5b3cb.crl
X509v3 Authority Key Identifier:
keyid:AE:30:E3:D1:B5:03:1B:9B:69:42:B9:6B:A1:10:C7:AC:07:9A:0B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66c993bd-0997-43a9-a584-9bfe93e5b3cb.cer
sbgp-ipAddrBlock: critical
IPv4:
134.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ba:a8:11:b0:56:97:4b:40:4f:a5:1e:31:b0:08:db:22:83:
41:d9:ea:95:71:71:2e:05:76:c3:a5:90:bf:da:af:ac:09:84:
6f:d4:53:69:93:0f:00:75:3c:bd:61:12:33:87:9f:62:de:4f:
71:d6:be:b9:15:3e:ad:27:73:22:3c:4d:f6:43:2a:44:9c:3a:
e8:17:5f:31:18:a5:d0:4c:d5:e1:01:87:40:5a:23:f3:2c:85:
a0:b6:cf:23:f6:c9:77:4e:48:7b:7a:16:a6:93:80:e3:d3:68:
18:d0:22:84:99:3d:a0:87:d8:da:d7:aa:8f:2f:49:35:47:f6:
fb:90:fe:e7:98:21:dc:63:84:12:a4:00:f7:9e:f9:84:16:3b:
18:35:dd:c8:e8:35:85:1c:09:12:0c:34:46:33:c9:cf:66:a7:
62:ca:39:6c:93:0b:12:2c:01:ea:c5:c8:32:b5:c7:47:66:8b:
b2:18:2c:29:b7:23:76:40:d8:11:12:e4:ae:f2:c1:f5:21:e6:
1e:e3:f4:80:c8:98:da:3e:db:3e:c7:7b:34:3b:e5:e9:de:db:
99:b0:60:f6:12:eb:7c:9c:3f:75:1e:be:15:88:0d:13:85:7c:
69:e0:6a:88:57:2a:32:4d:e7:40:b1:23:22:86:d0:cc:18:1b:
3f:73:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org