Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/31b08447-0ce5-386b-b641-c982f50f43be.roa
File: 31b08447-0ce5-386b-b641-c982f50f43be.roa (raw, json)
Hash identifier: Hm2GJGWK+WPQgHKHO8G2lceVQi+4Q+gs0C3CUd/LMlM=
Subject key identifier: 9D:F1:08:F4:82:64:2E:79:C9:90:C3:EF:96:FC:40:99:A0:3C:0B:C1
Certificate issuer: /CN=7838225a-28c8-4c97-8ba3-272c018c5ee5
Certificate serial: 010D0C9F43285843FA88FDE46FB6DB3B6CDC9580
Authority key identifier: 14:4C:2B:DD:17:84:8D:53:A6:6E:0A:BC:7F:21:DB:78:B4:31:03:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/31b08447-0ce5-386b-b641-c982f50f43be.roa
Signing time: Thu 23 Nov 2023 02:00:16 +0000
ROA not before: Thu 23 Nov 2023 02:00:16 +0000
ROA not after: Wed 21 Feb 2024 02:00:16 +0000
asID: 1239
IP address blocks: 158.51.228.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:fa:88:fd:e4:6f:b6:db:3b:6c:dc:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7838225a-28c8-4c97-8ba3-272c018c5ee5
Validity
Not Before: Nov 23 02:00:16 2023 GMT
Not After : Feb 21 02:00:16 2024 GMT
Subject: CN=1bac34ab-2210-4003-9c0c-8095cb8eec65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ef:35:73:48:87:74:ce:82:44:de:d0:a1:e5:
18:70:95:82:5e:01:e2:03:51:5b:8e:07:fe:49:e7:
09:85:39:4a:6c:93:0f:8f:79:84:46:73:43:92:89:
79:36:17:68:b0:b6:94:bb:ed:7f:84:23:19:b0:b4:
e7:a1:56:44:6e:5e:e0:63:8e:ae:ea:27:9f:49:20:
e3:76:36:36:9d:8e:4a:a3:22:26:34:81:1e:bc:ab:
e2:c7:3d:d8:b0:f9:37:6c:e1:26:d9:f0:20:5e:c7:
47:9f:60:8d:ef:d9:41:f4:a7:72:19:60:a1:b0:bd:
16:b6:9c:12:d6:8b:97:ad:fd:59:09:8e:72:6a:10:
46:02:94:a6:84:9c:da:36:93:88:ef:b2:e9:6a:2c:
0b:70:14:d1:80:b5:f4:a8:0c:b6:57:af:db:b1:31:
29:5d:1f:ec:82:e0:7e:bc:90:d6:7d:28:8c:ec:e1:
5c:63:9d:e7:bc:63:0d:f4:a0:45:03:a2:14:23:75:
b8:29:87:b6:17:cc:37:f5:66:c1:0a:37:3f:8a:be:
02:25:ae:8d:37:2c:c2:43:a6:5e:56:0d:c1:5b:15:
63:4e:f1:be:97:3b:13:e4:78:7b:d8:dd:f5:3f:7b:
30:e1:7c:4c:f4:1e:3e:19:7c:47:de:66:65:10:b8:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F1:08:F4:82:64:2E:79:C9:90:C3:EF:96:FC:40:99:A0:3C:0B:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/31b08447-0ce5-386b-b641-c982f50f43be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.crl
X509v3 Authority Key Identifier:
keyid:14:4C:2B:DD:17:84:8D:53:A6:6E:0A:BC:7F:21:DB:78:B4:31:03:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:03:6d:26:be:f8:c2:a9:11:3b:29:09:0e:03:b8:0f:57:70:
2a:43:9b:fd:67:43:d5:47:ff:88:6d:47:3d:49:f2:9c:3c:b3:
ac:ae:b5:1b:14:7d:ef:87:3f:48:d7:11:d7:9e:eb:bc:d6:12:
29:fe:0e:d9:a1:57:f2:ad:2d:97:32:89:8b:06:6c:bd:7b:e4:
42:1f:28:84:84:7e:6d:68:e4:84:34:48:6f:ab:7f:5a:94:37:
e0:a5:d4:ee:12:c3:1a:00:fc:c0:80:68:9a:95:61:3b:3c:69:
a7:99:64:25:1d:ce:45:d2:59:83:4c:f0:a8:7c:de:b1:6d:86:
57:1c:16:99:e2:02:05:f1:fa:ef:6b:b2:d0:4f:b3:72:74:a6:
38:64:85:7e:4b:43:3f:ab:92:30:3f:73:c2:e0:89:fe:a4:04:
3b:60:c1:ef:bb:ac:69:8e:1d:40:27:75:43:26:71:7a:95:52:
e9:62:81:c1:67:3c:e5:87:8d:50:6a:e1:db:57:f5:22:d0:50:
0b:b1:05:8f:93:33:f7:7d:21:81:66:b7:f3:61:87:75:3f:e4:
bc:f1:81:1d:9f:64:63:cc:42:26:36:0b:b8:07:eb:53:8a:42:
ae:03:e8:a9:aa:3b:50:27:d7:bc:f8:3c:e9:1d:16:95:a4:4f:
bf:c1:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 12:12:29 2023 by rpki-client on console-fra.rpki-client.org