Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5abdca59-a34a-3897-bbae-717b94a5d34a.roa
File: 5abdca59-a34a-3897-bbae-717b94a5d34a.roa (raw, json)
Hash identifier: d36+G28s9tYY06KbtLfI0upJZT+qONTJDmyypSLEcxA=
Subject key identifier: 73:3E:84:72:FA:F1:24:E6:41:8F:45:73:F0:13:68:59:1B:82:C3:CE
Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial: 010D0C9F432858470C4B11324B340DB98E19A980
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5abdca59-a34a-3897-bbae-717b94a5d34a.roa
Signing time: Fri 30 Aug 2024 13:00:41 +0000
ROA not before: Fri 30 Aug 2024 13:00:41 +0000
ROA not after: Thu 28 Nov 2024 14:00:41 +0000
asID: 63199
IP address blocks: 148.153.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 06:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:0c:4b:11:32:4b:34:0d:b9:8e:19:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Validity
Not Before: Aug 30 13:00:41 2024 GMT
Not After : Nov 28 14:00:41 2024 GMT
Subject: CN=31b4eae7-51a2-42e8-a642-7c4123bae2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:9e:a2:0b:9a:f4:60:d1:f6:ed:cb:9b:9d:
ac:51:1b:bc:86:5d:b8:a1:b2:65:7e:41:9d:cc:df:
30:6d:bb:9f:67:b3:3d:3e:81:d5:a3:d8:8b:03:67:
23:0e:8d:08:93:6f:2c:4a:df:aa:3d:32:d7:25:1c:
b4:0a:7d:cf:f2:da:81:f0:6c:9f:cc:d9:06:f8:45:
88:51:ef:04:08:1b:f0:bf:f1:ec:2a:f6:82:06:6f:
22:41:e4:d5:75:b9:36:1b:72:bb:5a:09:31:e4:ee:
ed:0d:21:73:b5:d1:2d:8e:58:af:87:f0:a0:f7:97:
e2:aa:59:4e:4d:c0:01:47:b3:f1:42:00:20:8f:4b:
1f:47:ef:16:48:2b:c4:e1:7d:5b:49:f4:65:c3:e4:
6e:03:52:00:95:0f:17:fa:0b:1e:1b:11:e7:2f:8d:
bb:94:29:51:e9:a7:35:09:f7:7f:c1:f1:74:b8:f8:
9d:63:04:9e:48:e0:70:b2:c6:82:37:26:51:0f:d7:
52:3a:49:4f:66:df:44:32:a0:44:2c:c6:1a:e0:ff:
a7:34:ca:10:45:9f:2d:05:a8:bf:ef:33:f3:72:b2:
d7:37:5c:fb:b4:8a:76:94:b8:a9:31:f1:68:2f:52:
24:6b:a9:03:af:bc:bd:19:2b:63:b8:95:27:c2:e7:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3E:84:72:FA:F1:24:E6:41:8F:45:73:F0:13:68:59:1B:82:C3:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5abdca59-a34a-3897-bbae-717b94a5d34a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
X509v3 Authority Key Identifier:
keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
sbgp-ipAddrBlock: critical
IPv4:
148.153.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:da:0a:82:33:f2:e7:d7:f8:26:58:09:8a:e2:06:22:cd:34:
9b:78:36:b8:c8:45:c9:53:1c:8d:fb:83:7f:b0:b1:22:75:1e:
08:ae:fe:a5:2a:14:c3:be:45:69:67:7c:6b:00:48:d6:5f:a6:
bd:52:b5:10:26:f0:6b:5b:67:44:56:30:c9:e5:3a:52:28:25:
93:61:fc:8a:57:f7:e8:19:ec:73:31:96:a8:0e:d4:ce:ce:61:
9b:f0:f8:a4:be:0f:8f:db:1b:9a:b4:d8:c3:8e:c8:e6:c2:af:
de:1a:45:56:ba:1e:56:8c:06:22:bf:91:87:10:8b:d6:88:a6:
a6:50:d7:f0:ef:3f:70:3d:0e:ce:3d:71:3d:9d:ba:82:ab:9f:
e3:86:57:71:04:1b:1f:90:9a:e0:48:b9:a3:30:f3:55:b5:d6:
c5:45:18:7d:b5:58:93:3e:7c:d9:20:28:03:66:b7:d3:cf:90:
01:c6:c3:18:99:68:ad:32:ce:37:4b:a1:a8:6f:fc:81:49:27:
aa:c3:df:b1:c2:50:2f:23:39:e0:9d:45:05:2b:1d:4d:df:40:
c0:53:76:ff:56:cd:fc:f1:4c:b1:5d:55:96:dd:bb:e3:aa:13:
f1:07:ce:b6:2c:b0:55:c4:fe:db:53:e7:39:3c:a1:7f:a4:b6:
67:07:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 09:02:42 2024 by rpki-client on console-ams.rpki-client.org