Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/296598c2-430a-3c48-b902-15aafcb1533e.roa
File: 296598c2-430a-3c48-b902-15aafcb1533e.roa (raw, json)
Hash identifier: g4zpK0isjkIPVtD3y4BjLgMT1t4itIiM/17uLo3VAms=
Subject key identifier: D6:7C:6D:37:6B:94:9F:B8:E0:CD:44:F1:74:19:AB:14:D8:D3:A7:0B
Certificate issuer: /CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
Certificate serial: 010D0C9F4328583FAD62BFE36F1AC641B1A21480
Authority key identifier: E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/296598c2-430a-3c48-b902-15aafcb1533e.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Tue 19 Sep 2028 04:00:00 +0000
asID: 6456
IP address blocks: 208.90.168.0/22 maxlen: 23
208.90.170.0/24 maxlen: 24
208.90.171.0/24 maxlen: 24
2620:0:cf0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 03 Nov 2022 15:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ad:62:bf:e3:6f:1a:c6:41:b1:a2:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Sep 19 04:00:00 2028 GMT
Subject: CN=80d55db2-094a-41f2-aa43-0cd368358370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:f6:71:14:cd:10:86:05:fe:69:67:f6:11:
d8:25:d7:2f:ba:dd:40:a1:2a:9c:a7:23:2b:8a:d7:
e5:9b:92:ff:23:02:52:e9:03:34:0e:20:d4:4a:c3:
5a:09:7d:03:c7:16:7a:32:7d:b9:cc:8e:d0:8b:a2:
b0:d8:d5:5e:36:1f:ad:a9:72:6e:3f:91:ae:20:bf:
87:25:b3:8d:05:cc:49:ff:99:9a:f6:1b:8e:1c:c5:
b6:43:fe:4d:6d:24:e0:89:92:1c:0a:d7:11:55:dd:
91:cb:19:ef:17:9a:02:60:9e:6e:e8:36:31:81:40:
dd:af:f6:f8:08:42:47:d4:5b:5a:39:2d:3d:28:54:
ff:00:50:68:3a:57:72:82:16:cd:1e:8e:42:b5:7d:
bc:30:b9:0b:d8:3f:c4:c5:c1:b7:ef:38:8a:4f:46:
6d:ff:a1:93:b1:40:a5:8a:c2:b3:8b:74:10:d4:28:
d5:f9:bf:bf:83:a2:31:03:a9:09:96:5b:81:cd:07:
4e:6a:89:e1:8a:32:88:e4:3c:9f:0b:54:e5:0e:5c:
f8:ec:0b:6a:b9:97:bb:69:d4:4e:8a:21:64:fe:4c:
56:bb:d5:86:62:bf:c4:c6:82:d6:2e:b7:4f:4a:ba:
f4:cd:77:62:3b:4e:0e:49:4c:59:bb:74:5d:dd:1a:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7C:6D:37:6B:94:9F:B8:E0:CD:44:F1:74:19:AB:14:D8:D3:A7:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/296598c2-430a-3c48-b902-15aafcb1533e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.crl
X509v3 Authority Key Identifier:
keyid:E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.90.168.0/22
IPv6:
2620:0:cf0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:94:04:d3:6b:04:d8:ae:fb:dc:05:86:e1:14:53:cd:ab:a4:
d4:25:fc:32:7b:c7:c6:de:96:5f:f8:1b:39:9a:be:11:10:49:
40:00:5b:9d:26:3d:db:67:93:8b:ba:b4:53:8f:f6:44:75:6f:
d8:43:1e:48:c9:a7:7f:3d:51:de:70:a2:23:59:08:44:0b:c3:
69:b9:d8:ba:ff:a9:e8:b6:e5:47:56:8a:9b:f6:24:b2:77:35:
ad:03:a7:bb:7e:ba:22:8f:5b:8c:49:38:df:c1:ef:25:3a:9f:
5c:f7:28:da:c0:6b:77:bb:3b:60:b7:62:74:51:7a:39:a9:85:
ff:b5:8a:a1:0c:2c:4f:f3:54:8a:2a:c6:d8:b6:c7:83:80:ab:
57:e5:67:ed:da:a9:d9:b5:1b:df:36:a9:ec:78:b8:73:62:8e:
2a:84:59:30:b5:dd:d9:40:44:53:8a:28:dd:fd:01:55:53:fd:
c6:6c:c1:5b:c1:43:b4:4f:2e:1e:28:cf:b6:6a:a9:30:8b:18:
f3:70:e3:4e:82:7c:d9:9e:71:7d:1d:90:ca:1c:2a:f6:e5:8d:
a8:61:66:e4:46:b6:30:68:77:0a:59:84:94:11:60:3d:1d:95:
be:91:ba:51:84:3b:78:14:00:b0:53:c0:67:76:bf:d6:61:e6:
1a:46:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:57:50 2024 by rpki-client on console-fra.rpki-client.org