Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e74d916a-3490-3ab1-931a-3a4f0e2cb39e.roa
File: e74d916a-3490-3ab1-931a-3a4f0e2cb39e.roa (raw, json)
Hash identifier: aPONl4LvzrQkLy8jhAp9mfCLN0bivuaX/MLs5Y7vNjU=
Subject key identifier: 0A:BD:BD:EA:7E:37:AC:40:D4:1D:60:D8:C1:1D:CD:8C:E6:F5:C7:88
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F432858442E2EAAD65349555907773580
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e74d916a-3490-3ab1-931a-3a4f0e2cb39e.roa
Signing time: Mon 11 Dec 2023 14:00:20 +0000
ROA not before: Mon 11 Dec 2023 14:00:20 +0000
ROA not after: Sun 10 Mar 2024 13:00:20 +0000
asID: 398797
IP address blocks: 199.255.148.0/22 maxlen: 24
2602:fd1e::/36 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2e:2e:aa:d6:53:49:55:59:07:77:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Dec 11 14:00:20 2023 GMT
Not After : Mar 10 13:00:20 2024 GMT
Subject: CN=602cdd5f-286c-4ec7-945b-f72e6da27600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:da:6a:9b:f4:20:a7:74:b8:c2:f1:b4:93:
c1:4f:c0:be:af:d7:3a:07:6d:23:d5:e7:c8:32:36:
3c:ca:eb:07:f4:ee:1c:1a:c8:f1:53:be:59:b3:1b:
be:03:88:b3:d3:3b:f5:2e:e6:28:a0:c8:43:0c:78:
c6:44:ec:15:8e:37:25:3f:6c:08:bf:3d:53:b1:c0:
dd:9b:ac:a3:b4:47:9d:7b:7a:f9:fb:97:83:12:57:
10:3c:75:8f:2d:ac:17:21:28:34:01:a1:5d:65:fb:
84:4f:7b:a0:64:e1:33:0a:46:fd:e0:1f:dd:92:ef:
b9:c0:bd:63:f4:1a:3a:f4:62:95:6f:8e:62:25:3d:
71:e2:40:94:90:f8:c7:d2:c9:e5:94:19:20:ff:25:
a4:c9:b1:c1:b5:61:f0:93:e0:7f:c2:29:3a:9b:2e:
dd:50:c7:06:67:52:79:ab:b2:c1:fc:8c:a8:44:d6:
83:d0:cf:ac:7c:98:90:ad:fc:85:ad:98:a1:17:8c:
ff:bf:e5:80:7f:2d:1b:ed:51:62:0e:93:cc:82:3b:
ab:d4:b4:96:9e:aa:3b:7a:c4:e9:ac:79:fc:ed:73:
ce:57:3a:50:3b:3e:bc:3e:d1:3a:74:c5:fb:8a:04:
4d:c7:68:27:4c:b1:92:fb:e7:4e:79:d3:e9:aa:6b:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:BD:EA:7E:37:AC:40:D4:1D:60:D8:C1:1D:CD:8C:E6:F5:C7:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e74d916a-3490-3ab1-931a-3a4f0e2cb39e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.148.0/22
IPv6:
2602:fd1e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:45:87:2d:c1:c9:44:c0:6a:dd:4e:dd:a9:27:45:43:f3:c7:
bb:7f:02:35:8c:8a:f2:dc:7b:93:0e:38:d9:85:b8:be:21:f3:
61:6b:b4:c3:35:f4:bc:83:8f:4b:77:63:bb:65:0a:7e:3a:24:
7b:15:fd:06:d0:bb:f7:f4:e3:6b:d6:65:9b:55:ae:5f:57:74:
11:c6:40:b8:d0:8a:0d:ec:ce:52:4e:31:77:3d:3b:55:8b:64:
f8:c2:f0:04:e4:f2:c7:4c:36:a9:d7:41:32:ee:13:b0:b3:b1:
87:0e:fa:53:9c:27:6d:08:be:7f:eb:77:47:5f:88:7c:09:82:
13:17:fb:89:30:cf:ce:dc:53:3a:17:02:27:f1:6b:8c:92:26:
b8:87:16:6a:ee:f8:38:10:42:8a:f9:bd:3b:67:03:c3:84:04:
10:82:3e:1f:f3:87:11:45:12:e5:92:c1:67:06:47:2c:99:0f:
ef:bb:9a:50:51:36:66:4b:98:a6:a9:a2:6e:cc:86:7f:e0:d9:
c9:99:84:ce:97:f9:b2:06:5d:cc:75:8b:4a:40:6c:9f:c2:b7:
4b:ed:fc:0b:ca:18:5d:7f:11:6e:fa:0d:85:fc:0e:3f:1b:10:
4e:0e:3f:c6:c3:5e:05:2d:9b:8e:b4:92:33:80:ff:79:cc:9c:
d7:fc:24:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 21:07:48 2024 by rpki-client on console-ams.rpki-client.org