Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/f0368d9b-2e3e-38e0-b8a8-f0fd5684aede.roa
File: f0368d9b-2e3e-38e0-b8a8-f0fd5684aede.roa (raw, json)
Hash identifier: 9nNfSzu+LmurvJdF+Od3whYHdZ319XnIkYZ1WtoGOMw=
Subject key identifier: EC:28:D5:F0:AC:66:C9:BD:B5:04:F5:AA:83:E3:4C:22:87:86:19:9B
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F4328584397655B50F839B35BF7499600
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/f0368d9b-2e3e-38e0-b8a8-f0fd5684aede.roa
Signing time: Wed 18 Oct 2023 13:43:29 +0000
ROA not before: Wed 18 Oct 2023 13:43:29 +0000
ROA not after: Tue 16 Jan 2024 14:43:29 +0000
asID: 2386
IP address blocks: 199.255.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:97:65:5b:50:f8:39:b3:5b:f7:49:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Oct 18 13:43:29 2023 GMT
Not After : Jan 16 14:43:29 2024 GMT
Subject: CN=3fbeeee1-3663-4c4f-bac9-960770ee1b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4f:8d:35:cd:b3:f6:84:7f:54:55:09:65:be:
00:40:fe:a0:23:d5:17:67:1e:d3:d2:d7:53:ee:90:
ac:64:90:3a:7d:38:0e:88:43:5f:e2:f1:37:cb:c1:
5a:07:ba:10:fb:43:2b:64:71:20:8f:6b:77:21:7b:
bc:39:c2:0f:db:6e:64:fc:2f:2f:31:c2:d3:76:b8:
10:5d:fe:5f:f0:00:35:e2:8f:85:d7:86:7a:71:ce:
90:aa:8c:b0:e1:98:48:5a:9c:38:be:09:69:2a:93:
13:4f:e4:9f:3b:95:3f:9c:6e:89:d7:9a:dd:2d:20:
ba:83:a0:39:19:41:31:da:eb:a1:b8:cb:01:08:37:
90:b6:82:4c:14:f3:51:5b:aa:74:b7:5e:8f:93:ee:
ca:f6:86:a8:c7:49:28:0f:b9:1c:c5:8f:9b:66:dd:
16:6a:c8:a0:a3:04:9a:ac:b1:ce:e2:0c:3d:cc:26:
6a:6d:80:ef:52:9f:73:86:57:b0:c3:11:8e:7d:8c:
4d:bf:cc:43:60:72:b0:b5:8b:d7:b6:17:96:78:e3:
ae:60:5b:30:77:33:66:7e:4f:06:43:5e:6e:40:02:
df:d7:91:2c:21:14:bc:b2:cb:2b:6a:60:d6:52:4a:
65:ca:9d:f8:ff:bf:04:a4:0b:cd:ab:e9:7f:a3:67:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:28:D5:F0:AC:66:C9:BD:B5:04:F5:AA:83:E3:4C:22:87:86:19:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/f0368d9b-2e3e-38e0-b8a8-f0fd5684aede.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:ed:f7:ac:fe:c8:2e:67:99:da:91:69:78:e7:5b:88:91:ad:
a8:66:79:9d:f9:9d:07:ca:ea:68:aa:88:4a:69:e9:91:32:81:
b0:ee:08:f0:7d:94:51:b0:03:d0:89:93:45:16:8c:17:f0:85:
6b:59:2f:24:11:4c:48:58:65:bc:9f:d3:ba:c4:04:7b:ba:ae:
b8:dd:24:c2:4d:c9:c2:db:ca:e7:24:0d:87:3e:e5:69:24:4c:
86:4c:5f:35:15:75:4b:ba:d7:0e:40:66:71:e6:6c:05:6e:5b:
e8:18:42:d9:ee:19:c8:cf:e6:7d:06:f2:34:ab:bc:52:ae:48:
bf:df:12:ad:ab:24:60:ae:c0:d2:6f:4f:72:5c:37:25:71:0c:
5f:15:8d:8e:a2:12:5b:30:9c:47:7f:26:2d:c4:9e:85:24:cc:
e8:dd:b3:bf:75:48:a3:7c:ae:30:15:ac:0e:38:0c:cc:c0:ba:
f4:8e:f8:f2:3d:54:6d:fd:b9:6e:c8:5a:c0:47:ae:76:fe:69:
91:65:2d:8b:d4:85:9a:e2:19:55:11:93:40:c3:3c:36:2e:c3:
a8:12:26:d2:72:c5:31:6e:9e:b1:49:8a:e2:bc:2a:9e:77:28:
59:3f:86:19:e6:bd:45:a1:a4:ba:05:5a:be:68:43:75:3e:a4:
2a:30:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 20:49:39 2023 by rpki-client on console-fra.rpki-client.org