Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/4e3ffc8c-51a9-3873-9d8b-872a53f4af3c.roa
File: 4e3ffc8c-51a9-3873-9d8b-872a53f4af3c.roa (raw, json)
Hash identifier: tNFix09ytYtPWxbuG9yYUw3f08yJYHlLc86Rfb33sAw=
Subject key identifier: DB:86:F7:0C:61:8F:21:77:87:D0:22:EE:E3:AC:15:95:CD:A4:33:19
Certificate issuer: /CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Certificate serial: 010D0C9F43285845BDC0BB673D923A7B407E7180
Authority key identifier: 28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/4e3ffc8c-51a9-3873-9d8b-872a53f4af3c.roa
Signing time: Thu 02 May 2024 17:02:11 +0000
ROA not before: Thu 02 May 2024 17:02:11 +0000
ROA not after: Wed 31 Jul 2024 17:02:11 +0000
asID: 399970
IP address blocks: 149.112.154.0/25 maxlen: 25
149.112.155.0/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 07 May 2024 13:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:bd:c0:bb:67:3d:92:3a:7b:40:7e:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Validity
Not Before: May 2 17:02:11 2024 GMT
Not After : Jul 31 17:02:11 2024 GMT
Subject: CN=5d5a1a0b-038f-4c8d-96fe-0aecbc67d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:ba:1f:9c:b9:1d:fb:7e:98:49:30:33:f7:
80:c8:9b:7d:02:e8:ae:06:3a:1f:0b:ab:1b:6d:81:
24:03:52:99:5e:1d:71:29:b0:0e:1d:4b:c5:8f:08:
f5:1d:11:89:67:bf:0e:72:48:17:0e:2f:e1:2d:55:
5d:3e:c4:a8:b0:02:4f:c2:ec:39:f2:61:72:15:55:
87:80:5f:b3:68:a6:2e:e4:fe:22:44:99:87:a2:e9:
be:3d:b2:1c:21:21:7b:8a:3e:ac:13:08:ec:2e:e4:
75:8e:67:78:28:c3:e0:b8:97:20:31:be:d6:f4:dd:
8e:b7:e6:13:d7:b3:fc:05:53:2e:89:4d:f2:42:5c:
c0:0f:a8:26:48:7d:15:b8:1c:94:5e:29:c2:37:fc:
2a:ff:57:80:98:32:74:8b:c7:6b:8c:da:c9:7d:ce:
db:2a:9e:02:ed:c1:e3:e3:2e:1d:b2:c3:60:c6:d2:
6d:9f:c3:cd:be:68:74:0b:71:22:e9:a9:59:92:f6:
65:7d:d7:4c:0a:bb:86:6a:9b:6c:b9:96:59:d8:e5:
e2:85:32:3f:41:c7:c3:79:3a:9b:2b:9b:77:5c:83:
5c:05:95:7d:79:26:77:42:d1:2a:9a:f4:89:ee:1b:
74:2c:22:b4:15:31:ce:6f:5e:0d:dc:55:5c:49:80:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:F7:0C:61:8F:21:77:87:D0:22:EE:E3:AC:15:95:CD:A4:33:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/4e3ffc8c-51a9-3873-9d8b-872a53f4af3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl
X509v3 Authority Key Identifier:
keyid:28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.154.0/25
149.112.155.0/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:84:f0:fb:a1:78:2f:26:64:33:d9:99:99:80:fe:75:e2:f1:
3b:bb:cb:0b:56:e8:c0:13:8e:b4:f0:da:f8:c7:b9:70:94:3b:
cf:f8:b9:b0:ab:6c:46:9b:31:03:e5:de:8f:93:9b:c4:f2:6b:
19:50:a4:5a:12:d5:17:a1:e2:23:6b:4c:dc:ad:c6:47:23:4d:
8f:17:40:3d:e6:65:3b:78:58:9b:6d:4c:ef:bc:c0:00:b2:ee:
74:f2:ad:8d:42:d2:18:fd:4a:78:31:15:48:02:05:7e:ee:90:
9e:c4:a5:65:bf:6d:74:71:80:36:a0:fc:8d:76:82:d4:ab:cb:
57:37:40:61:5a:68:89:26:b1:48:21:93:fa:d4:51:0d:de:8d:
be:b9:11:09:0b:9d:05:a0:57:f1:e4:0b:41:48:7c:f9:91:a4:
ff:a3:d7:f3:b8:b7:8d:1c:9d:74:44:d1:2f:2b:9e:a7:70:79:
a3:9f:90:13:c3:2d:68:9d:3a:c5:43:4a:32:0f:12:e5:c9:7c:
07:08:fa:fc:34:b4:62:35:17:2c:09:cd:9d:f4:af:bc:28:20:
b3:89:6f:19:ed:7e:13:7d:af:68:dc:f6:04:dc:64:a1:96:4e:
96:5a:57:f6:5e:3a:09:9c:e9:68:ba:bd:b6:30:b0:c2:ff:26:
06:a6:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org