Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/2b51526c-b72e-3b40-95d4-891ab6956e58.roa
File: 2b51526c-b72e-3b40-95d4-891ab6956e58.roa (raw, json)
Hash identifier: t3Z9Io28cpiF7J1DCle2A6RRISpl8gqZkIie+6RDJNE=
Subject key identifier: 4D:8A:19:2D:0F:2C:5B:61:B5:11:E5:5A:3E:94:C2:D1:8A:2D:65:1C
Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial: 010D0C9F432858431419E86F126BFE32F6E46400
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/2b51526c-b72e-3b40-95d4-891ab6956e58.roa
Signing time: Fri 01 Sep 2023 13:00:27 +0000
ROA not before: Fri 01 Sep 2023 13:00:27 +0000
ROA not after: Thu 30 Nov 2023 14:00:27 +0000
asID: 1239
IP address blocks: 104.171.22.0/24 maxlen: 24
104.171.24.0/21 maxlen: 21
104.171.23.0/24 maxlen: 24
104.171.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:14:19:e8:6f:12:6b:fe:32:f6:e4:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
Validity
Not Before: Sep 1 13:00:27 2023 GMT
Not After : Nov 30 14:00:27 2023 GMT
Subject: CN=dafbd4b5-00e7-4161-8315-f72395702f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:9e:50:6a:0c:7f:43:c1:97:92:f9:2f:8e:
4d:82:fc:59:df:19:07:34:5c:84:7b:65:48:be:99:
4c:0a:80:d4:86:88:51:7b:79:a7:fd:69:72:39:00:
3c:00:39:56:f7:3f:99:a7:18:59:ee:77:0a:f5:0c:
74:86:2c:d3:fe:91:ce:e7:f1:6d:1f:17:eb:c6:fa:
4a:d3:95:a1:74:c5:bf:48:c9:bd:92:a4:47:af:83:
0b:32:51:a1:61:38:c0:b2:fe:7a:81:48:42:70:73:
66:00:57:91:ce:df:a3:bc:bf:99:a5:a6:5a:7a:f2:
c6:f2:cd:9f:4a:d4:f7:39:01:72:d6:f5:48:b8:6c:
98:7b:3a:d2:35:be:df:cb:45:11:d3:82:42:e2:bb:
5a:56:37:48:f8:7b:f0:32:fd:01:aa:2e:d2:c1:e6:
df:10:5a:f5:20:83:fe:99:f6:f4:dc:f9:10:a5:98:
c0:2d:c1:23:da:5d:cb:64:96:dc:c6:ca:d5:64:3c:
2b:9c:6c:37:e8:85:a7:60:00:ff:cd:3d:b4:57:66:
4d:db:f9:bd:89:de:5c:87:1e:00:ae:9f:98:89:70:
7a:bc:58:18:4e:6a:30:dd:3b:95:82:0a:d7:90:8f:
c8:ce:53:b4:4a:38:fe:87:f3:31:fa:89:5c:d6:3b:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8A:19:2D:0F:2C:5B:61:B5:11:E5:5A:3E:94:C2:D1:8A:2D:65:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/2b51526c-b72e-3b40-95d4-891ab6956e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
X509v3 Authority Key Identifier:
keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.16.0/22
104.171.22.0-104.171.31.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:fd:5e:84:50:2e:17:11:b0:db:05:92:63:b5:f4:6d:f9:2d:
fc:f1:6c:52:b0:76:e9:58:df:9e:13:f0:10:57:1a:19:95:bf:
07:ec:6a:a8:78:d8:4b:44:f6:c0:0d:87:a4:1a:c5:7a:68:a7:
a1:f6:92:f8:da:18:b7:94:e6:e2:2a:aa:90:07:46:1e:29:64:
5c:fc:5f:84:9a:11:a1:16:c6:52:ea:77:53:01:15:f2:b2:8b:
f0:74:fa:bb:ea:4e:f6:13:47:c2:5e:95:bb:41:0a:43:2d:6b:
08:7f:84:55:5a:62:5b:86:4e:cb:34:f8:d3:4e:98:2f:b3:27:
8b:4e:a0:c3:38:bf:eb:f3:5a:da:9c:1f:c0:65:41:c3:57:8c:
10:7e:9d:06:34:ad:97:ac:f2:29:ef:aa:4c:ef:92:c8:a8:71:
8e:b9:51:a5:93:a5:96:54:06:af:69:62:08:09:ec:59:a8:ed:
34:bc:74:02:b8:a3:be:1d:0e:93:24:0d:a2:3d:14:e9:63:bc:
99:f2:8b:6d:5a:b0:fe:65:5e:04:22:88:c3:c3:07:94:51:84:
ff:50:9a:f6:07:61:95:c8:c9:04:2c:9b:d3:a4:cf:3e:72:ae:
b1:42:49:10:04:ee:0b:16:65:00:e9:42:46:ad:0d:18:14:13:
ac:85:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 19:01:25 2023 by rpki-client on console-fra.rpki-client.org