Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/403e8fcd-3bed-34f3-8ee5-cbaca8c901ac.roa
File: 403e8fcd-3bed-34f3-8ee5-cbaca8c901ac.roa (raw, json)
Hash identifier: viU8foutyBlSgnyE0aX74iPJktVWzUjc78f30yB0Y14=
Subject key identifier: 08:A3:2B:BF:3F:B5:0C:7C:44:40:58:C5:9E:E4:96:15:8E:D1:53:9B
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F43285847E35F6DE113D4A16E2BED7C80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/403e8fcd-3bed-34f3-8ee5-cbaca8c901ac.roa
Signing time: Fri 15 Nov 2024 14:00:39 +0000
ROA not before: Fri 15 Nov 2024 14:00:39 +0000
ROA not after: Thu 13 Feb 2025 14:00:39 +0000
asID: 28920
IP address blocks: 149.143.150.0/23 maxlen: 23
149.143.168.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 13:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e3:5f:6d:e1:13:d4:a1:6e:2b:ed:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Nov 15 14:00:39 2024 GMT
Not After : Feb 13 14:00:39 2025 GMT
Subject: CN=b5edcd05-a142-4889-9dce-43426effa6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:72:e2:db:aa:48:a0:7d:0e:40:19:84:78:c8:
05:4a:62:a5:e7:87:8e:cb:c7:68:11:aa:bf:be:10:
fc:03:4b:29:e6:c8:4a:63:72:33:be:1a:f7:09:b8:
5d:ba:79:07:05:81:78:e6:77:96:3c:38:b6:b8:d0:
2a:51:a8:e9:63:7e:07:04:57:fa:50:70:a1:ae:98:
0c:75:5f:5c:eb:12:3e:51:0b:d0:1f:dd:f5:4e:69:
4d:0b:8b:d6:fa:16:7c:96:da:8d:82:66:cf:34:71:
5b:a8:4f:7f:57:89:a1:bc:db:c4:8c:d6:53:35:01:
6e:ca:b4:e7:ea:59:f2:a2:67:b2:0a:9c:97:30:f0:
d6:e7:dd:43:ba:87:ce:0b:f3:8d:36:4c:48:cd:aa:
56:15:bf:be:7f:a0:c4:6e:c1:37:3c:1d:46:ad:27:
50:12:23:24:cb:de:50:c3:b6:08:25:b5:2e:9b:d7:
3b:9b:4e:9c:58:03:ec:6c:96:59:ae:ae:e5:6c:ca:
b4:de:b6:7f:33:11:5e:8b:0e:55:08:03:6c:e3:1c:
51:41:16:5b:9f:25:48:16:a7:3e:bf:65:93:26:2d:
f7:b6:c7:24:19:dc:fb:a2:b1:a3:06:81:4c:7b:b7:
01:11:b6:40:e2:15:08:58:e1:18:3b:de:7b:71:a3:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:2B:BF:3F:B5:0C:7C:44:40:58:C5:9E:E4:96:15:8E:D1:53:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/403e8fcd-3bed-34f3-8ee5-cbaca8c901ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.143.150.0/23
149.143.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:89:da:6e:07:6f:b2:82:2b:64:71:4c:8f:43:89:c2:04:16:
4d:76:db:61:ae:10:d6:74:b9:35:b9:50:29:6a:99:af:7e:a3:
66:dc:8b:89:ca:6a:5b:a2:ba:22:5c:3b:14:e3:b8:8c:ab:30:
3a:7c:89:f7:e7:ad:fc:b5:8f:93:51:b2:60:be:00:ec:46:4f:
d8:46:2a:d4:26:30:30:d4:04:e5:dc:69:fb:1a:f9:69:f4:f8:
2a:22:9a:4c:a9:ba:5a:07:0b:d6:bd:ed:b1:60:0c:79:d6:91:
43:db:8c:a4:2e:45:8d:b1:12:33:9e:1d:33:0a:73:7e:5c:5b:
5b:2f:1d:f9:41:fd:a5:b7:16:ec:84:18:af:52:1f:5c:96:13:
27:17:fe:ce:37:3d:a6:f6:a1:40:f9:44:56:e3:94:d3:ca:bd:
63:d0:ea:0c:d7:10:7a:82:a7:1e:7d:0b:87:26:a6:05:a0:a5:
5f:0b:fa:6b:1a:a5:b1:62:f3:5e:ac:86:ef:a0:33:08:67:0b:
d9:6f:d6:a6:8c:e3:de:7e:72:ad:95:a6:5d:f6:23:39:87:2e:
5e:fe:2f:96:f4:e9:21:f1:50:b9:87:05:2d:cb:7f:34:69:a8:
f0:28:a2:6f:c1:f7:86:a9:58:6d:6c:10:43:20:74:0c:46:6f:
20:51:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 15:03:09 2024 by rpki-client on console-ams.rpki-client.org