Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/31ca64b4-af7d-3a83-a369-20173675762a.roa
File: 31ca64b4-af7d-3a83-a369-20173675762a.roa (raw, json)
Hash identifier: +vXZRcEEWtmOk4Sk76OeY8sMNWLOiVKSNKnfNUP9KHI=
Subject key identifier: 4A:D2:E3:03:FC:19:F7:F3:B9:93:FF:56:00:BB:D5:62:67:72:DC:8B
Certificate issuer: /CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Certificate serial: 010D0C9F432858432275E7031ED4749B048C2D90
Authority key identifier: 66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/31ca64b4-af7d-3a83-a369-20173675762a.roa
Signing time: Wed 06 Sep 2023 16:27:15 +0000
ROA not before: Wed 06 Sep 2023 16:27:15 +0000
ROA not after: Tue 05 Dec 2023 17:27:15 +0000
asID: 7018
IP address blocks: 104.143.48.0/20 maxlen: 24
199.247.144.0/21 maxlen: 24
2604:cf00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:22:75:e7:03:1e:d4:74:9b:04:8c:2d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1b0964-bd9c-4931-a53d-e2a434bc2af0
Validity
Not Before: Sep 6 16:27:15 2023 GMT
Not After : Dec 5 17:27:15 2023 GMT
Subject: CN=41803f78-e05a-4434-8859-94a7bbd27725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:61:bf:89:ec:3e:3d:73:ef:4f:f7:b9:52:
7a:20:0e:db:9b:68:43:68:90:83:82:41:bd:a6:6b:
40:75:be:b1:30:41:36:92:88:fc:7b:cb:40:4b:d3:
08:bf:c5:09:fd:97:02:8d:8d:fa:34:e3:a2:c2:fd:
e2:33:0a:8c:f4:e2:b2:f0:11:97:5d:67:fb:9b:d6:
42:61:7e:3f:a2:59:31:3d:d2:21:eb:6e:92:0c:7e:
44:fa:c2:72:de:1b:e4:62:44:75:ce:01:06:75:0c:
a6:05:7e:dc:4a:96:8f:f5:f3:6f:65:0d:0b:34:9c:
19:bf:e3:d7:e9:89:b1:30:24:ff:c4:94:be:71:f7:
c1:cf:1c:11:49:3b:f3:25:8b:f2:4c:1f:77:61:18:
a5:ed:d4:8f:ae:46:ca:dc:95:04:f3:51:5f:a5:6a:
a4:31:ed:2a:80:16:72:33:c2:14:fa:08:ac:e2:6e:
06:2f:ed:84:11:ce:56:c2:db:91:cc:b4:59:83:37:
09:fb:2c:93:a4:53:3f:3c:81:76:91:38:b7:98:f5:
34:94:d3:c8:96:05:ff:2a:44:25:34:b5:bc:05:d9:
de:cc:68:ba:ca:30:d1:86:25:71:c1:8c:72:4a:aa:
b8:52:cd:c9:91:1b:9c:18:47:44:b5:58:09:d8:1d:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D2:E3:03:FC:19:F7:F3:B9:93:FF:56:00:BB:D5:62:67:72:DC:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/31ca64b4-af7d-3a83-a369-20173675762a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.crl
X509v3 Authority Key Identifier:
keyid:66:6F:7E:8C:15:5F:8C:94:34:06:21:1B:FB:BC:4D:C1:6C:D8:85:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c1b0964-bd9c-4931-a53d-e2a434bc2af0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.48.0/20
199.247.144.0/21
IPv6:
2604:cf00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:8e:50:a2:ee:ff:d6:10:58:76:3f:53:8f:8e:b7:da:ab:64:
62:76:9b:bc:a7:17:f5:ef:4b:37:90:08:dc:b9:ea:9f:3b:bc:
ca:f5:a4:a3:59:89:34:a8:3f:3b:bd:f0:25:8c:11:e2:66:34:
83:a2:7c:66:dc:29:71:81:78:87:73:b4:ef:57:cc:fb:53:e9:
d2:aa:df:ec:b6:44:aa:8d:82:8d:d8:58:82:4b:7c:0c:63:cb:
29:d4:c4:5c:b9:be:e0:3d:b4:6c:b9:8e:e5:dd:e3:99:7a:18:
9f:93:b2:40:96:90:72:a5:c7:41:87:52:c1:7e:a2:01:c0:58:
e2:7b:61:e2:f4:b0:36:7d:9d:7a:34:21:18:eb:14:dd:ed:3f:
de:97:18:c3:e3:36:4d:ce:77:82:fa:3a:4e:0f:55:34:4c:95:
38:dc:00:3f:56:f2:57:ff:07:7f:6c:21:32:0d:29:26:cc:c4:
7a:4d:cb:f7:cd:03:b8:c1:6b:a8:be:dc:2c:2f:09:73:e3:e9:
50:78:11:8d:a9:bf:fc:1f:2f:31:78:d9:ae:52:30:b7:f0:b1:
b1:9e:8c:b3:4e:1a:7d:56:a3:ea:ad:3e:0e:65:08:0c:07:12:
74:d5:01:d1:f1:f0:29:8b:f5:9e:c3:78:4d:02:4d:e3:27:5b:
22:35:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 21:02:06 2023 by rpki-client on console-fra.rpki-client.org