Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4ab3d51c-dd39-3c16-9954-3695f0838fb0.roa
File: 4ab3d51c-dd39-3c16-9954-3695f0838fb0.roa (raw, json)
Hash identifier: hZlTHQ4xh0p2nJodiz9Cy89K5589EZNSood6c8yCzdI=
Subject key identifier: F5:00:0B:C8:6D:28:87:4B:41:3E:5F:91:CF:65:1A:A3:31:FD:2D:4A
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584316E4A0EEED80CE4BCE06AC80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4ab3d51c-dd39-3c16-9954-3695f0838fb0.roa
Signing time: Sat 02 Sep 2023 13:00:30 +0000
ROA not before: Sat 02 Sep 2023 13:00:30 +0000
ROA not after: Fri 01 Dec 2023 14:00:30 +0000
asID: 16839
IP address blocks: 199.91.136.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:16:e4:a0:ee:ed:80:ce:4b:ce:06:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Sep 2 13:00:30 2023 GMT
Not After : Dec 1 14:00:30 2023 GMT
Subject: CN=5107861b-afe8-4311-a99d-8e3d409d21f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:5e:10:c9:65:5e:0c:12:2f:1a:26:a5:6a:
3b:85:e5:ea:06:5d:2c:fd:06:22:f4:ec:30:ab:ed:
7b:12:99:f3:92:95:cd:16:97:f2:1d:e6:12:f4:86:
c0:da:1b:bb:28:30:fd:05:e1:9a:a8:6c:15:9c:c4:
f4:65:f7:e8:7e:6c:bb:7b:50:ae:7a:1c:81:29:aa:
68:1a:d8:1a:60:19:9e:a0:04:e4:52:da:5b:cb:b3:
5b:0d:57:0c:bb:9a:3a:bc:4e:a6:43:44:8d:84:e5:
92:0f:ee:c7:7c:02:bd:42:20:ca:ed:6a:00:37:d6:
e9:c6:c5:af:f1:ab:5a:ce:f4:7c:1e:54:af:73:6c:
f4:b1:06:b9:c1:62:9a:a2:5c:04:c8:57:ca:7b:9e:
05:00:68:21:93:c3:59:7a:d3:c1:ce:70:e5:1d:46:
01:64:59:b0:7d:b6:54:d6:c3:bd:00:21:ea:56:2d:
62:69:aa:af:b6:09:15:cc:76:00:f5:88:32:17:45:
1c:4b:bc:7a:da:6f:d9:4d:c5:6b:73:97:05:2b:0f:
9d:12:07:fd:1c:3e:0c:db:22:be:b6:ea:7c:e0:19:
c8:4d:69:d8:19:68:eb:ec:46:94:61:eb:68:c3:fa:
49:84:3a:22:2c:df:e5:c3:4f:89:63:28:29:d2:39:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:0B:C8:6D:28:87:4B:41:3E:5F:91:CF:65:1A:A3:31:FD:2D:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/4ab3d51c-dd39-3c16-9954-3695f0838fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:c2:a9:95:90:6d:c3:66:d5:84:c5:ff:95:8f:05:5a:04:91:
e1:77:54:da:df:11:5c:9b:e3:54:43:b2:5b:7c:eb:33:ef:e6:
6b:5c:9e:8b:f1:c3:f4:a5:11:60:94:75:77:fa:93:8f:7e:aa:
d4:4f:a5:f8:c1:2c:e0:28:cf:35:03:a9:48:57:62:2a:df:48:
e7:e5:2d:e8:8b:7e:50:97:81:e1:15:af:1c:1c:8a:0b:52:45:
5a:d0:94:29:f2:a1:17:6b:c3:19:e6:2c:ac:d2:ea:05:b9:0d:
69:09:3b:21:55:6f:22:b6:3c:9a:46:cb:b9:2d:a7:e5:01:01:
d0:85:c5:1e:d7:6f:a4:86:4e:61:26:f9:d0:79:57:d0:97:e5:
d5:ba:48:bd:5e:a8:b4:e8:c2:c7:d5:f0:eb:fe:36:bf:8c:67:
71:e8:2b:61:b0:cd:db:2d:34:63:eb:d7:14:d3:d0:69:f3:b9:
e3:a8:b8:24:a3:f2:8d:c3:f5:a9:ec:01:00:3f:4f:33:16:5b:
4d:d9:77:58:9c:42:55:02:3b:8b:40:17:00:12:ad:7e:2c:0b:
3b:0b:eb:73:88:d0:29:0c:85:00:c5:26:c9:3d:4e:bd:ba:06:
9f:a7:a5:7e:88:41:17:22:57:12:06:ad:37:a9:84:e1:cb:ac:
c6:fc:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 13:39:10 2023 by rpki-client on console-fra.rpki-client.org