Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/faee8886-b89e-3e15-a0ef-fd9cbafe9da9.roa
File: faee8886-b89e-3e15-a0ef-fd9cbafe9da9.roa (raw, json)
Hash identifier: C20HSDHop5+OKhQG5fdjrkbxuKZhtqQ2gcJZn6/pKAw=
Subject key identifier: 5F:8D:ED:CF:DA:38:4D:08:E2:8E:A6:D2:25:B4:F7:91:EA:5E:29:BD
Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial: 010D0C9F43285842DDA983B484DD10C0E195B800
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/faee8886-b89e-3e15-a0ef-fd9cbafe9da9.roa
Signing time: Sun 13 Aug 2023 01:00:23 +0000
ROA not before: Sun 13 Aug 2023 01:00:23 +0000
ROA not after: Sat 11 Nov 2023 02:00:23 +0000
asID: 30399
IP address blocks: 128.254.188.0/22 maxlen: 22
23.131.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:dd:a9:83:b4:84:dd:10:c0:e1:95:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Validity
Not Before: Aug 13 01:00:23 2023 GMT
Not After : Nov 11 02:00:23 2023 GMT
Subject: CN=598c9bf4-3935-46a6-8515-2b4ce04cd101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3c:cc:e0:ec:84:88:62:6e:81:44:80:ba:93:
ba:a6:1b:38:6e:51:90:eb:95:45:5e:dc:63:51:61:
57:71:32:86:0b:0e:c0:e2:9c:e6:6a:71:7c:46:b6:
29:2b:a2:0e:05:fc:2b:29:a0:b3:0e:72:92:d0:ec:
24:dc:c0:1a:ae:0c:04:6a:ed:8f:4d:05:c6:a9:60:
02:30:b2:34:40:dd:54:7b:f3:f0:a7:b8:09:23:16:
72:58:ce:b9:b2:87:66:08:70:df:89:87:49:a3:4a:
76:da:3c:05:51:43:a0:d1:1e:d9:8c:48:9d:71:85:
4e:1e:31:06:ed:0e:88:64:1c:c1:bf:7b:f6:83:4e:
de:11:bb:55:72:50:8b:45:d4:72:e5:12:c0:11:26:
04:fb:86:97:a8:53:d9:9f:ac:d8:f8:f5:fc:71:a4:
10:e6:34:cb:15:9e:08:d6:0f:9c:1f:d2:79:94:8b:
c8:46:b2:3d:88:92:cb:c2:17:a7:f5:ab:eb:e8:02:
ba:3c:ac:10:1c:cb:e7:48:04:f7:6b:59:05:8c:0b:
1e:bc:97:4b:c8:4b:87:17:c6:f0:49:5e:66:59:96:
c8:12:60:02:8b:3c:91:45:22:c8:76:79:e4:01:26:
a8:7a:1b:38:78:48:57:76:bb:b0:c5:3d:89:a3:7c:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8D:ED:CF:DA:38:4D:08:E2:8E:A6:D2:25:B4:F7:91:EA:5E:29:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/faee8886-b89e-3e15-a0ef-fd9cbafe9da9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
X509v3 Authority Key Identifier:
keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.184.0/24
128.254.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:2c:bf:ab:0c:24:cb:4b:9e:bc:13:f1:75:62:59:7f:3e:a7:
8d:9c:9f:be:6d:90:1a:ff:c5:9f:84:d8:9e:76:a4:3d:57:51:
e0:74:76:84:84:e2:df:f1:ff:a1:f8:39:e6:18:b2:84:82:b5:
8b:72:43:2e:eb:da:d7:db:fa:87:5f:54:61:3e:cf:50:b7:63:
5f:83:a6:21:f4:ca:0a:ca:f5:21:c6:92:d6:fa:b9:2f:c1:0e:
af:03:4d:49:3d:39:8d:ad:1d:91:78:c1:0a:c5:c7:69:4c:51:
ca:73:1c:dd:4c:eb:3e:60:56:92:9a:dd:db:65:8b:f4:36:eb:
9c:d5:4a:97:52:a8:b6:98:ad:81:4d:a8:a6:3e:71:15:ba:19:
5f:c8:0f:a5:bd:0a:1e:71:9b:a9:c9:4b:c4:c9:d0:4d:34:39:
8e:2d:42:7d:b2:f7:8a:fb:bb:e4:1b:c3:1a:69:5b:2e:89:dc:
0d:b4:b9:d9:e9:dd:00:b4:a5:24:c3:45:5b:2d:0c:98:70:a4:
3a:e2:0a:19:8c:32:dd:64:ec:6c:30:9e:57:6f:f9:5e:a2:a0:
35:d1:a5:ac:8c:b7:35:67:21:7d:96:2f:15:88:ed:6c:2d:7d:
d0:48:7f:63:e8:fa:ca:d5:1d:68:17:21:70:13:3c:2b:d6:89:
31:8e:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 02:43:15 2023 by rpki-client on console-fra.rpki-client.org