Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7b03f853-34e4-367a-abec-5451b844477d.roa
File: 7b03f853-34e4-367a-abec-5451b844477d.roa (raw, json)
Hash identifier: EvE5rJDT8RQvJe/ReXKVgqzjnTc4Fl0MUygw9Jr3Dps=
Subject key identifier: D5:15:C1:D2:93:85:28:A3:D3:1B:77:A2:ED:8E:65:60:07:3E:16:52
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285842C960B30543C81ABF85B31AC0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7b03f853-34e4-367a-abec-5451b844477d.roa
Signing time: Sat 05 Aug 2023 18:37:35 +0000
ROA not before: Sat 05 Aug 2023 18:37:35 +0000
ROA not after: Fri 03 Nov 2023 18:37:35 +0000
asID: 137443
IP address blocks: 107.151.200.0/24 maxlen: 24
107.151.201.0/24 maxlen: 24
107.151.202.0/24 maxlen: 24
107.151.203.0/24 maxlen: 24
107.151.204.0/24 maxlen: 24
107.151.205.0/24 maxlen: 24
107.151.206.0/24 maxlen: 24
107.151.207.0/24 maxlen: 24
198.44.170.0/24 maxlen: 24
198.44.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c9:60:b3:05:43:c8:1a:bf:85:b3:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Aug 5 18:37:35 2023 GMT
Not After : Nov 3 18:37:35 2023 GMT
Subject: CN=064fd769-0eaf-4714-b7a6-e7174d76a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:f2:06:d0:ee:56:11:29:73:be:a4:58:01:
0a:24:91:b4:09:35:fe:37:b2:fb:ac:3c:b1:a5:73:
2e:4e:7d:5c:de:84:ed:28:0b:31:68:90:4a:54:5b:
fa:42:19:cf:ab:7e:a8:03:8e:4a:39:b3:d2:58:3f:
49:17:0c:db:33:58:b3:d1:27:46:3e:63:e2:f1:84:
4e:bf:d2:df:c4:d8:7b:49:87:04:61:28:e7:b0:7f:
ed:7c:fe:a9:6c:1c:98:ae:b1:bb:f2:5b:11:50:98:
1e:16:59:3f:5c:24:80:3e:ca:31:81:06:85:fb:ed:
9f:1c:a2:af:aa:e0:ee:7b:53:77:5b:c1:04:28:9d:
4d:97:ba:be:41:21:7c:b5:f6:ed:ee:1e:a3:d6:75:
ba:f5:11:6f:cf:a7:af:eb:82:9b:f3:59:6a:cf:93:
c6:98:d3:17:c6:83:36:f5:5a:05:84:3b:89:6e:91:
94:77:01:ba:08:bb:1f:8e:4d:2d:28:8c:a6:41:34:
b5:e1:48:b4:e8:d4:ff:70:fc:e6:78:f2:26:3d:bc:
d0:45:6d:7d:55:0a:8d:d5:6e:30:e1:b9:e3:64:96:
88:8a:ab:ee:64:14:00:f8:e5:f9:92:ab:d9:c7:98:
3a:25:5c:e5:5a:be:ca:79:3c:96:2a:29:22:0c:9d:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:C1:D2:93:85:28:A3:D3:1B:77:A2:ED:8E:65:60:07:3E:16:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7b03f853-34e4-367a-abec-5451b844477d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.200.0/21
198.44.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:4f:f1:2d:bd:ec:a4:3c:e6:1c:a7:59:36:10:bd:32:0d:70:
bf:82:c5:19:c7:6e:4d:bd:f4:29:54:60:46:f9:58:4d:ff:a6:
ef:22:27:cf:b7:bd:4e:e6:ba:d5:31:63:67:61:6d:a1:f5:ef:
bd:28:7e:3c:49:83:ae:4a:bd:37:1a:26:fd:3d:57:1d:38:5d:
cb:e3:8c:84:d3:90:7e:2b:62:d5:bd:5c:01:98:93:98:f6:0b:
26:49:68:0c:84:71:a5:17:23:84:5b:d6:4a:28:07:8a:0d:36:
69:8f:09:ff:09:df:9e:4c:03:41:e9:88:f7:58:e8:20:dd:0e:
83:eb:64:c0:83:9b:47:5b:26:10:4e:e9:9d:fc:04:ec:02:6f:
c8:d2:8d:c7:ee:0b:b6:83:f1:eb:ff:1b:f8:db:96:55:0d:c7:
2a:b7:62:6c:79:05:43:49:d8:d7:64:ac:63:cc:b2:6c:c3:19:
77:3d:a6:46:10:fe:5d:6c:d6:40:a7:be:f8:79:a2:e4:ab:d9:
9a:9a:24:98:c9:05:a6:50:a5:71:d2:b5:a8:ce:39:c4:a7:d3:
84:e9:df:e5:8c:01:88:2e:10:8d:85:aa:36:8a:94:7a:b1:00:
bf:3a:00:7c:58:a4:f3:85:1c:a1:a3:07:03:45:17:cc:26:e2:
00:98:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 04:50:02 2023 by rpki-client on console-fra.rpki-client.org