Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bfa030b9-3615-3a0f-9e75-865a510e30f3.roa
File: bfa030b9-3615-3a0f-9e75-865a510e30f3.roa (raw, json)
Hash identifier: jqp6zjTRW8+1p1D/RNN48vla4ObYt2Hn7CQ+msLHlic=
Subject key identifier: FC:BA:CA:34:30:BB:2B:7E:52:98:F3:90:D0:6B:8B:5C:AA:56:CF:98
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285842C0594724F1F18EC2F888C7CC
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bfa030b9-3615-3a0f-9e75-865a510e30f3.roa
Signing time: Wed 02 Aug 2023 13:00:18 +0000
ROA not before: Wed 02 Aug 2023 13:00:18 +0000
ROA not after: Tue 31 Oct 2023 13:00:18 +0000
asID: 55933
IP address blocks: 107.151.200.0/23 maxlen: 24
107.151.202.0/23 maxlen: 24
107.151.206.0/23 maxlen: 24
107.151.204.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c0:59:47:24:f1:f1:8e:c2:f8:88:c7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Aug 2 13:00:18 2023 GMT
Not After : Oct 31 13:00:18 2023 GMT
Subject: CN=bcb0e673-f27f-4641-bf31-82d4d74cdd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:13:1c:10:07:79:de:1f:a2:0e:cf:55:6c:
0c:a4:db:58:03:22:28:4e:61:1e:7f:02:4e:a2:f1:
1b:d1:3a:fd:d4:cc:50:32:de:c0:12:02:dd:62:c9:
e5:7e:9f:5d:f4:86:d0:42:71:4b:ce:52:38:65:6c:
00:a8:ba:d8:2a:41:18:00:5f:3c:03:39:d2:1f:bd:
e8:73:a1:34:b7:20:a1:bc:51:af:16:2d:ba:6c:b5:
89:b7:9c:9c:4b:bc:0b:72:fc:71:4b:18:43:f8:8e:
0f:f1:75:3c:3f:0f:2e:c7:26:51:21:2b:78:55:43:
bf:c3:9b:3a:87:8f:55:44:d4:c1:27:b2:fa:7c:16:
f0:24:ef:81:8a:bc:a7:fe:c3:e1:ab:31:94:3b:01:
ae:e8:3b:08:ff:5a:f3:ee:90:69:ce:47:80:ea:37:
df:46:06:7d:46:4c:8e:7d:3f:fb:67:93:a6:a0:b3:
66:4f:a9:d6:c8:7f:2d:f7:f7:ee:09:a2:92:a2:6b:
e8:aa:b0:bd:a6:f3:48:55:15:49:b8:0c:65:0c:13:
53:04:ba:5d:c7:54:cc:9a:f6:4d:92:0a:ab:27:ed:
c3:b6:e0:b8:06:34:68:fe:df:dd:71:31:51:a9:44:
70:4e:0c:14:8c:ff:64:55:fd:7d:8c:f0:af:9a:fe:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BA:CA:34:30:BB:2B:7E:52:98:F3:90:D0:6B:8B:5C:AA:56:CF:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/bfa030b9-3615-3a0f-9e75-865a510e30f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:29:cb:51:b8:07:4a:f5:30:36:0d:3b:e1:f3:85:69:06:d7:
c2:15:47:ba:3c:cc:25:24:e0:08:88:70:69:6b:b7:1f:5c:ac:
b1:5c:d0:dd:77:66:10:a0:b7:e1:cd:00:45:5b:b6:8a:57:ef:
bc:c3:ef:ff:d6:5c:00:d1:70:df:7c:e4:e4:ed:b1:52:bb:9e:
16:53:e5:c9:a9:45:fb:85:c4:96:db:ab:0c:fc:65:5e:12:bb:
d7:03:04:d4:5e:0d:0d:40:18:43:b3:c4:0f:61:c4:d6:a3:ff:
05:32:7f:24:e6:c3:7f:66:d8:45:85:cc:b8:82:24:f5:c8:fb:
11:71:56:a9:11:d8:ea:2f:b6:77:fa:48:8c:30:07:ee:68:9b:
16:fb:e8:89:78:0d:e1:17:94:96:1a:51:33:4a:8c:91:fc:ac:
a7:f0:c0:ec:89:80:1c:97:a2:83:27:32:6e:4d:e7:0a:d3:7a:
4f:6d:5b:18:a0:cc:b0:d8:7a:a4:56:8e:35:3c:27:32:6e:8d:
4e:0f:05:bd:10:f6:1a:bb:39:fb:d8:ef:19:1e:fa:a2:98:46:
43:14:41:8c:5b:bc:f8:67:f0:b4:32:03:c1:cc:03:f1:8a:23:
63:fa:41:62:15:f7:8a:86:46:4c:92:a7:a8:47:e8:ad:1c:64:
85:10:28:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 07:06:30 2023 by rpki-client on console-ams.rpki-client.org