Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/26fc5632-94fd-49c6-b3f4-c2d251d570cc/75c9a499-f44a-3539-9ef9-8aa47d53c689.roa
File: 75c9a499-f44a-3539-9ef9-8aa47d53c689.roa (raw, json)
Hash identifier: LQNKfiTJ8lArR9e/hAGNb+IZt3Wzr+IRdTPkqMH9phg=
Subject key identifier: FB:C8:89:79:51:07:64:CB:55:64:41:41:DA:C2:AE:AD:05:2E:B7:23
Certificate issuer: /CN=26fc5632-94fd-49c6-b3f4-c2d251d570cc
Certificate serial: 010D0C9F43285843E0B3EC3A8632A4920D5B3900
Authority key identifier: D1:44:E9:25:18:0B:45:2C:5C:AF:02:F4:90:A6:EA:CB:03:93:09:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/26fc5632-94fd-49c6-b3f4-c2d251d570cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/26fc5632-94fd-49c6-b3f4-c2d251d570cc/75c9a499-f44a-3539-9ef9-8aa47d53c689.roa
Signing time: Mon 13 Nov 2023 19:55:48 +0000
ROA not before: Mon 13 Nov 2023 19:55:48 +0000
ROA not after: Sun 11 Feb 2024 19:55:48 +0000
asID: 16758
IP address blocks: 151.114.0.0/16 maxlen: 24
198.181.142.0/24 maxlen: 24
198.200.177.0/24 maxlen: 24
198.200.178.0/24 maxlen: 24
198.200.179.0/24 maxlen: 24
198.200.180.0/24 maxlen: 24
198.232.210.0/24 maxlen: 24
204.80.8.0/21 maxlen: 24
205.145.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e0:b3:ec:3a:86:32:a4:92:0d:5b:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26fc5632-94fd-49c6-b3f4-c2d251d570cc
Validity
Not Before: Nov 13 19:55:48 2023 GMT
Not After : Feb 11 19:55:48 2024 GMT
Subject: CN=84fe7613-97de-483a-a23f-07a010131e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b3:98:e7:20:a3:17:43:66:6d:37:98:9c:35:
c1:e0:4c:f3:04:5a:d9:cf:fa:a0:30:76:60:bd:ac:
93:2e:d5:59:f8:f3:4e:d2:3e:ff:57:86:12:7e:ba:
ba:12:e6:b6:a1:ad:30:24:d7:7d:55:93:55:09:4d:
f0:1d:75:c8:45:37:99:ac:fb:94:ba:4f:4d:6c:f1:
d7:21:17:57:1c:94:17:1c:93:bb:40:c5:3e:c6:d4:
d0:5b:87:42:e7:ba:bd:0d:6e:96:d5:56:35:3d:34:
b8:be:73:58:4a:fa:0d:ee:62:ad:ce:b2:3a:70:e8:
19:8e:96:70:af:17:39:a3:3a:2d:fd:5e:ff:71:6c:
ed:f6:40:f6:9d:03:5a:3f:63:87:14:cd:7c:10:be:
8b:fa:ed:9e:9c:48:ab:93:7e:90:85:16:b3:89:d8:
b3:dc:a9:33:91:5e:fc:fd:43:60:a2:db:23:e2:e2:
f9:eb:ef:be:38:6e:49:7f:80:bd:23:98:1e:ca:9c:
be:32:a3:e3:ac:93:ad:e2:dc:93:d4:ee:af:74:3f:
c5:be:21:01:dc:40:1f:c2:28:c5:df:b4:6b:c4:84:
73:1c:03:ab:1d:95:c3:dd:de:a2:9b:27:34:31:f9:
ee:cb:70:23:f4:94:2f:16:c5:6d:0b:9b:24:91:88:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C8:89:79:51:07:64:CB:55:64:41:41:DA:C2:AE:AD:05:2E:B7:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/26fc5632-94fd-49c6-b3f4-c2d251d570cc/75c9a499-f44a-3539-9ef9-8aa47d53c689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/26fc5632-94fd-49c6-b3f4-c2d251d570cc/26fc5632-94fd-49c6-b3f4-c2d251d570cc.crl
X509v3 Authority Key Identifier:
keyid:D1:44:E9:25:18:0B:45:2C:5C:AF:02:F4:90:A6:EA:CB:03:93:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/26fc5632-94fd-49c6-b3f4-c2d251d570cc.cer
sbgp-ipAddrBlock: critical
IPv4:
151.114.0.0/16
198.181.142.0/24
198.200.177.0-198.200.180.255
198.232.210.0/24
204.80.8.0/21
205.145.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:bc:ac:54:90:3f:f9:5e:04:2f:20:65:01:44:5c:37:83:c1:
99:d2:e6:92:97:5e:2c:27:7d:20:2b:3a:06:b4:b4:fd:8b:0a:
50:29:f1:59:af:76:09:bd:8b:c0:85:6e:bd:70:76:30:c6:a0:
eb:d1:ed:e3:5e:cf:81:f8:16:22:00:35:6d:c9:37:ea:dc:33:
e3:1b:e9:d5:4a:40:5f:a6:66:13:11:77:95:de:38:de:cf:5d:
74:6d:04:71:5e:5f:d0:eb:79:61:ca:f4:01:c8:9a:ff:6e:33:
49:6d:78:e9:03:95:c9:83:86:ac:66:fa:b6:68:e0:9c:e0:32:
5c:d2:70:d6:9d:49:f2:1e:30:f3:d7:14:d5:ec:ae:dc:f7:6c:
fa:14:d5:06:8b:0e:1a:2b:14:1d:76:02:be:df:ea:6b:ea:46:
cc:35:44:b7:4d:c0:03:50:4e:ca:b6:27:e2:8a:3e:40:0c:64:
4f:c3:1b:2e:3e:6e:e6:b7:9a:d9:e5:38:de:c8:54:d4:c6:74:
de:7a:2e:92:02:f0:f1:94:31:42:35:6a:19:4e:d0:96:ba:e1:
03:be:32:3f:84:b1:12:32:c0:45:5c:8f:b3:18:08:10:23:c7:
9d:3b:b9:dd:f4:64:c2:c8:b2:68:94:9b:71:52:3c:e7:6c:c5:
f8:67:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 21:25:34 2023 by rpki-client on console-ams.rpki-client.org