Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/dc6a2d61-c3d9-3f3f-8ee9-dab066abea83.roa
File: dc6a2d61-c3d9-3f3f-8ee9-dab066abea83.roa (raw, json)
Hash identifier: VJI+242D/4mcn4rL8Vm1oCF+ZSJp9G65gt4+IvG5wqU=
Subject key identifier: 34:A2:2B:F0:FB:EB:92:D7:67:56:0B:8A:23:42:79:9A:81:65:C7:FF
Certificate issuer: /CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Certificate serial: 010D0C9F43285843B76ADF512D3E44421D572840
Authority key identifier: AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/dc6a2d61-c3d9-3f3f-8ee9-dab066abea83.roa
Signing time: Mon 30 Oct 2023 01:00:16 +0000
ROA not before: Mon 30 Oct 2023 01:00:16 +0000
ROA not after: Sun 28 Jan 2024 02:00:16 +0000
asID: 46906
IP address blocks: 192.30.160.0/20 maxlen: 24
104.245.248.0/21 maxlen: 24
146.71.16.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:b7:6a:df:51:2d:3e:44:42:1d:57:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
Validity
Not Before: Oct 30 01:00:16 2023 GMT
Not After : Jan 28 02:00:16 2024 GMT
Subject: CN=7345d68a-e84c-4c4f-94f4-27ab41bebfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:69:ea:03:32:e3:c2:85:62:1d:0d:81:61:
b5:83:5f:40:0a:59:3d:51:db:67:f8:88:dc:8e:9b:
06:45:fe:bb:5d:3b:66:54:2d:02:8d:3c:43:5a:84:
dd:dd:04:03:84:6f:28:37:70:4b:51:28:fe:84:14:
a1:ea:b9:4e:12:d8:d0:63:c5:b5:06:df:cb:e2:ff:
29:bb:dc:ed:c3:1d:5f:c9:37:96:01:b4:fd:f6:3b:
15:fb:03:e3:57:1b:e7:ad:0e:2c:8a:0f:1a:70:dc:
a9:d5:75:b3:68:43:e6:87:88:68:84:5d:3c:46:1e:
47:e7:f7:a9:42:b8:86:03:9c:61:d2:7c:92:87:d0:
02:64:74:cf:a6:57:e4:e6:cd:79:2b:cf:b3:6b:bf:
cf:f3:29:81:03:51:82:c7:e7:e8:ce:e5:0f:a0:cd:
3b:cf:6d:23:82:7a:8a:bd:f6:0d:c7:d7:64:22:b0:
b5:41:d2:40:e6:cd:52:f2:00:b9:f5:a5:8a:dc:19:
73:5b:16:3c:d4:d7:f0:fc:af:43:fb:00:e3:1e:f3:
e0:5d:1a:47:7f:c2:d8:43:f5:d4:20:f7:0b:1b:25:
0c:0c:84:9d:22:2c:51:7a:33:42:94:ab:3a:7b:3d:
b0:44:3b:12:fd:87:0e:e0:b4:8f:90:c8:19:56:13:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:2B:F0:FB:EB:92:D7:67:56:0B:8A:23:42:79:9A:81:65:C7:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/dc6a2d61-c3d9-3f3f-8ee9-dab066abea83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.crl
X509v3 Authority Key Identifier:
keyid:AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
sbgp-ipAddrBlock: critical
IPv4:
104.245.248.0/21
146.71.16.0/20
192.30.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:96:0a:f2:bc:1d:42:12:8a:66:6c:a4:27:f9:38:b2:66:0a:
5e:f6:47:26:df:2f:48:77:11:68:1e:e0:b3:e4:0f:76:5e:c3:
b2:5c:da:62:f0:3c:36:b0:09:39:a6:2d:8b:25:bb:e0:2d:80:
8c:c7:36:d1:cb:e9:20:bd:37:cb:32:00:29:d1:92:46:dc:d7:
9a:72:86:d0:49:d6:be:03:5b:64:c0:75:f3:15:ed:bf:02:ef:
71:ed:42:78:22:cc:7b:f7:b3:ba:76:b6:09:a2:19:82:f6:e4:
e1:b0:fb:e9:ec:02:0a:68:64:a2:9e:8c:76:29:9e:1e:67:56:
2c:5e:63:63:50:28:c8:52:da:9c:02:40:60:f9:a0:83:18:d1:
04:fe:a6:97:c0:cc:f7:00:74:42:be:70:68:34:df:d0:02:20:
79:4b:c0:fb:e5:56:85:bc:00:2c:4f:8c:39:da:d7:41:7f:60:
88:d6:fd:d1:f2:3b:f7:80:2d:1e:4b:1f:fd:fb:1e:9e:76:ba:
a8:d2:8a:2c:02:4e:7f:5d:2a:20:a5:90:f5:7d:a1:96:c6:ce:
ea:75:69:e3:f7:1d:24:0c:a6:8c:ff:5c:b6:39:2d:f2:db:64:
a1:a9:dd:c8:35:85:a8:da:29:36:ca:19:08:18:76:d7:d9:ad:
3d:e6:73:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 20:28:21 2023 by rpki-client on console-ams.rpki-client.org