Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/fb9caff6-86e6-3a0c-bed1-fb0d130ed164.roa
File: fb9caff6-86e6-3a0c-bed1-fb0d130ed164.roa (raw, json)
Hash identifier: nHJlhJeanbs2wJg5SKgYlw2meTS6SxOo7qPIGGv0K8o=
Subject key identifier: 49:30:FD:53:18:56:3E:7A:87:9F:43:BC:0F:63:C8:9A:7A:9E:B8:F1
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F432858432683300452CDC273E0C99D84
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/fb9caff6-86e6-3a0c-bed1-fb0d130ed164.roa
Signing time: Fri 08 Sep 2023 03:17:15 +0000
ROA not before: Fri 08 Sep 2023 03:17:15 +0000
ROA not after: Thu 07 Dec 2023 04:17:15 +0000
asID: 137443
IP address blocks: 104.251.226.0/24 maxlen: 24
104.251.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:26:83:30:04:52:cd:c2:73:e0:c9:9d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Sep 8 03:17:15 2023 GMT
Not After : Dec 7 04:17:15 2023 GMT
Subject: CN=78033690-41e6-477c-a35e-a171cb4f4296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:2d:dd:46:79:54:03:27:e9:a6:8f:59:16:
ef:40:da:1f:15:34:66:7f:65:f7:86:37:2d:a7:e2:
4b:41:86:0c:35:00:5f:d1:6a:31:97:e3:bb:81:7a:
1f:5e:18:74:4c:2a:db:1d:56:ff:11:a8:8b:31:c6:
cf:30:66:3b:2c:c3:f3:ff:a6:53:d7:ac:5f:b6:ec:
7a:f2:c6:96:e9:c7:7a:7d:ae:f6:62:fb:2d:d1:29:
ba:6c:37:e2:58:d8:24:7f:33:b6:dc:16:18:6d:6b:
fb:22:f2:97:f3:e0:a8:02:95:1c:dd:65:ee:d5:7d:
da:b9:6b:2b:c3:e6:d3:ef:19:60:70:91:94:98:fc:
2e:59:63:52:e3:a7:4d:29:88:21:2e:a6:03:08:bf:
17:4c:48:ef:76:c0:88:80:42:8b:9b:4a:43:14:be:
28:64:5c:f9:25:71:44:90:ce:26:d1:2d:27:61:5c:
cd:7e:87:e8:22:9d:c9:cf:2b:8b:d5:3e:17:55:e1:
4f:45:a6:ac:40:f0:3d:61:8b:73:1e:59:2d:99:53:
17:b9:68:b2:22:0e:e9:59:c8:5d:07:fe:0f:9a:c1:
9b:6c:03:aa:64:fb:61:bf:04:6f:2f:49:61:21:ad:
be:52:38:0f:74:fe:a5:ae:9a:70:e0:3c:15:df:5a:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:FD:53:18:56:3E:7A:87:9F:43:BC:0F:63:C8:9A:7A:9E:B8:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/fb9caff6-86e6-3a0c-bed1-fb0d130ed164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.251.226.0/24
104.251.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:1b:32:fd:1b:91:58:4c:73:0f:1e:66:a2:86:e3:ae:c9:cb:
50:70:60:d2:e1:b5:b3:33:cc:b7:5c:3a:80:a7:e2:25:ff:88:
cf:4f:23:15:d7:ab:26:17:15:10:b4:1d:1a:3d:17:f8:41:ec:
07:dd:1b:84:a5:e5:e8:2e:4a:84:3e:ea:8c:a1:a7:20:04:87:
eb:0f:60:52:34:29:51:39:d2:0a:dd:5c:dc:f9:02:c7:4e:be:
59:33:c4:55:4a:f4:93:99:b0:79:40:e3:ce:a1:23:2d:66:32:
33:74:ed:2d:63:84:9b:bc:b2:6b:3f:c8:81:4a:40:a5:4a:5a:
97:54:d9:36:ff:8e:fb:45:15:4f:17:ce:32:57:6f:c6:b5:00:
ee:56:de:53:29:08:d8:ae:17:76:ac:2a:19:cd:0b:d3:79:53:
bf:ca:80:f8:90:dd:3f:fc:1a:dd:28:71:b1:3b:13:e4:d3:85:
2f:a6:21:d6:1c:1a:f2:28:d5:3f:43:48:43:4e:b1:3e:a1:41:
a4:23:71:3a:ef:93:9a:7a:70:11:b8:bf:4c:e1:e5:ba:86:c1:
ba:af:5a:fd:e9:e6:10:f9:d6:cc:10:2c:c1:2e:1e:49:df:72:
7a:4d:5f:68:88:df:99:99:6b:ed:97:53:d9:80:91:06:7b:f8:
23:6b:2d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 08:35:55 2023 by rpki-client on console-fra.rpki-client.org