Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cfddc127-1899-3fdb-a533-694aacc160ac.roa
File: cfddc127-1899-3fdb-a533-694aacc160ac.roa (raw, json)
Hash identifier: s8gNYPpQdNxVZQLbm/JEWoEoghY5hUeX1xhJtosdOI0=
Subject key identifier: 66:6D:5F:F4:43:6A:33:44:B6:ED:A5:E8:85:97:36:EC:D7:9D:C0:8A
Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial: 010D0C9F432858434C9629317BE7126781420EC0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cfddc127-1899-3fdb-a533-694aacc160ac.roa
Signing time: Thu 21 Sep 2023 18:36:11 +0000
ROA not before: Thu 21 Sep 2023 18:36:11 +0000
ROA not after: Wed 20 Dec 2023 19:36:11 +0000
asID: 109
IP address blocks: 192.133.144.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:4c:96:29:31:7b:e7:12:67:81:42:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
Validity
Not Before: Sep 21 18:36:11 2023 GMT
Not After : Dec 20 19:36:11 2023 GMT
Subject: CN=a7ab9694-c0b9-4dbf-9391-efc7f31dc0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:58:e1:86:7e:2c:53:1e:b0:9f:96:bb:4f:c0:
aa:bb:0d:82:43:8c:2a:82:0a:36:b1:2f:e6:29:e6:
d7:63:99:b3:c7:27:d9:ab:9d:78:ad:67:49:03:7e:
f5:60:9e:f7:36:45:c8:3f:72:ba:fb:9f:98:0f:23:
04:5f:12:d9:62:dc:a3:ec:47:fc:a8:58:80:b0:23:
6b:ac:1d:42:85:dd:1e:ca:19:1e:57:19:fb:56:fd:
1c:69:dc:4c:6e:9b:af:12:94:5f:19:30:a2:63:e1:
9a:08:66:51:44:14:88:2b:93:28:ae:a6:70:a8:dd:
9c:cc:2a:ed:43:ad:ed:bf:c6:f2:e5:d6:43:99:fd:
5a:b0:b3:7d:1d:21:dd:09:55:45:d3:77:4c:b6:8c:
e2:b7:57:6e:a2:41:37:b4:be:6a:48:5f:e6:bc:d7:
ea:5d:93:74:71:26:89:d8:95:25:f6:58:b5:ec:93:
1a:a4:df:a2:c9:c0:6e:d9:1c:d9:6e:70:ae:18:e4:
a7:4c:2f:dd:9d:eb:40:c3:9a:42:9b:de:97:e0:97:
e8:38:e1:6c:06:cb:fb:4f:a1:2b:bc:1b:5e:34:c7:
9a:06:a7:5e:19:2a:ad:dd:7d:4c:21:e4:65:fe:7a:
82:39:c3:19:76:57:d0:f2:8b:00:7f:36:3e:45:93:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6D:5F:F4:43:6A:33:44:B6:ED:A5:E8:85:97:36:EC:D7:9D:C0:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/cfddc127-1899-3fdb-a533-694aacc160ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
X509v3 Authority Key Identifier:
keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.133.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ae:05:a7:44:38:42:ac:76:75:31:a5:0a:ad:78:4f:1b:03:
d6:cc:34:1c:cf:18:39:49:77:0f:66:5d:9a:e7:52:fe:7f:b5:
56:79:2f:3e:f7:61:3d:ec:70:b2:76:c9:74:1b:77:11:dc:0c:
1a:c4:7e:b0:4a:5d:4f:1a:fd:5c:96:9c:06:d5:82:ca:9e:d3:
4c:b9:8b:68:cd:93:22:b5:60:09:1b:8e:64:2c:41:9b:3c:1c:
6b:47:0a:a1:5c:01:fe:2f:63:22:d8:cd:ef:74:61:d5:73:b9:
81:91:3f:46:02:be:bb:fb:3f:8c:30:fe:99:c0:6d:ce:7b:2d:
5f:d9:4b:6e:1b:6d:d6:84:7a:e7:f9:0a:20:db:22:35:86:6b:
e8:7b:95:28:d3:e7:f7:f1:e0:99:3f:42:45:4d:cc:0f:c1:bd:
63:b2:1f:14:a6:6a:82:b3:2d:62:28:9e:44:ac:47:ce:6e:16:
fa:41:3c:f6:f4:89:df:d7:89:84:aa:a3:45:c7:22:1b:34:ee:
5e:98:bd:15:a7:54:8b:fd:22:e4:37:94:2a:cc:99:52:14:50:
26:0f:d3:56:22:33:4a:0c:7c:61:99:79:36:d4:89:31:61:eb:
e0:ad:77:88:78:37:83:69:59:bb:20:a6:f7:84:66:a8:ac:04:
bf:dd:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 22:44:16 2023 by rpki-client on console-fra.rpki-client.org