Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/098dcc9c-4a09-38b0-bc0b-3a387dbbb46d.roa
File: 098dcc9c-4a09-38b0-bc0b-3a387dbbb46d.roa (raw, json)
Hash identifier: 3QOU2qY7jUioGMgQFefnWyVF+UNHwzc9fFSkmGSI48I=
Subject key identifier: C1:33:BB:8E:BC:24:AD:7A:36:89:D4:25:57:2A:08:92:E5:4E:48:B8
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584765EA6AB1A9DD5F10F53EA140
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/098dcc9c-4a09-38b0-bc0b-3a387dbbb46d.roa
Signing time: Tue 01 Oct 2024 15:28:55 +0000
ROA not before: Tue 01 Oct 2024 15:28:55 +0000
ROA not after: Mon 30 Dec 2024 16:28:55 +0000
asID: 398156
IP address blocks: 158.120.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 21:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:65:ea:6a:b1:a9:dd:5f:10:f5:3e:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Oct 1 15:28:55 2024 GMT
Not After : Dec 30 16:28:55 2024 GMT
Subject: CN=5eb95c62-4f66-46e9-ba0f-a05928aa825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:e6:f8:19:61:4c:51:d5:8d:ab:ff:98:2d:
74:76:bd:aa:06:fa:7b:2c:9d:20:f3:d5:36:e4:3f:
d7:0e:56:50:ff:ad:e5:7f:f0:d9:22:0e:a9:f0:f5:
76:19:fe:73:92:f6:e9:1c:ce:12:cd:10:dd:fc:c0:
a5:75:f3:37:64:c9:c6:4e:c3:87:f8:c9:b9:bc:b0:
a9:ee:de:bd:f8:5a:71:ee:94:8a:f5:66:2a:9d:eb:
d7:b2:cc:0a:86:b9:1e:bc:1c:e8:49:91:fd:3c:f5:
bf:4b:fe:4b:59:e1:0f:cf:9e:db:a8:df:66:a9:82:
2b:42:c8:35:bb:28:16:ff:0e:49:8c:b2:d4:9c:43:
86:53:c3:69:8e:c8:6a:17:d5:ce:32:22:ec:ce:83:
24:22:7b:d9:54:51:ed:fc:88:36:bd:6b:66:1d:e2:
52:2c:c8:36:23:46:dc:37:e5:fb:34:c5:48:67:8b:
c2:66:ea:8a:d9:ed:56:23:58:f1:f9:70:76:36:04:
5b:26:b8:5c:2e:3e:a5:a6:de:28:cb:1b:10:2a:a0:
0d:7a:d0:0f:0c:b5:f0:44:ff:b3:bc:b4:dc:e0:33:
2a:40:23:8b:2f:0b:7c:29:d4:1d:dd:0b:ac:ed:00:
41:da:61:34:1b:b9:f1:7c:eb:a1:db:a3:8f:4b:27:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:33:BB:8E:BC:24:AD:7A:36:89:D4:25:57:2A:08:92:E5:4E:48:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/098dcc9c-4a09-38b0-bc0b-3a387dbbb46d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b6:7d:98:7b:a8:51:a0:af:b6:62:a3:5c:a0:e3:21:99:26:
11:78:72:7e:fe:37:df:f1:ed:31:2e:6a:5a:7d:43:85:94:1e:
8c:71:d7:a8:23:88:03:91:55:ed:48:6d:19:bd:7b:45:a6:b2:
36:7b:3d:b5:a5:41:cb:b9:cb:dc:5b:06:7b:18:0a:31:c9:9e:
9f:09:49:62:15:25:5c:6f:cd:95:14:fe:a7:03:6b:6d:cf:43:
10:89:c7:1d:22:d9:b1:00:11:f1:95:37:2e:63:1c:fe:68:79:
6a:f1:cb:eb:c8:91:64:2d:16:30:8a:60:fc:fb:2b:4a:b3:7f:
19:a6:32:27:7d:91:19:10:38:6a:56:b0:35:f5:4e:c9:03:fb:
d1:ee:fb:a3:57:60:9a:65:ea:0b:47:fa:4a:1e:a6:ed:34:38:
42:8a:46:c6:7f:25:a3:d6:51:3e:c9:c1:84:18:9a:5d:d3:32:
42:ff:92:bb:d6:05:33:1a:e0:a1:f9:21:4e:6c:eb:52:fb:66:
7a:fd:cb:38:d4:98:91:31:1e:7c:d0:8e:6e:e6:53:1a:69:0f:
94:b6:3c:77:ed:49:80:be:49:ac:a3:fc:4d:08:52:a8:c6:a0:
f9:48:e0:97:6f:da:c0:72:4a:ed:6f:5d:e5:e1:93:e8:94:93:
ab:fd:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 23:56:57 2024 by rpki-client on console-fra.rpki-client.org