Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/aeed0ea4-7b25-3e84-be2d-76204705884a.roa
File: aeed0ea4-7b25-3e84-be2d-76204705884a.roa (raw, json)
Hash identifier: 93yknLp9CQo+znL6MGS1cQCgXdRouUduq/qjIjScs7k=
Subject key identifier: 0C:39:96:FA:C6:3C:FC:91:4E:37:71:D6:68:A9:F2:8B:16:E0:85:A5
Certificate issuer: /CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Certificate serial: 010D0C9F432858468C3AF4C27060B2668E3B3900
Authority key identifier: C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/aeed0ea4-7b25-3e84-be2d-76204705884a.roa
Signing time: Mon 15 Jul 2024 16:04:58 +0000
ROA not before: Mon 15 Jul 2024 16:04:58 +0000
ROA not after: Sun 13 Oct 2024 16:04:58 +0000
asID: 399970
IP address blocks: 149.112.152.0/23 maxlen: 23
149.112.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 00:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8c:3a:f4:c2:70:60:b2:66:8e:3b:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Validity
Not Before: Jul 15 16:04:58 2024 GMT
Not After : Oct 13 16:04:58 2024 GMT
Subject: CN=e3675a3b-dcac-4c96-bbec-a4ab552ade47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:44:63:29:99:43:19:8c:e5:e3:87:35:d0:ac:
4d:99:1d:6d:c1:df:6a:d8:d9:42:6d:7e:cc:7c:82:
58:e9:18:e7:80:48:ae:f7:7d:ab:21:10:55:00:52:
68:dd:31:09:f3:3f:3c:d5:a1:5c:1a:69:d6:df:34:
a0:33:ef:ca:a2:c7:c8:b5:95:8e:82:98:9b:c7:6e:
31:20:78:02:a3:65:5b:b9:cf:5d:1a:f5:28:d3:e1:
b9:49:0f:49:e8:47:f8:3a:e6:2e:85:00:e6:28:65:
cd:15:56:3d:1e:9b:08:14:2d:6a:5e:1e:49:c5:7f:
f6:24:37:71:51:a6:77:14:26:19:16:c4:59:e4:94:
cd:59:3d:c7:22:0b:59:89:7b:7a:b8:ff:31:13:96:
d2:b9:8c:0a:9e:f6:1e:57:00:cf:46:a4:5e:27:41:
fb:cd:3e:2e:b6:1e:be:ff:0f:54:a3:e4:09:7e:81:
9d:7e:e4:93:4f:81:98:de:a1:b5:72:e5:cf:1c:8d:
1a:fa:b7:e6:c1:9d:63:4b:3d:73:0b:63:81:be:40:
07:6a:e0:29:58:6c:16:5d:2a:6d:c9:cc:01:3e:6e:
4d:99:8a:8b:e9:ba:a4:d9:47:7d:f2:55:61:75:02:
bb:41:4f:3a:38:e1:86:84:c0:e0:10:bc:b5:9c:23:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:96:FA:C6:3C:FC:91:4E:37:71:D6:68:A9:F2:8B:16:E0:85:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/aeed0ea4-7b25-3e84-be2d-76204705884a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/56ea3e88-1c8a-47de-bdd4-27317c283592.crl
X509v3 Authority Key Identifier:
keyid:C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:6c:f7:e1:c1:b2:f3:b4:b6:f9:b2:6e:18:c8:73:b5:ba:6f:
e1:3b:e2:42:33:7f:4f:c2:72:1b:94:ab:7a:b8:98:b5:b8:a5:
14:7c:e2:c5:0b:7b:78:68:36:67:4f:18:2c:97:a5:43:0d:9c:
b2:b4:58:94:91:c0:a8:05:79:e9:3f:ae:ff:2f:7a:1b:47:a2:
b9:bb:c7:62:be:41:ed:68:60:55:7f:a3:66:30:fd:c1:86:c5:
48:dc:27:04:ff:d1:19:5c:45:a3:fc:be:db:08:11:79:96:10:
f9:13:67:76:d6:23:33:1c:69:dc:a8:cb:e3:dd:ac:02:87:f3:
19:62:b1:f8:49:28:af:9e:df:14:d4:04:2c:d3:f5:18:df:cb:
f3:21:3e:58:a7:6a:95:9f:4f:73:57:8d:ad:8c:3e:45:ea:e1:
53:3e:09:29:37:f8:c9:30:6b:32:86:c2:4b:7b:b2:9b:ec:81:
6a:5a:cc:91:3d:64:15:a2:e5:e8:e0:c4:b5:74:48:b8:fe:7b:
70:60:f8:b1:77:02:1a:de:f2:78:a6:dd:63:2e:4e:19:95:68:
6a:41:38:6e:2d:46:c4:86:95:2c:5e:73:21:b8:6d:2e:91:63:
5a:43:bb:74:f0:d7:c4:e1:f9:7e:d6:a8:7d:cf:96:95:40:65:
05:65:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 19 02:37:24 2024 by rpki-client on console-fra.rpki-client.org