Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/821329a0-a703-3217-8ccf-b40d5fa4e3e4.roa
File: 821329a0-a703-3217-8ccf-b40d5fa4e3e4.roa (raw, json)
Hash identifier: rvS0hRMVBrEezHv8rvQ+MKm4G2iwrFqwf7Zy/FladeY=
Subject key identifier: F9:4B:89:30:6F:31:74:9C:0A:83:0E:C9:F2:18:35:D9:8D:46:2C:56
Certificate issuer: /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial: 010D0C9F43285842DADED3CACD95F887098807C0
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/821329a0-a703-3217-8ccf-b40d5fa4e3e4.roa
Signing time: Sat 12 Aug 2023 01:00:21 +0000
ROA not before: Sat 12 Aug 2023 01:00:21 +0000
ROA not after: Fri 10 Nov 2023 02:00:21 +0000
asID: 62833
IP address blocks: 45.78.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:da:de:d3:ca:cd:95:f8:87:09:88:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Validity
Not Before: Aug 12 01:00:21 2023 GMT
Not After : Nov 10 02:00:21 2023 GMT
Subject: CN=431805c7-b3a3-48dd-8bb3-e545b847a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:d5:d2:de:cc:1f:23:fc:d9:f7:1b:15:e1:
c1:4c:79:f2:e6:de:8c:32:d7:69:7c:34:de:8a:6e:
9e:b3:c5:7d:d9:42:8a:af:e8:fa:1b:18:29:68:e3:
fd:8f:6c:11:17:fe:43:d9:63:bd:ee:53:ab:5c:ba:
d4:2b:97:f7:7e:25:db:b8:d9:42:88:a4:19:a8:45:
43:e0:1d:75:64:f9:a2:a6:d3:cb:51:23:0f:49:b2:
37:9e:6a:48:59:d0:c6:21:a0:aa:71:c7:97:3e:29:
a6:81:88:39:87:ca:ca:04:4f:7b:cf:c4:40:93:8f:
dd:cf:d6:6e:92:ba:33:15:92:09:ff:c1:59:88:ba:
61:c6:29:11:a9:a3:8e:2f:ee:45:79:bd:a4:1a:ac:
d4:cf:1a:8d:29:c1:da:95:26:98:bb:9d:06:71:c6:
d6:dc:17:32:6e:a9:cc:e7:fb:3e:a5:0b:ff:2a:72:
dc:b5:60:2a:37:e7:e5:9c:9c:4a:5d:09:66:15:6e:
0e:2f:0c:82:51:6d:7a:5f:ef:2a:11:7f:e0:d2:9d:
95:8e:19:1d:0b:a8:30:24:41:3f:39:5b:83:51:92:
24:b5:ae:30:97:08:f7:28:8a:51:4c:99:b8:60:c3:
3f:f3:a5:cf:c5:fb:0d:79:8b:62:a2:b1:82:ec:88:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4B:89:30:6F:31:74:9C:0A:83:0E:C9:F2:18:35:D9:8D:46:2C:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/821329a0-a703-3217-8ccf-b40d5fa4e3e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl
X509v3 Authority Key Identifier:
keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
sbgp-ipAddrBlock: critical
IPv4:
45.78.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:b4:7d:3b:c3:79:44:59:8a:e6:d9:a4:15:63:4e:b5:53:1c:
75:90:35:53:d3:48:84:8a:87:95:29:90:e0:1c:5b:be:78:44:
47:f7:16:57:dd:5a:4d:6a:18:8d:2f:dc:4d:fa:a6:3e:f7:de:
82:8b:f7:4b:27:75:5e:fa:c6:f9:69:ce:bf:1b:f1:19:7a:e1:
c2:17:a1:cb:c6:90:02:8e:c3:a3:77:e7:cf:a3:4d:0e:e4:06:
26:f4:b7:e2:4f:18:b3:75:45:42:46:62:3b:3f:fa:8a:c6:b9:
e8:f2:02:a8:6e:b1:2c:90:f0:ce:94:fc:45:c9:a5:e8:29:67:
e4:02:e6:2c:ac:ca:31:07:4a:8d:97:74:ab:39:58:b9:1e:6f:
9b:4f:a0:c5:db:56:b5:46:1e:88:14:70:23:28:ab:23:17:51:
04:9a:42:7f:e5:9c:9a:3d:5f:e9:a6:ae:f1:db:81:0b:e0:e6:
4a:ea:46:f6:54:c5:48:bb:bf:69:0c:00:f8:07:e9:f9:26:91:
44:e9:fe:9c:f4:58:d9:42:30:57:1d:42:fe:5d:27:0a:ca:27:
af:37:5d:b9:c0:06:af:a3:41:9b:0a:37:15:38:9b:62:fe:c1:
74:f2:7e:e6:6a:a7:e2:49:1e:d1:aa:14:53:42:90:a2:15:58:
3b:53:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 17:39:56 2023 by rpki-client on console-fra.rpki-client.org