Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/07c85831-48ae-3778-b6f6-5f596ecc2c01.roa
File: 07c85831-48ae-3778-b6f6-5f596ecc2c01.roa (raw, json)
Hash identifier: XhN984g8m/MVGlo03cIPLZUmECl+Cyvh9p1P7DkGc0M=
Subject key identifier: C3:66:27:54:15:4A:A2:E5:5F:F7:61:21:A6:51:55:18:F1:DD:A9:F1
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285843DE9E2DF3964E3976C2E04780
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/07c85831-48ae-3778-b6f6-5f596ecc2c01.roa
Signing time: Mon 13 Nov 2023 02:00:15 +0000
ROA not before: Mon 13 Nov 2023 02:00:15 +0000
ROA not after: Sun 11 Feb 2024 02:00:15 +0000
asID: 16509
IP address blocks: 103.228.85.0/24 maxlen: 24
137.59.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:de:9e:2d:f3:96:4e:39:76:c2:e0:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Nov 13 02:00:15 2023 GMT
Not After : Feb 11 02:00:15 2024 GMT
Subject: CN=ab73626e-f576-4b6e-a66b-833406959bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:65:56:60:4e:43:6c:8e:f9:aa:57:7d:6e:
21:9b:1c:0a:e2:fe:98:74:1e:10:05:c2:5e:fc:ab:
a1:52:18:de:c4:98:97:9a:7a:ac:f8:9e:b5:b7:a1:
0a:e9:ff:67:92:7d:d5:89:f6:56:37:37:cb:9f:f3:
a5:3d:16:19:be:30:2e:9c:80:25:b3:e0:be:84:92:
a2:17:2a:bc:02:b5:57:cc:eb:76:2c:8b:67:fb:d0:
88:11:30:94:ac:da:03:b8:42:3d:da:52:89:8d:2c:
e3:a8:b3:e0:36:9b:1b:3c:fa:20:8a:2e:b7:a2:af:
0e:82:16:55:ab:3a:35:b3:fe:c6:30:4a:10:95:61:
06:6f:f4:d1:00:fd:f2:4b:8d:6f:87:46:fa:6b:9d:
88:3d:d5:bb:4c:20:85:65:c1:22:72:2a:ea:57:cd:
26:d5:a7:dc:ab:65:14:98:51:3d:b0:09:37:9d:9e:
d1:ec:0f:e1:d4:ad:01:25:79:5f:dc:91:35:93:05:
8d:d6:2c:7c:c6:e8:d0:95:2a:70:33:2e:0f:60:a7:
5f:ad:25:30:03:9d:21:73:f3:a2:95:27:40:a8:17:
68:52:49:dc:43:12:e3:69:5e:39:f8:45:22:18:3a:
64:3a:b2:0d:98:96:54:39:73:8e:78:2a:57:dd:1f:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:66:27:54:15:4A:A2:E5:5F:F7:61:21:A6:51:55:18:F1:DD:A9:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/07c85831-48ae-3778-b6f6-5f596ecc2c01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.228.85.0/24
137.59.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:b1:fb:44:92:04:12:5a:1f:78:48:da:2b:fe:f1:4e:90:d1:
c7:31:a4:6b:35:5e:69:47:9d:e1:9e:02:ac:20:66:07:9e:ab:
7a:94:9d:cb:73:a8:a9:ce:67:45:db:c1:b7:d8:97:91:4a:11:
13:f6:a6:a4:6c:0c:b3:9c:38:02:bd:7e:6a:d2:84:f2:96:94:
23:2b:68:e6:fe:a9:20:b2:ff:e9:81:e4:0a:ff:b4:dc:04:21:
c2:43:57:46:de:6e:67:b2:de:7c:f4:8c:25:f9:8c:b2:be:59:
0b:35:65:08:b4:e3:6a:75:35:ab:ff:b0:2e:81:90:14:94:a1:
c2:1e:b6:51:7d:40:cb:dc:4b:78:b0:5c:12:d8:12:42:1b:e0:
ae:09:ed:ea:4c:f1:3b:eb:46:90:b1:45:e2:70:2d:52:3c:ce:
18:e1:c3:cc:fd:0f:5c:42:ed:a3:ff:be:91:2e:54:d4:70:fb:
c3:e5:df:5e:9a:e0:ca:8c:9e:6a:1f:01:63:48:de:f3:e3:4b:
c6:1c:dd:e9:d0:b4:c8:0f:1a:d4:ac:c9:31:d3:9a:fb:5c:bd:
78:ee:c6:b2:70:82:b1:0e:45:ec:56:3f:97:52:99:d8:3f:90:
5c:e9:3c:7c:a1:e1:51:ea:33:f2:b9:83:0e:da:17:3f:00:8e:
ba:83:07:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 14:28:08 2023 by rpki-client on console-fra.rpki-client.org