Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/22a90dfb-861a-38f5-b1dd-13e43819e471.roa
File: 22a90dfb-861a-38f5-b1dd-13e43819e471.roa (raw, json)
Hash identifier: KqGyUWg7Q+AmD6EGoyL9IWHo0+x/jehJo+b1lIiXDMg=
Subject key identifier: 3A:32:63:29:49:A7:3C:A8:D0:F4:1F:54:EB:DD:10:00:26:59:14:30
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285843C60301EDB3C91E3BDD8D91C0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/22a90dfb-861a-38f5-b1dd-13e43819e471.roa
Signing time: Sat 04 Nov 2023 06:28:19 +0000
ROA not before: Sat 04 Nov 2023 06:28:19 +0000
ROA not after: Fri 02 Feb 2024 07:28:19 +0000
asID: 400536
IP address blocks: 103.21.52.0/24 maxlen: 24
103.65.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c6:03:01:ed:b3:c9:1e:3b:dd:8d:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Nov 4 06:28:19 2023 GMT
Not After : Feb 2 07:28:19 2024 GMT
Subject: CN=3db976c2-6c33-4a1a-bcf9-3dec56fa0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:d7:19:ff:db:81:a6:7d:9c:c6:af:cd:f4:
c1:af:f5:6b:eb:ca:0e:6f:cf:e5:4f:b3:9f:58:05:
bc:f9:95:54:ea:1e:db:36:d6:bd:ae:9e:67:6d:07:
c8:00:71:a1:ee:b3:46:de:8a:2a:2c:d0:7e:84:f0:
26:e2:13:83:fc:83:13:02:fe:3d:39:5c:61:3a:c6:
48:86:bf:ce:33:ce:8a:e7:df:7e:2d:cd:b8:e3:bc:
66:4c:f4:14:36:81:00:f7:04:fe:19:76:50:05:7c:
a7:4d:6c:cb:38:82:35:f1:d1:4d:47:8d:98:d5:2f:
27:0b:53:34:c2:44:44:f9:7a:f8:6c:88:31:c4:86:
81:14:61:4b:eb:bf:f2:04:6e:16:a2:99:bc:01:25:
b3:eb:bd:8a:8c:1b:42:f6:05:ee:f3:e9:a9:54:db:
15:06:cf:a7:f7:95:31:66:de:c5:9b:aa:9f:b8:72:
1f:0c:ae:bd:4a:c9:03:99:bc:0c:9b:03:f9:80:cd:
d9:3f:77:fc:c9:77:b0:8d:f7:e6:3b:95:02:8a:a2:
bd:3d:68:90:48:99:18:04:2b:02:39:51:0e:e2:f4:
17:f3:4b:2f:7b:e2:62:92:c7:2d:35:2f:a2:bb:3e:
41:8e:ca:cb:90:46:94:10:13:c1:f7:96:d0:94:41:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:63:29:49:A7:3C:A8:D0:F4:1F:54:EB:DD:10:00:26:59:14:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/22a90dfb-861a-38f5-b1dd-13e43819e471.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.21.52.0/24
103.65.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:e2:e2:fa:c3:29:49:86:64:f5:44:7c:3b:08:ca:9b:c5:e6:
1b:17:f0:dd:69:bc:bb:a0:1e:c4:40:b5:cb:45:67:d3:e2:f7:
e1:f9:ff:c5:26:01:de:7e:b3:4f:c5:4d:d4:38:19:0a:53:fa:
6c:a7:1b:52:95:07:65:a3:eb:3d:26:44:e6:de:e0:39:4e:07:
cd:ac:15:78:d2:7a:c9:c6:5e:e1:73:ca:85:7e:2a:fd:54:41:
51:a3:e5:f8:f8:c4:ca:50:50:d5:e7:da:58:1c:a3:82:f3:de:
89:66:a1:e0:75:9b:55:d0:11:88:9c:51:dc:cb:48:cb:53:eb:
2c:61:c4:d5:4e:53:9b:36:4f:da:eb:42:61:9b:6a:cc:86:f4:
65:f5:e8:52:b7:17:d3:73:0f:b1:7f:f6:ef:5b:8e:2d:7a:55:
e7:0b:68:4b:f1:ac:0f:37:3f:06:c0:48:5a:41:ae:46:62:5c:
7e:8c:47:55:5e:af:5b:6a:49:17:9f:ad:47:ca:64:a6:a3:be:
13:f6:09:f3:c9:19:d2:99:98:c9:6e:35:57:69:45:d1:86:27:
1b:f2:57:3d:8e:67:87:9d:70:2b:05:d3:d0:8e:a7:83:33:01:
d3:cf:b7:21:2a:f4:1f:a9:79:c7:14:88:75:d4:4e:10:12:ee:
86:50:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 16:51:54 2023 by rpki-client on console-fra.rpki-client.org