Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/4a7be8da-3baa-36b8-8cb3-8c28df732339.roa
File: 4a7be8da-3baa-36b8-8cb3-8c28df732339.roa (raw, json)
Hash identifier: KJBYQLiZscw0I0M7DZVpJ+9G1kXvujANWhFqH0E8ets=
Subject key identifier: C6:A6:E9:5A:DC:FA:1A:7E:39:9A:86:7C:0D:6C:CA:29:C1:14:88:A3
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285844B6DD43C23F29B30939045A80
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/4a7be8da-3baa-36b8-8cb3-8c28df732339.roa
Signing time: Mon 29 Jan 2024 13:02:05 +0000
ROA not before: Mon 29 Jan 2024 13:02:05 +0000
ROA not after: Sun 28 Apr 2024 12:02:05 +0000
asID: 149197
IP address blocks: 103.251.25.0/24 maxlen: 24
103.49.152.0/24 maxlen: 24
103.49.153.0/24 maxlen: 24
103.49.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 04:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:b6:dd:43:c2:3f:29:b3:09:39:04:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Jan 29 13:02:05 2024 GMT
Not After : Apr 28 12:02:05 2024 GMT
Subject: CN=4bbe1f36-e719-497b-9368-8dee1de0c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:df:b7:2d:94:42:2b:9a:b1:a0:a5:3d:d9:
ca:41:37:56:ce:e0:c1:ca:70:d1:ea:fe:6a:de:ee:
20:09:d3:af:7f:cc:b5:d1:5d:59:01:98:61:ef:46:
7d:a5:66:df:84:9c:bb:52:c1:34:ed:c3:0b:54:55:
ca:89:aa:8e:0c:ae:c4:f4:06:72:0e:6d:96:4b:f3:
22:91:98:e3:93:1c:4a:71:b3:99:ac:70:0f:05:b0:
f7:b6:0a:01:5e:99:77:77:b8:c2:b5:ac:3b:45:b4:
00:ae:3a:2b:3e:bb:74:37:3e:97:46:21:e3:de:17:
ec:9a:1e:ff:e1:e8:95:44:cd:44:17:84:65:6b:1d:
cf:fa:df:74:19:fa:00:5c:76:82:a3:46:42:c0:b4:
1e:99:d2:1f:7c:0f:cc:28:a4:77:9a:ac:2f:b7:6c:
28:d5:fc:8d:7e:df:40:d7:cf:f5:7a:d0:34:96:24:
63:09:23:8c:e8:e2:9a:be:26:c5:05:11:f2:3f:b6:
b4:22:5c:32:d7:e7:d6:4f:06:ca:f5:3d:05:d6:ba:
9b:fb:38:d7:de:c1:d0:40:7c:2c:ed:d7:e6:35:75:
92:0a:82:d2:ec:8a:33:1f:f3:87:86:28:0c:52:79:
a6:1d:ce:0c:d3:32:a4:3d:60:9c:18:ff:7f:a6:1d:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A6:E9:5A:DC:FA:1A:7E:39:9A:86:7C:0D:6C:CA:29:C1:14:88:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/4a7be8da-3baa-36b8-8cb3-8c28df732339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.49.152.0-103.49.154.255
103.251.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:ee:6f:70:34:b0:b7:91:7c:5d:ad:7e:9f:6c:40:7d:a5:bc:
04:32:db:c4:2d:a4:c7:03:6f:e8:a3:60:03:b2:37:5f:c5:c2:
ef:d9:b9:e8:40:02:48:e7:0f:1c:f0:a4:bd:7d:c9:c0:ab:b2:
a7:30:64:0d:c6:46:8e:2e:a2:f0:c8:1c:b0:bc:86:b9:2c:39:
cc:a0:09:27:91:f5:e5:76:53:64:22:b5:b3:56:fa:ac:58:bb:
95:3c:6b:9a:11:78:d1:df:88:50:16:22:6e:44:91:1b:05:d1:
04:bd:ff:78:e9:a2:1c:6e:4b:b0:38:9a:3d:3b:87:2e:ab:b5:
0d:17:ed:86:32:df:84:3e:fc:ef:50:f5:b0:8a:6b:42:b0:77:
bd:ab:15:7e:d5:c3:08:cc:6d:db:58:52:30:ad:b3:8d:5f:24:
f4:e5:a9:bc:df:f7:e2:d2:ee:6f:32:fb:2b:f0:66:77:d6:be:
0b:9a:fb:05:71:dc:f5:bf:dd:59:bb:f6:30:50:26:51:52:f6:
ca:07:71:f0:d2:7f:39:96:6d:e5:9b:2b:5a:ba:9e:72:b0:c0:
40:67:3d:c1:54:37:a9:8e:95:4f:a6:da:2e:26:f1:da:02:42:
af:11:ee:24:74:37:9d:4f:61:e9:30:e1:bf:72:6c:5a:18:07:
b3:6d:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 06:07:12 2024 by rpki-client on console-fra.rpki-client.org