Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/980738d8-a462-38c1-abc0-f982b36e5557.roa
File: 980738d8-a462-38c1-abc0-f982b36e5557.roa (raw, json)
Hash identifier: QtecMy2+LNVi69hwbCkSqf8bBXJbOHkwmNAkZcVQZCQ=
Subject key identifier: 86:6B:91:27:EF:C3:98:CD:A5:DB:6F:FE:D9:9E:56:2F:B2:7B:30:4D
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F432858446769A6F2D1B55CC80B04C150
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/980738d8-a462-38c1-abc0-f982b36e5557.roa
Signing time: Mon 01 Jan 2024 02:00:16 +0000
ROA not before: Mon 01 Jan 2024 02:00:16 +0000
ROA not after: Sun 31 Mar 2024 01:00:16 +0000
asID: 149242
IP address blocks: 116.206.97.0/24 maxlen: 24
103.228.87.0/24 maxlen: 24
103.228.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 05:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:67:69:a6:f2:d1:b5:5c:c8:0b:04:c1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Jan 1 02:00:16 2024 GMT
Not After : Mar 31 01:00:16 2024 GMT
Subject: CN=b267f894-7df2-42cd-b2e7-6c8f01e076bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:b6:bc:38:79:74:bc:97:c9:c4:7c:74:a7:
18:b6:3c:d5:c0:52:7c:ef:8a:cc:b3:7d:ec:36:78:
af:eb:c7:f2:22:04:42:65:f7:e3:4d:9d:6e:cf:42:
85:42:7c:d8:29:62:75:74:9d:fd:53:f0:18:cd:62:
34:ff:d9:25:23:1b:46:81:8e:59:e4:aa:d2:d2:c6:
11:3f:1d:b5:f5:13:b8:51:14:49:93:31:41:83:05:
4f:07:14:cc:e7:89:19:e5:c4:84:1d:ca:cf:af:8a:
0f:5a:9a:10:31:b3:aa:5a:25:e6:13:1d:58:9b:35:
ae:e0:d0:c3:ad:7c:2d:8a:5d:67:7b:e5:cc:0b:1b:
12:e2:ba:80:a8:7e:76:6a:f1:cf:d9:e3:e5:59:07:
f4:54:8c:ba:90:04:92:f9:bb:9f:82:13:49:43:18:
ba:eb:38:e7:17:82:5e:d5:38:aa:f4:53:f2:1d:e1:
40:91:76:6b:f0:49:b1:4a:37:a1:6a:f6:0f:6c:37:
d9:cb:1a:46:c3:a6:d0:ee:df:fe:d1:33:5f:f3:65:
b7:c5:c3:e9:da:d0:ac:06:7a:94:84:65:a7:f2:6e:
bf:3f:4f:c6:66:34:1f:7c:b6:bc:c8:db:8a:61:bb:
92:5a:b7:41:e2:2a:13:df:9c:11:01:42:20:cb:87:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:91:27:EF:C3:98:CD:A5:DB:6F:FE:D9:9E:56:2F:B2:7B:30:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/980738d8-a462-38c1-abc0-f982b36e5557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
103.228.84.0/24
103.228.87.0/24
116.206.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:6b:08:8a:19:2d:17:86:83:90:64:ab:32:ac:34:72:5f:ca:
02:52:a2:45:77:80:1b:4d:4f:d0:a1:dd:c1:27:9f:bc:a4:b6:
fe:e0:53:9e:42:d0:af:12:4e:13:4f:e0:86:19:c6:f4:72:ac:
53:e8:ff:f2:23:73:50:af:55:b9:08:ea:20:1b:cf:f2:83:8b:
79:80:d4:bd:5a:4c:90:46:76:53:ca:f2:6b:d9:07:67:47:8f:
5e:ca:c8:e8:19:dd:8b:25:41:e9:0c:06:35:1c:8a:fb:94:33:
02:08:a2:cd:cd:b4:4f:08:24:dc:a8:85:5d:82:3f:30:6e:0c:
fb:e0:32:18:99:94:75:20:b2:51:98:f2:3d:6b:07:1f:c4:85:
46:b5:8c:5c:a2:ee:bc:30:15:3e:08:d8:e4:49:0a:4d:66:dc:
b8:2e:23:f8:1c:31:26:64:eb:87:fc:fe:22:ae:36:73:52:d8:
97:c1:00:ea:52:fe:61:76:8c:43:f9:ba:c0:78:85:ed:90:53:
10:e5:6f:6c:e6:39:af:e4:ea:9c:26:31:3b:29:fb:0d:b9:79:
bd:96:ff:0e:31:4f:c6:73:da:2b:d2:b3:24:20:3b:7f:47:3f:
cb:26:3b:35:b2:f7:34:74:f5:cd:fc:d2:b6:81:c6:ba:ea:73:
f4:1e:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 07:15:05 2024 by rpki-client on console-fra.rpki-client.org