Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/3d4bb0ef-db8f-31d9-b170-d8da824ea0d4.roa
File: 3d4bb0ef-db8f-31d9-b170-d8da824ea0d4.roa (raw, json)
Hash identifier: gkUzdA40jQJFnvQx0wquaOyOJPno1dd/P6yAGlcMmgs=
Subject key identifier: 22:22:E4:77:EA:73:C3:C1:95:66:D8:C1:BC:74:10:02:81:58:BD:5E
Certificate issuer: /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial: 010D0C9F4328583E668F774BA39D15061D66B280
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/3d4bb0ef-db8f-31d9-b170-d8da824ea0d4.roa
Signing time: Wed 13 Jan 2021 14:53:00 +0000
ROA not before: Wed 13 Jan 2021 14:53:00 +0000
ROA not after: Sat 13 Jan 2029 05:00:00 +0000
asID: 12085
IP address blocks: 149.234.192.0/19 maxlen: 19
149.234.250.0/24 maxlen: 24
192.80.67.0/27 maxlen: 27
192.80.68.0/24 maxlen: 24
192.80.73.0/24 maxlen: 24
192.122.250.0/24 maxlen: 24
192.206.64.0/24 maxlen: 24
149.234.0.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:66:8f:77:4b:a3:9d:15:06:1d:66:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Validity
Not Before: Jan 13 14:53:00 2021 GMT
Not After : Jan 13 05:00:00 2029 GMT
Subject: CN=1316a60e-3887-4513-8ce1-1dabc9af6d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:53:b9:0c:c3:60:9d:03:03:ab:c1:a0:79:
ec:dd:9f:65:4a:30:8d:a9:8d:65:b9:85:a8:b4:86:
a5:6b:9d:b8:7c:55:16:49:55:3d:31:59:26:e8:08:
ab:67:db:59:f5:a5:3d:eb:40:5b:f9:d6:64:c6:e6:
db:26:3b:54:8a:2c:2a:6a:ac:f5:c7:30:0b:47:1c:
d8:3a:9b:b6:9b:9b:25:d7:a8:c5:9d:00:5f:33:0d:
80:11:3b:5b:ce:03:e9:ea:84:ef:0e:3b:ea:0a:4d:
3a:01:69:38:a2:03:cc:fd:fe:7b:97:69:c1:fa:40:
4c:41:a7:df:69:a5:f3:0f:2c:52:4f:d7:9c:9f:ab:
6a:cc:44:f6:7e:4a:0a:cd:79:7f:ac:5f:b4:52:7e:
af:7e:6c:60:f4:cf:06:43:83:1c:df:04:a3:2c:b1:
8c:51:b6:47:bc:98:50:33:95:21:f8:12:f2:75:28:
bf:73:d0:ae:37:44:ed:b7:f7:f2:6c:e1:72:d7:eb:
c4:f5:b3:5d:8f:59:70:3e:65:58:c2:e6:a3:15:57:
81:63:24:df:a9:16:33:55:4d:26:77:53:ca:c4:60:
2d:7d:fd:aa:c4:f2:0e:c6:0f:d5:02:e3:56:33:d9:
1b:20:bf:d2:80:0a:32:84:9f:65:ee:c5:e7:e7:3d:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:E4:77:EA:73:C3:C1:95:66:D8:C1:BC:74:10:02:81:58:BD:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/3d4bb0ef-db8f-31d9-b170-d8da824ea0d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
X509v3 Authority Key Identifier:
keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
sbgp-ipAddrBlock: critical
IPv4:
149.234.0.0/21
149.234.192.0/19
149.234.250.0/24
192.80.67.0/27
192.80.68.0/24
192.80.73.0/24
192.122.250.0/24
192.206.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:06:93:6e:b0:b1:96:e9:51:3f:b1:1d:75:1e:04:5b:28:f5:
2a:75:e3:31:a7:ef:93:41:98:d8:fb:31:3f:af:a9:13:d2:a6:
0b:cf:66:8b:42:85:20:66:f5:1f:cb:21:53:a3:5e:75:66:3c:
42:6e:6e:a3:12:a4:c5:1f:f2:0c:a6:64:54:2c:61:bd:c9:0e:
3a:79:c6:b4:35:56:83:e7:f1:8c:e8:26:e9:e6:60:4a:74:87:
7c:27:c1:32:8c:9f:3b:aa:a2:e5:0c:d2:51:52:99:a6:2f:6a:
66:33:80:b5:3b:ba:15:b4:9c:6c:2c:a3:b5:13:a0:49:04:a3:
2a:d1:ed:ac:a6:10:16:c6:74:83:23:b1:13:28:bc:ab:cf:c9:
12:57:77:51:23:6c:03:37:1c:08:fe:1a:d9:22:31:ba:54:c6:
10:4c:67:45:67:bb:95:5f:b4:cc:e1:df:3b:f1:15:ea:33:40:
1e:ad:2d:93:12:65:78:e1:94:29:f7:20:82:e1:23:81:c7:b0:
4c:9b:5b:95:13:79:ef:cc:59:74:b9:13:05:cb:3c:dc:1d:d9:
c8:9a:df:0b:30:e2:dc:15:26:71:69:9d:0f:99:46:1d:01:c8:
16:b1:c3:cf:9c:3a:c3:72:30:01:49:64:b7:ce:04:2e:a8:fa:
c4:9f:0d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org