Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/fa4e7899-e938-30a8-af19-861375dabf6d.roa
File: fa4e7899-e938-30a8-af19-861375dabf6d.roa (raw, json)
Hash identifier: HYiXyXp8MA7mvN3aPoMirQekuqGtrTl+gaAPkq+8JVo=
Subject key identifier: 32:F6:A9:FD:8C:ED:E4:EF:CA:3B:C6:E6:66:45:0C:79:80:4A:41:C2
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285843A01493FAA23C657281717900
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/fa4e7899-e938-30a8-af19-861375dabf6d.roa
Signing time: Sat 21 Oct 2023 16:23:00 +0000
ROA not before: Sat 21 Oct 2023 16:23:00 +0000
ROA not after: Fri 19 Jan 2024 17:23:00 +0000
asID: 20303
IP address blocks: 198.145.128.0/22 maxlen: 22
198.145.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a0:14:93:fa:a2:3c:65:72:81:71:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Oct 21 16:23:00 2023 GMT
Not After : Jan 19 17:23:00 2024 GMT
Subject: CN=7179daad-c688-4fd2-a1f2-06e917d06539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:f5:93:4a:da:11:14:57:36:d1:88:d3:30:
b9:74:22:e4:ff:0d:ac:23:8c:41:06:87:cb:e9:6e:
15:30:43:17:6a:89:7d:20:d2:27:fc:b7:b0:36:e1:
aa:dd:13:cd:72:91:47:b8:45:a9:3f:3b:4e:90:e9:
6f:8a:bf:08:48:a3:2a:2e:22:30:33:ce:55:7b:76:
a2:b8:53:f7:e4:ca:b0:2b:14:81:f6:f5:b6:e8:0e:
66:8a:ef:fa:5b:9a:b6:52:63:1f:a8:e7:7f:e1:ba:
b7:79:56:58:9a:d9:2e:03:ba:a3:99:ac:3d:4f:d1:
97:9e:08:4b:71:48:1f:16:ca:0f:19:ca:4b:06:94:
1b:ec:ed:36:15:cc:9c:9d:04:c2:b9:a5:9c:f6:42:
5c:11:ec:b8:60:b8:3a:16:8c:5c:7d:6b:57:8c:60:
61:0e:38:0d:28:da:90:09:03:8d:79:78:77:c4:53:
b7:b2:49:23:76:01:38:05:da:b0:e2:da:2a:64:d8:
b6:2a:0e:3e:ab:f5:34:dd:f9:3a:54:22:0a:ea:c3:
82:c2:43:a5:f0:36:78:5d:df:64:54:b1:b1:a5:ee:
eb:d6:c1:1c:fb:3c:61:53:ec:86:32:89:6d:f1:38:
f1:d4:2f:85:0b:c0:76:b0:b3:64:0d:ab:0e:a8:ba:
ff:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:A9:FD:8C:ED:E4:EF:CA:3B:C6:E6:66:45:0C:79:80:4A:41:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/fa4e7899-e938-30a8-af19-861375dabf6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.68.0/22
198.145.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:31:37:41:db:20:11:87:54:35:5c:3c:19:53:ec:e8:91:61:
a7:1a:ea:68:e0:2b:c0:45:94:7a:fc:8d:7c:7a:9a:5c:21:7f:
fb:25:3c:89:b3:fc:a8:a9:39:ca:69:be:54:1d:1c:33:25:be:
84:17:ef:77:24:51:55:29:00:d8:df:ac:a8:53:4d:fd:d3:aa:
65:ef:9b:47:f9:9d:32:20:59:08:80:fc:fe:d8:5c:b5:66:ca:
3e:fb:e5:79:1d:5d:3b:5c:db:22:89:06:e2:cb:56:4d:7f:70:
f8:b4:32:2e:27:e2:1a:63:92:1e:49:b6:2b:25:f1:c1:fa:cf:
5e:f2:3f:89:07:e0:4a:65:97:27:4c:34:a9:ef:05:25:2f:90:
b4:d4:ab:d7:47:bd:6d:23:2c:b9:6b:4c:43:1d:aa:43:21:9d:
9e:c4:89:22:9b:53:65:0a:3c:e7:f8:f1:cb:8b:59:2e:77:76:
85:c9:83:41:0e:02:54:8a:a9:3e:a8:b2:dd:1c:05:7c:e7:c1:
75:8b:d2:16:e1:3e:b7:b6:3d:e8:ae:d1:05:79:ee:ae:8f:5d:
2e:9c:f8:cb:c0:ad:da:02:0a:db:3c:ea:7c:b7:80:f2:90:f0:
53:1a:53:83:4a:ae:d8:7b:b3:b0:80:6b:4c:81:df:2b:01:64:
f0:e2:42:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 22:39:24 2023 by rpki-client on console-ams.rpki-client.org