Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d96a02ea-bba5-3991-b521-610cd191f899.roa
File: d96a02ea-bba5-3991-b521-610cd191f899.roa (raw, json)
Hash identifier: wvpf5YRamxKUH8t0dtmh8FIMIBB664yJocZ6yhPmaSY=
Subject key identifier: 93:40:AC:FF:84:38:63:48:8C:23:15:8B:62:D6:8F:77:7E:4F:0F:4A
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F43285842DA8A85D0F0B7DE7227CFFB8C
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d96a02ea-bba5-3991-b521-610cd191f899.roa
Signing time: Fri 11 Aug 2023 22:10:35 +0000
ROA not before: Fri 11 Aug 2023 22:10:35 +0000
ROA not after: Thu 09 Nov 2023 23:10:35 +0000
asID: 15731
IP address blocks: 104.156.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:da:8a:85:d0:f0:b7:de:72:27:cf:fb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: Aug 11 22:10:35 2023 GMT
Not After : Nov 9 23:10:35 2023 GMT
Subject: CN=95f411f8-ae44-4327-9b58-6ad58cce2fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:13:75:09:82:83:9b:d5:7c:55:20:11:73:
df:63:9d:b1:00:75:a7:8e:d7:6f:33:17:b1:14:62:
c3:b4:e7:1a:fd:eb:09:8f:40:4b:57:a9:a2:e7:fe:
e6:af:0c:ed:38:35:4b:f4:0e:34:af:d8:16:14:f9:
21:05:07:de:e7:ab:9b:8c:37:e1:db:47:e5:47:3c:
4e:d2:cc:84:0f:9a:b7:11:e0:39:36:b5:77:bc:25:
58:bb:25:5e:23:76:aa:14:48:30:18:8e:6c:da:69:
4e:f8:71:98:37:a4:49:53:81:dc:30:cf:1d:6e:b9:
d5:da:35:95:c0:f8:1a:ea:0c:a0:1b:80:7d:65:b6:
50:89:ab:5f:58:74:8b:e9:9c:81:b5:d9:2c:50:d6:
e0:43:2b:85:3b:64:d1:be:63:07:4f:ab:75:c3:95:
83:46:1d:52:08:28:bf:de:d8:df:26:14:2f:fe:76:
a3:2f:08:44:ab:1f:45:59:01:92:75:a1:0e:49:0d:
e6:1a:c1:7a:a5:49:3c:47:c7:7b:4b:ad:d1:db:76:
fd:65:4e:db:bd:a0:81:27:37:a0:9e:b8:af:95:3c:
a7:36:7d:57:45:6e:79:d1:f7:db:c0:e8:ee:e9:53:
c3:62:0f:55:10:00:ce:e2:a0:99:1d:ee:98:1a:b0:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:AC:FF:84:38:63:48:8C:23:15:8B:62:D6:8F:77:7E:4F:0F:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d96a02ea-bba5-3991-b521-610cd191f899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:c5:3a:ad:c5:93:a0:97:5f:5f:16:bd:32:cc:98:c1:fd:f0:
8a:d2:86:53:da:53:1b:4b:15:76:67:10:49:2d:a5:a7:a1:3d:
d4:a3:af:17:ea:39:00:56:90:7f:df:8e:8b:1c:32:e1:8b:d6:
0b:b9:72:0f:aa:40:cd:06:e1:cb:4f:8e:72:02:ad:2d:9f:ef:
59:15:db:f7:e5:61:69:52:6a:e7:cc:b9:23:39:66:5a:68:52:
e9:6c:8f:e7:20:a6:0e:7a:5b:43:34:ec:dc:d4:d7:40:fc:28:
58:48:cf:14:c6:f9:22:26:a4:66:0f:8e:96:7c:da:a0:bb:f6:
3e:1b:86:9a:a9:bc:9b:f3:7b:17:01:57:60:30:c0:e6:eb:32:
bf:5e:c4:e4:88:ab:c4:ef:41:64:c6:f0:e2:27:d9:f3:09:9d:
27:21:bb:f1:09:d5:f5:d4:8b:3f:93:b4:eb:c3:90:d4:5a:a8:
11:c2:3a:0e:67:26:42:a6:f6:7d:01:26:cd:de:80:91:d1:be:
f7:12:98:a6:2f:54:d4:f9:ae:72:40:e2:20:88:9c:7a:69:ba:
46:c0:de:c0:23:77:60:4b:fb:00:3e:d1:3a:08:f7:87:ae:27:
27:0c:3c:8c:81:9c:02:d3:58:0c:a5:f1:1e:14:ed:2f:4f:67:
a4:58:89:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 17:17:54 2023 by rpki-client on console-ams.rpki-client.org