Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/4fe3c715-63ed-34e2-aed8-8cbcf6434ac8.roa
File: 4fe3c715-63ed-34e2-aed8-8cbcf6434ac8.roa (raw, json)
Hash identifier: wT3SR+WW26Hq+INCY9WqORmEW7S/Ym2ylVlIkQg0k+Y=
Subject key identifier: 1D:8F:FB:C0:14:BB:75:53:B8:55:CF:0C:DD:D4:96:51:38:7B:0A:0E
Certificate issuer: /CN=d90d18d1-dead-4d11-bed3-243759e40831
Certificate serial: 010D0C9F4328583ACAE5F3F3BBE912B05E4DBB00
Authority key identifier: 61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/4fe3c715-63ed-34e2-aed8-8cbcf6434ac8.roa
Signing time: Mon 02 Aug 2021 04:00:00 +0000
ROA not before: Mon 02 Aug 2021 04:00:00 +0000
ROA not after: Sun 27 Apr 2031 04:00:00 +0000
asID: 3066
IP address blocks: 168.245.132.0/23 maxlen: 24
168.245.232.0/23 maxlen: 24
208.72.84.0/22 maxlen: 24
216.41.142.0/24 maxlen: 24
2610:178::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:ca:e5:f3:f3:bb:e9:12:b0:5e:4d:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90d18d1-dead-4d11-bed3-243759e40831
Validity
Not Before: Aug 2 04:00:00 2021 GMT
Not After : Apr 27 04:00:00 2031 GMT
Subject: CN=7f99f384-7459-400e-8c19-9e883287abcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:2e:5e:ae:b4:8b:ab:06:ce:0e:02:16:e2:
53:59:a3:24:66:08:b5:a3:1f:f9:a9:3e:7b:6c:68:
8d:a4:f5:25:00:cb:a6:a1:f3:1f:84:00:bc:00:18:
3f:5b:29:62:25:35:35:21:3b:5b:6e:cc:16:c6:36:
1b:d7:f2:a4:97:fc:21:5f:45:b6:ce:e8:0e:6b:c5:
5f:b4:33:19:57:88:c0:a4:5d:6a:59:be:2f:9d:82:
84:b9:cf:a2:ac:df:aa:89:61:83:e4:25:94:99:5a:
a2:f1:71:17:de:0d:56:db:5d:0c:57:63:57:ff:ad:
5a:11:ba:25:e4:36:c6:b5:cc:e9:cf:da:aa:3f:b1:
39:3b:e4:04:f9:7e:70:5f:0b:ab:54:84:d6:4b:8a:
a9:da:32:da:59:4c:79:25:ee:7e:6e:93:8a:a4:d9:
b8:8f:37:bf:2e:a9:f5:00:3e:f0:f7:97:b6:e9:cc:
aa:7a:23:d8:f7:00:bc:ba:a0:87:59:5f:19:4d:fb:
30:d4:4f:c8:15:37:12:80:a3:e8:0a:0a:18:fa:5d:
b1:f7:76:d0:0b:c5:a7:cc:31:b2:ce:cb:9d:3b:ca:
04:6d:6b:6c:6d:eb:13:e2:80:ed:69:8d:74:77:e3:
18:ff:30:49:af:27:83:72:6f:bc:d1:64:86:66:11:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8F:FB:C0:14:BB:75:53:B8:55:CF:0C:DD:D4:96:51:38:7B:0A:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/4fe3c715-63ed-34e2-aed8-8cbcf6434ac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831/d90d18d1-dead-4d11-bed3-243759e40831.crl
X509v3 Authority Key Identifier:
keyid:61:32:55:2F:11:F0:26:05:2B:F5:5F:AE:CA:CA:C4:A7:9A:70:59:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d90d18d1-dead-4d11-bed3-243759e40831.cer
sbgp-ipAddrBlock: critical
IPv4:
168.245.132.0/23
168.245.232.0/23
208.72.84.0/22
216.41.142.0/24
IPv6:
2610:178::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:87:8a:dd:86:cb:09:4b:26:15:c4:69:c4:29:d1:94:f1:d8:
4b:5b:bc:a2:7a:6a:d8:f9:d5:f5:d4:f3:f0:18:00:17:0f:d9:
46:b8:ea:f8:f1:92:a1:3c:73:3c:de:3a:61:82:e8:87:d8:aa:
ef:9f:8d:74:6a:10:6c:73:56:8d:1f:6c:4c:2e:15:3a:05:31:
0e:c1:90:e0:57:cf:ab:70:c1:05:b4:a2:ea:a8:60:1b:0d:8a:
b5:9f:4c:76:4b:fd:5a:0c:3b:62:58:ef:f2:c2:44:35:0a:1e:
aa:a7:1f:cd:15:80:dd:df:b1:67:df:a0:5a:b1:61:54:b9:7f:
e5:b0:f7:15:9b:02:6b:5d:c4:07:42:b8:ec:1f:e5:02:b3:61:
7b:2e:74:fa:c1:08:28:c5:5e:f5:61:02:bf:2c:6f:20:04:34:
b8:9f:92:bc:cf:3b:26:da:0a:c9:72:a0:f5:a9:3b:28:ab:7d:
89:f9:0c:c4:38:b9:8a:3d:db:03:2a:cd:86:e2:ec:7c:52:53:
1d:a5:c7:bc:b5:ad:69:bd:3a:95:7a:f2:13:c3:b0:4f:b6:82:
e1:13:29:b4:1f:07:01:e4:47:3d:35:42:64:22:b3:45:14:a2:
94:6b:20:de:79:b1:67:d7:1e:ad:a0:0a:61:56:0d:6a:4f:2a:
ef:70:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 12:12:32 2023 by rpki-client on console-ams.rpki-client.org