Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/f201c0ff-6953-3907-877a-23329d308a11.roa
File: f201c0ff-6953-3907-877a-23329d308a11.roa (raw, json)
Hash identifier: GUYknRpRgJo7JTwiHQno381gUOuLRSJ3xWeqQ0QqMKE=
Subject key identifier: EF:55:08:F4:A8:99:D9:9B:6B:96:19:A5:EC:7A:6E:A5:67:CF:7A:E8
Certificate issuer: /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial: 010D0C9F432858435A840542F50AC1CBD7CC6780
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/f201c0ff-6953-3907-877a-23329d308a11.roa
Signing time: Tue 26 Sep 2023 18:20:57 +0000
ROA not before: Tue 26 Sep 2023 18:20:57 +0000
ROA not after: Mon 25 Dec 2023 19:20:57 +0000
asID: 16509
IP address blocks: 158.26.56.0/21 maxlen: 21
158.26.168.0/21 maxlen: 21
158.26.216.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:84:05:42:f5:0a:c1:cb:d7:cc:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
Validity
Not Before: Sep 26 18:20:57 2023 GMT
Not After : Dec 25 19:20:57 2023 GMT
Subject: CN=574b2e41-a966-49fd-9b18-53456b46b9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f4:f9:38:fd:07:86:ac:c9:bc:e6:a8:5a:70:
c5:5c:04:98:29:a5:de:db:78:8a:60:39:37:63:c6:
e7:b2:cc:9d:64:3b:fd:c4:f1:eb:d3:cc:a3:21:c4:
21:e0:67:5e:6c:f2:f7:37:87:b3:e1:aa:56:e8:d9:
ef:56:cc:61:9a:fe:df:4e:f7:e4:00:2e:08:35:27:
bf:08:ab:98:9f:f2:23:5d:18:04:38:3b:6f:37:a8:
33:b6:fd:d3:82:28:3d:d7:8b:de:fd:a6:20:2e:00:
60:de:24:33:9e:4d:45:7e:93:f8:49:09:54:e7:02:
15:00:5b:b4:43:4f:f8:8e:fc:40:aa:b3:91:b7:f1:
92:7e:ca:e0:4b:80:e6:45:4c:fd:32:b5:fe:ed:67:
3f:0d:99:1f:2b:f5:93:9b:47:8a:b1:bd:f2:39:d2:
c2:4d:41:12:c0:9d:57:8c:82:02:75:5f:1f:74:92:
1d:95:15:7e:04:98:e9:43:52:fa:f8:70:d2:99:25:
de:e3:fa:6b:c9:d8:3a:36:fe:d9:37:76:99:83:f2:
4f:8a:31:25:f0:de:9f:8a:72:35:ba:f4:92:bb:08:
64:6b:cf:6e:c0:27:e1:e8:29:31:f6:be:5b:8b:a5:
1b:d1:a4:6b:00:7b:29:e3:22:e1:6e:5f:4e:2b:96:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:55:08:F4:A8:99:D9:9B:6B:96:19:A5:EC:7A:6E:A5:67:CF:7A:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/f201c0ff-6953-3907-877a-23329d308a11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
X509v3 Authority Key Identifier:
keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.26.56.0/21
158.26.168.0/21
158.26.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:26:cf:92:66:2b:8a:68:2b:ae:9f:02:7f:b8:aa:96:06:b6:
66:2b:86:a3:58:fa:be:e5:45:1b:52:1d:7c:56:f3:8b:4c:0d:
40:88:ff:e0:04:81:24:37:62:d8:ac:fb:ad:07:89:cd:f5:f1:
dc:5d:f0:64:4e:03:51:6d:aa:e1:17:88:6d:93:6a:23:3f:d8:
f3:7b:da:df:f8:de:56:fc:47:e4:fc:94:f8:7c:a6:7d:ed:a2:
68:89:6c:14:cb:9d:71:ba:e8:bd:3c:ee:01:85:2e:d5:93:4c:
93:b8:aa:a9:b0:0e:4d:e6:34:48:42:d4:46:6e:76:f9:c9:75:
f9:7f:1e:cc:07:bb:f4:cd:01:55:3f:35:c8:7f:4c:4e:70:77:
64:81:74:d0:a9:5d:d7:cd:32:37:d2:a0:6f:5b:d5:b5:a8:9e:
19:04:f4:76:16:0e:ee:62:4f:65:00:0e:08:2b:55:93:38:19:
12:5e:c5:12:eb:1a:a2:a5:84:dc:5f:63:b6:de:4a:9e:ce:60:
6f:91:73:a6:25:97:d1:87:91:c1:70:2b:ef:16:51:83:bf:55:
cf:26:24:c6:fd:b2:6a:1e:34:3a:bc:35:96:94:37:af:31:c6:
94:eb:c8:cf:40:9d:09:02:26:ce:71:53:8d:53:4c:cf:1b:ce:
40:70:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 19:52:54 2023 by rpki-client on console-fra.rpki-client.org