Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/07bd4ae5-e94d-3bae-9c7e-eae5f5185aa9.roa
File: 07bd4ae5-e94d-3bae-9c7e-eae5f5185aa9.roa (raw, json)
Hash identifier: ImCNA4S4QePepVdFsabSltfeu2ybCI7oo7L5nEeUN4s=
Subject key identifier: F9:60:E4:1D:90:DE:CB:1B:41:DD:55:8B:8E:7D:D2:D7:61:8E:FF:F3
Certificate issuer: /CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6
Certificate serial: 010D0C9F432858441E012841943F3A3011418100
Authority key identifier: 91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/07bd4ae5-e94d-3bae-9c7e-eae5f5185aa9.roa
Signing time: Tue 05 Dec 2023 18:55:43 +0000
ROA not before: Tue 05 Dec 2023 18:55:43 +0000
ROA not after: Mon 04 Mar 2024 18:55:43 +0000
asID: 398038
IP address blocks: 192.173.144.0/21 maxlen: 24
161.38.62.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1e:01:28:41:94:3f:3a:30:11:41:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6
Validity
Not Before: Dec 5 18:55:43 2023 GMT
Not After : Mar 4 18:55:43 2024 GMT
Subject: CN=b91e1f11-e728-4fca-a62c-6a70cfba2f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:c5:ce:f3:ec:93:7d:99:4d:ce:ab:38:d0:
3b:b9:22:e7:45:1b:1b:33:6c:98:95:46:45:12:47:
88:24:5e:bf:77:93:56:aa:ae:14:0b:c7:89:06:34:
7e:43:cb:91:9e:23:55:8b:97:c2:4d:81:f3:ea:12:
8b:9e:a6:bd:34:77:49:d9:33:cf:d0:43:12:2d:ae:
ee:01:ef:ed:f8:16:8b:74:64:08:15:7e:de:52:dc:
e8:ef:b3:0b:16:c2:b5:81:27:4b:40:92:e1:d8:0a:
df:cf:de:f7:b5:31:f3:eb:af:5d:ba:9e:b7:17:1b:
25:08:fe:aa:51:c2:bf:b4:8d:40:4b:dd:29:32:97:
01:98:ba:00:7d:e0:49:15:56:2b:45:53:cd:65:4d:
95:a2:58:b4:f6:e7:ff:25:a4:dd:66:0c:8f:e0:d7:
84:d0:6e:0f:9f:e5:9d:29:ba:6e:67:6a:66:2d:5c:
55:24:d4:34:13:f7:53:ec:97:4d:74:02:8c:bf:2a:
61:d5:dd:cb:c9:81:4a:fe:91:cf:2a:21:dc:92:82:
79:c2:36:8e:b0:62:29:1d:ed:ff:3e:15:c6:d3:83:
a2:d6:bb:ee:5a:d1:95:33:ba:5d:7e:39:be:9f:6d:
7e:ce:4b:27:d7:5a:04:08:98:35:ab:bb:38:6b:1c:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:E4:1D:90:DE:CB:1B:41:DD:55:8B:8E:7D:D2:D7:61:8E:FF:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/07bd4ae5-e94d-3bae-9c7e-eae5f5185aa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.crl
X509v3 Authority Key Identifier:
keyid:91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer
sbgp-ipAddrBlock: critical
IPv4:
161.38.62.0/23
192.173.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:4a:48:36:ef:0b:da:1f:87:7a:ce:a8:58:a2:ce:1b:4e:b3:
e3:35:fe:72:3c:80:41:ef:47:e6:52:70:ae:28:47:73:dd:4d:
e5:aa:5c:e4:48:de:0c:34:c4:21:45:dd:6d:14:e6:c3:62:ac:
f0:b4:53:98:14:63:4a:fb:10:09:b8:00:5d:fd:2e:6d:85:4d:
6c:37:0f:e0:3e:38:73:7c:df:b5:cf:d7:fe:04:86:a2:83:62:
b8:02:51:57:29:f6:3f:74:ac:94:7e:fe:3e:91:91:8f:1e:4a:
83:cf:b3:cc:11:a3:26:e8:d5:91:b4:52:62:57:f1:c0:28:01:
22:6d:da:1a:77:1e:ca:3b:61:82:10:21:f6:98:b7:f3:ac:cb:
6e:16:b1:e0:c0:25:f5:08:0c:83:94:39:05:97:5a:60:73:80:
8c:ff:d2:49:9c:21:31:7b:02:d8:f3:f0:6d:76:c3:b0:35:c6:
2a:11:47:30:8d:8b:0b:69:c1:4a:f6:5b:23:79:65:10:15:3a:
90:04:0e:41:86:57:ee:3d:87:3f:f9:b0:f2:3c:66:05:3c:21:
5a:2e:c5:04:d6:b3:91:7e:61:b2:9d:b0:cb:d2:cf:77:46:9a:
6e:6f:38:0b:0b:13:c6:c6:65:c4:a8:2f:f5:44:9e:32:02:20:
8a:c8:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 16:47:23 2023 by rpki-client on console-ams.rpki-client.org