Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0d28feb4-0b95-3863-935d-9b182bc5f4a1.roa
File: 0d28feb4-0b95-3863-935d-9b182bc5f4a1.roa (raw, json)
Hash identifier: xJ+KIBEIZlQE1WORGvltM1yaj0OeWCB/ICZ8fm/l4EU=
Subject key identifier: D4:A7:80:58:9F:41:A2:56:54:B4:F5:39:6C:AF:37:73:B2:8F:54:55
Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Certificate serial: 010D0C9F4328584147A692DEC64A06C65227BD00
Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0d28feb4-0b95-3863-935d-9b182bc5f4a1.roa
Signing time: Mon 20 Mar 2023 12:09:29 +0000
ROA not before: Mon 20 Mar 2023 12:09:29 +0000
ROA not after: Sun 22 Jun 2025 04:00:00 +0000
asID: 393581
IP address blocks: 206.57.128.0/20 maxlen: 20
206.57.144.0/21 maxlen: 21
206.57.168.0/21 maxlen: 21
206.57.176.0/20 maxlen: 20
206.57.192.0/19 maxlen: 19
206.57.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:47:a6:92:de:c6:4a:06:c6:52:27:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28
Validity
Not Before: Mar 20 12:09:29 2023 GMT
Not After : Jun 22 04:00:00 2025 GMT
Subject: CN=498f8485-9894-47e2-ba09-8f1c64b8bb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ab:46:69:63:58:1e:98:cc:4c:d5:6a:42:f8:
4e:18:a1:ab:cc:6f:20:07:e3:1d:59:cc:12:42:36:
58:6c:f9:d2:ea:65:e1:30:e9:3c:57:8a:07:a0:bc:
e0:67:e4:a8:3d:51:49:16:88:ee:fd:b2:db:19:b4:
3f:07:04:6b:81:af:94:82:b6:d7:aa:0f:c0:b7:b4:
17:8c:0c:bd:45:33:24:db:39:97:fb:1d:59:61:d4:
cf:75:e5:62:8b:aa:04:d7:36:d3:d9:d2:b0:f5:26:
07:3c:c9:3b:c4:73:8f:e7:1c:ba:04:fe:65:d2:5d:
b3:1c:9b:26:28:e3:69:db:34:d7:eb:24:7f:be:61:
6e:f7:bd:e2:9d:c4:0c:fb:a1:54:aa:8d:4c:81:9a:
4f:ea:67:6f:3c:9a:94:1c:e2:38:b4:86:c4:28:2a:
81:9f:e8:fe:72:91:f9:2f:f4:fc:b7:b2:c9:ba:ec:
21:1b:e8:79:4b:26:f4:1c:ac:90:3b:7a:08:76:c2:
2d:cb:ba:20:05:fa:27:4a:b0:cc:ca:05:ed:fa:84:
8f:53:b4:41:e5:60:45:6c:cd:90:bd:af:26:06:e8:
61:b2:07:af:3b:1e:f3:d6:ad:aa:51:92:a9:8a:f7:
71:9d:4e:1a:fb:9a:89:d0:4f:1a:a1:8b:9b:38:ef:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A7:80:58:9F:41:A2:56:54:B4:F5:39:6C:AF:37:73:B2:8F:54:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0d28feb4-0b95-3863-935d-9b182bc5f4a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl
X509v3 Authority Key Identifier:
keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.57.128.0-206.57.151.255
206.57.168.0-206.57.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:b4:b9:d5:1c:a3:a3:77:36:ae:27:89:69:b6:75:52:92:d2:
95:0d:9a:59:67:41:ee:cc:65:12:42:59:65:61:ed:72:b6:17:
b7:18:9a:1c:a9:f3:f2:ac:1f:58:bd:87:09:da:a6:12:76:2b:
ce:55:71:e8:3d:22:81:8f:58:41:cb:a7:8c:8a:5c:c0:5f:f6:
3f:84:35:b4:d2:6f:27:2d:34:25:0d:87:83:0c:3d:e3:d9:76:
0c:60:de:22:29:bb:bd:7f:e7:16:84:b9:91:24:46:4f:31:bb:
b5:01:6f:68:be:93:9d:fc:7d:d0:96:d1:70:29:db:d6:f0:ef:
cd:e3:8c:89:d1:5a:79:15:0f:af:eb:2f:a9:66:3f:67:0d:5e:
33:95:7a:4e:bd:78:78:64:12:5c:77:99:77:5a:09:20:d9:e8:
db:aa:f0:6f:1b:f6:c6:c7:be:5f:b4:b6:09:41:39:03:89:10:
ef:a3:0f:72:14:29:8e:04:d5:ff:3e:51:6e:77:64:3f:b3:90:
74:0c:59:72:3d:e3:e2:c0:69:40:36:98:fa:03:12:dd:a1:fe:
b3:4f:0f:a6:80:ca:74:66:29:5a:49:af:8a:a1:90:f1:8c:55:
ba:78:09:59:57:08:be:4f:8b:d0:78:1e:a6:64:3d:ff:3b:a0:
73:fd:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:48 2023 by rpki-client on console-fra.rpki-client.org