Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8e626303-ec75-36fa-ad62-7f071658a73e.roa
File: 8e626303-ec75-36fa-ad62-7f071658a73e.roa (raw, json)
Hash identifier: XnDOUty1f/oWkiKp9aTAs1XAq2/xMn7gxcuuwmEH6a8=
Subject key identifier: 8F:AE:B8:50:03:78:0A:60:F0:CF:B5:D2:2F:A4:CB:CB:93:43:5C:83
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F432858477230F2CFAE678B4A81FF8280
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8e626303-ec75-36fa-ad62-7f071658a73e.roa
Signing time: Sun 06 Oct 2024 01:00:31 +0000
ROA not before: Sun 06 Oct 2024 01:00:31 +0000
ROA not after: Sat 04 Jan 2025 02:00:31 +0000
asID: 138077
IP address blocks: 157.185.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 17:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:72:30:f2:cf:ae:67:8b:4a:81:ff:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Oct 6 01:00:31 2024 GMT
Not After : Jan 4 02:00:31 2025 GMT
Subject: CN=e0f8a42d-0389-46ee-ab4f-f4033dc305cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:72:09:0c:e6:c5:d3:dd:7c:d5:c0:d7:10:
1f:55:7f:d1:0d:0e:39:c1:77:12:ac:0d:e7:7b:25:
d5:ea:68:bd:99:43:2d:79:8a:9b:ef:e2:85:64:02:
b6:7e:b4:12:02:ba:17:6b:1b:6a:4b:89:05:bf:3d:
a4:2e:84:64:d1:5b:26:73:de:f1:a0:b8:90:6b:a1:
b8:0e:64:b4:a3:5b:fe:8c:d7:d2:38:37:76:89:49:
15:f1:9d:e6:30:15:ba:16:5e:59:6e:6e:50:db:9f:
79:a7:0d:97:cb:67:32:43:50:95:de:03:40:2d:ea:
bd:4d:1a:7d:29:72:ab:92:23:b4:ed:d5:86:d4:62:
4c:38:0b:66:83:51:7c:62:2b:a7:86:78:fe:a9:7a:
12:a8:50:b7:66:3f:06:e2:1c:e5:9a:d9:9a:34:2d:
42:0f:cb:4d:e5:13:9e:a6:72:63:3a:00:7b:3a:16:
84:db:73:23:f5:93:64:c7:66:7e:3b:07:42:e4:e0:
08:a4:63:c2:b8:4a:20:9e:ee:ed:c6:bc:ad:ae:d3:
88:60:4b:a0:26:dc:49:7f:3f:89:bf:94:f6:fd:6c:
eb:65:42:f9:50:9c:ed:db:f9:ee:26:bb:a5:a3:89:
23:1f:62:af:9a:16:6a:6c:3a:7a:a3:31:20:03:5e:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AE:B8:50:03:78:0A:60:F0:CF:B5:D2:2F:A4:CB:CB:93:43:5C:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8e626303-ec75-36fa-ad62-7f071658a73e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.185.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:70:f3:70:a3:49:62:7d:4f:4a:36:12:96:9a:8c:e3:7a:0b:
82:0f:5f:9c:74:57:e7:9d:61:1b:55:20:15:ce:e6:54:0e:3c:
a4:a1:3d:7f:0d:03:14:4d:5f:ec:2e:aa:dc:9c:a3:db:e3:f5:
6f:de:6a:ea:16:30:92:1a:89:00:48:25:f5:09:05:fa:d8:e4:
ff:72:21:df:44:a1:ae:df:16:f4:ef:7e:62:19:18:3b:97:57:
3b:bf:d1:22:78:68:62:bf:59:fe:ac:b4:f9:ce:05:80:5b:fe:
cf:1f:21:3a:da:74:c6:4c:9b:75:cd:86:9a:be:5d:5f:72:d2:
d1:31:eb:7b:4f:95:a3:19:78:53:26:8e:93:1d:0f:24:ae:bd:
14:e4:3f:71:de:d4:9e:47:f5:3b:ec:cb:00:d3:18:27:37:f9:
91:c2:82:6c:47:7a:94:99:dd:64:2d:ac:22:e9:aa:cf:16:80:
30:ca:90:e0:eb:88:e8:76:f0:79:1f:3d:ff:45:43:e7:fc:ad:
c1:4b:0d:d7:05:fa:1f:05:eb:54:67:b6:1c:01:3b:f1:01:e9:
4d:8e:64:3e:b8:50:01:72:ee:44:ef:e8:88:11:8c:d3:25:c8:
af:8d:f4:29:db:38:17:3a:f2:34:df:a8:5f:0e:f8:a2:8a:20:
fc:69:01:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:33:52 2024 by rpki-client on console-ams.rpki-client.org