Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cdb006e8-9c39-3517-a9b4-9c87fbe04010.roa
File: cdb006e8-9c39-3517-a9b4-9c87fbe04010.roa (raw, json)
Hash identifier: LC5Hgzn3WXHoqo4r8//Y0TalN1ospOiUHGlaaCJ2Zy0=
Subject key identifier: F5:E1:FA:78:B8:B7:6C:A7:00:54:17:4A:B1:4F:5C:87:FE:04:87:10
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F4328584713DB7540BDB24E80D9B66840
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cdb006e8-9c39-3517-a9b4-9c87fbe04010.roa
Signing time: Mon 02 Sep 2024 06:02:29 +0000
ROA not before: Mon 02 Sep 2024 06:02:29 +0000
ROA not after: Sun 01 Dec 2024 07:02:29 +0000
asID: 21859
IP address blocks: 157.185.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 05:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:13:db:75:40:bd:b2:4e:80:d9:b6:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Sep 2 06:02:29 2024 GMT
Not After : Dec 1 07:02:29 2024 GMT
Subject: CN=bf3025b8-25f3-4e59-9706-b337d759ecc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d9:25:cf:99:e0:88:3f:1e:17:74:84:8d:35:
90:f6:9a:21:97:d4:86:8b:e7:2a:ea:9c:dd:34:6d:
3f:5d:71:34:4f:7f:77:35:05:9e:7d:61:1e:a4:75:
54:1d:5e:b6:52:5c:9e:7e:d0:80:ee:e6:8d:f1:d5:
ae:22:77:9a:3e:91:42:ca:ba:49:f6:ed:42:60:d4:
85:e3:bb:2b:bb:c6:d5:a0:c3:24:a4:6a:eb:3e:49:
b5:c0:68:12:2b:6c:bc:88:29:37:b4:1a:41:c2:80:
c5:db:02:a5:b0:77:bd:7a:15:63:3a:2f:4e:57:26:
56:29:4b:27:33:60:76:7f:52:7a:b7:99:09:88:70:
b8:5f:ec:c4:05:55:af:d7:c9:52:66:6c:7e:66:ff:
61:5f:2a:33:36:d0:66:d6:0a:76:02:55:49:cf:7d:
ef:87:39:8e:d8:4c:09:b7:7b:93:0d:0a:ff:d1:5d:
df:c3:25:15:f3:7c:2f:58:fe:96:b1:c5:d4:5c:49:
16:d9:50:b9:37:c9:38:7a:b5:bb:7b:5f:96:c0:b5:
ab:ea:95:06:e6:97:80:3e:07:0b:14:31:bc:a4:85:
9d:02:b2:40:08:da:d3:57:0e:1a:e3:e6:b2:dd:2c:
63:da:dc:0d:92:32:2f:15:c7:13:24:f0:db:51:4a:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E1:FA:78:B8:B7:6C:A7:00:54:17:4A:B1:4F:5C:87:FE:04:87:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/cdb006e8-9c39-3517-a9b4-9c87fbe04010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.185.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:d5:2c:41:ab:01:d6:39:8f:1e:74:49:18:1b:a6:8a:b1:50:
77:fe:8c:a2:b4:06:ce:42:bf:3d:be:02:8b:95:8e:e0:b5:c4:
16:e2:83:71:6c:ae:8f:7f:12:87:a3:c3:57:2a:23:ef:b7:04:
12:6b:f6:40:28:89:c3:24:c8:19:30:23:57:36:86:53:14:c6:
a8:50:22:bb:6e:b1:62:57:61:88:62:96:07:82:59:c0:20:c2:
9e:fb:85:e4:2a:6b:6b:5b:d2:4f:12:a3:13:f7:bb:51:a9:d5:
43:67:90:7e:5f:e7:d0:5b:85:fe:78:a9:bb:36:d3:c3:92:db:
bf:be:71:75:35:4d:15:10:70:d4:6c:1a:87:30:f0:b1:46:2b:
74:f9:d0:42:34:74:a5:3b:97:df:b8:57:b6:1f:f9:3f:cd:3e:
f7:1c:ca:40:a6:f0:14:f8:5f:25:e0:87:50:61:a7:c6:f9:ee:
70:45:44:40:55:2a:21:10:dd:0d:b7:38:1c:0a:c3:5d:a3:2f:
8b:1c:1f:2e:42:3d:1b:07:03:86:e4:87:46:a5:86:08:91:dd:
a2:e8:a0:ab:f2:cd:35:f9:a4:be:11:28:f3:ac:15:41:92:88:
b2:5a:ad:8d:bc:a2:bf:96:89:2e:9d:52:28:d9:51:0f:e6:67:
39:b6:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 07:44:11 2024 by rpki-client on console-fra.rpki-client.org