Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45ad5542-8b4b-378e-be46-dde5a613caf1.roa
File: 45ad5542-8b4b-378e-be46-dde5a613caf1.roa (raw, json)
Hash identifier: zi+j2yOvYFe77it9PtHvOaGd3wivvKoVAEe+In0prQE=
Subject key identifier: 8D:B2:F5:C0:6F:2E:60:32:0D:32:6A:41:EA:EA:D0:70:2A:06:90:A3
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD3623348FC81DDEAC9FA80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45ad5542-8b4b-378e-be46-dde5a613caf1.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397225
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:62:33:48:fc:81:dd:ea:c9:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=f6851c1a-a802-42fa-9924-1593c0a29e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:ea:30:0f:52:d9:aa:3a:7c:1d:df:79:74:
1a:f5:26:46:fd:35:d1:03:b0:a6:a8:e7:27:69:de:
5a:00:a3:87:05:78:13:18:a8:e7:f4:d0:a8:b0:42:
57:b9:56:b6:47:72:2d:c8:26:48:7c:4a:49:b1:37:
6a:39:1c:9e:19:ed:20:a9:bb:a2:ca:3f:36:63:f9:
28:f8:bd:8e:1c:b4:88:26:7a:4a:1f:97:20:09:15:
dc:a8:76:60:57:bb:27:08:30:70:3e:17:7b:85:48:
c6:53:ba:85:ac:a3:7b:02:eb:97:5e:51:b9:f1:07:
e5:a3:10:ec:7f:b9:0e:52:9e:2d:6a:d9:8e:03:0f:
90:9a:3e:db:d1:55:09:29:b4:94:5e:d5:cc:37:90:
0e:f2:3d:f6:58:c0:dc:55:3d:60:04:c5:da:3e:9e:
90:05:ab:d3:37:fc:e8:79:99:d0:df:fc:ad:13:45:
4e:fc:7d:9d:40:54:a4:28:70:74:ba:60:7b:8f:85:
57:0d:b8:a6:5e:67:4c:77:32:06:cd:18:cb:93:8b:
c3:7c:4a:9d:0e:3d:7f:db:09:4f:94:86:cd:6e:0e:
29:e0:4f:21:67:7d:af:2f:1d:94:70:5a:ff:c0:42:
c4:f4:d2:36:5f:07:d5:59:a9:e0:f1:91:07:c6:62:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B2:F5:C0:6F:2E:60:32:0D:32:6A:41:EA:EA:D0:70:2A:06:90:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/45ad5542-8b4b-378e-be46-dde5a613caf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:69:fa:83:47:a0:34:d0:23:42:76:2a:97:4d:ac:63:f9:0b:
94:6a:aa:b7:3b:f4:30:fe:7a:59:3c:0d:d5:71:11:e6:0e:0a:
da:94:ac:53:7a:19:63:bb:0a:9c:44:26:80:d6:ac:04:e9:fe:
cd:42:b6:1f:17:9f:c8:8e:52:f4:bd:4e:75:00:5d:4a:af:4d:
1e:2a:bb:73:4b:5f:bd:db:21:3c:62:59:79:c0:1f:c8:52:0f:
5f:b8:27:91:60:ed:10:f8:38:38:4d:ac:e7:75:f2:48:fe:f5:
8b:ff:48:ee:cf:93:e8:c6:09:bc:99:9a:93:a5:d4:a2:e7:67:
79:83:36:d9:3f:d1:a7:19:ce:a5:25:4e:9d:21:4f:53:c4:28:
8f:a4:51:15:f7:c1:e7:07:ba:b7:0a:75:2b:c3:9a:79:04:70:
38:d9:0a:a4:94:52:df:ef:3d:23:7c:d3:6f:43:37:cc:80:65:
03:1e:26:0d:d4:b6:05:7c:a7:f9:e6:0d:2e:58:b6:69:de:56:
de:d6:db:27:44:34:29:1d:4a:99:33:4b:6c:bc:e3:52:8a:54:
24:b0:b4:dd:94:84:c7:33:d3:28:99:f6:e6:e3:c1:69:29:ce:
05:95:3e:2f:15:bb:f7:3e:49:6b:c2:9e:2e:af:f7:aa:dc:59:
f9:38:9d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 21:52:58 2023 by rpki-client on console-ams.rpki-client.org