Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99e430f2-f90a-3e36-9a43-c44bf6dcb1bc.roa
File: 99e430f2-f90a-3e36-9a43-c44bf6dcb1bc.roa (raw, json)
Hash identifier: BMJ4QkgM0fgmnZScvG5VItu+OyDMI7KS314la1EgdwY=
Subject key identifier: 4D:32:5D:18:A5:A7:E0:CF:47:47:2B:2F:F7:F2:F2:79:53:A9:18:F0
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD36287D75C18AC7A370D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99e430f2-f90a-3e36-9a43-c44bf6dcb1bc.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397220
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:62:87:d7:5c:18:ac:7a:37:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=7e471f24-fdf0-48bf-aedf-f55db4bc8496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:de:b3:f6:56:10:31:50:67:7d:4a:a4:8c:
03:cc:34:29:1e:a2:84:36:fe:3f:f8:01:46:70:d7:
db:70:ba:a4:a7:52:f2:ba:6b:d8:f6:3f:15:31:30:
65:3b:11:fe:9d:a2:b7:a9:10:f3:fb:e0:32:92:d7:
1b:5c:08:94:ed:54:70:a6:58:ba:78:84:dd:06:a2:
df:e9:ad:de:ff:94:55:a7:ba:f6:42:53:c4:2b:be:
fb:23:39:0d:07:15:b6:a3:ef:67:48:ea:85:c4:0b:
52:0a:a4:89:e7:31:cc:dd:4a:38:9e:44:f5:92:88:
7f:f8:03:0c:c0:39:21:39:81:77:bd:f5:38:ed:e8:
dd:74:1a:26:13:ec:a9:18:e3:b6:a0:78:ac:db:46:
1d:91:be:81:da:de:dc:5e:10:2d:ab:c2:03:a4:37:
83:b7:fe:1b:91:c9:73:81:86:56:55:45:55:a3:2b:
02:53:4a:78:2f:74:b7:33:40:52:11:37:a3:f6:ff:
94:5d:8e:8c:cc:ef:e7:0c:32:cd:91:37:d0:d0:73:
05:96:68:0a:4c:58:f3:15:a6:a4:97:cc:1f:0a:d4:
5a:7d:69:13:75:9a:63:41:c3:32:7b:73:8e:7e:5d:
7c:9a:e9:9f:9c:17:e0:c6:ef:36:23:96:fb:d8:ea:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:32:5D:18:A5:A7:E0:CF:47:47:2B:2F:F7:F2:F2:79:53:A9:18:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/99e430f2-f90a-3e36-9a43-c44bf6dcb1bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e0:92:bf:d1:13:9d:d8:29:1b:ce:f6:09:3d:78:40:89:a2:
49:7f:38:a4:84:54:db:83:7d:e7:de:7b:84:bc:7c:40:fc:f8:
36:c8:bf:7e:a4:81:6d:a9:df:57:e6:80:89:52:b3:7a:14:67:
44:60:5d:a8:b0:f7:af:41:1d:43:3d:08:1d:63:14:d7:e7:57:
d4:73:f0:22:fe:07:4d:74:1a:8e:57:09:50:5a:c2:e5:68:d8:
26:cb:fe:e0:f6:f4:96:74:94:31:39:b5:0a:00:c8:4f:98:12:
c4:c6:0e:37:ad:bb:8d:cc:2e:96:95:4d:78:ea:db:03:da:ab:
0c:68:07:1e:34:12:94:fc:64:1a:78:9d:c9:68:df:27:8e:ad:
dc:86:19:19:ec:d6:2e:e4:31:b1:55:65:7d:75:91:a3:b4:a6:
d9:d2:f5:6d:a6:21:bd:0a:28:78:b6:e5:8a:7a:1c:06:d3:f3:
e3:b6:95:7a:01:bc:de:94:2a:bb:7b:ea:9a:df:76:c4:bf:d8:
dd:12:ca:f3:62:87:4a:87:da:30:1f:b2:81:9c:ac:6e:50:79:
69:6f:ee:f2:a7:f9:f8:5a:09:d1:02:00:5c:a9:31:54:12:23:
96:73:a2:cc:7e:55:57:da:68:94:6b:b5:b1:bb:8c:86:f7:66:
e9:a5:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 21:52:58 2023 by rpki-client on console-ams.rpki-client.org