Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b818cd24-21b9-369f-8ffb-2a3e41cab6db.roa
File: b818cd24-21b9-369f-8ffb-2a3e41cab6db.roa (raw, json)
Hash identifier: gsl5AZG/zD/B+zzawFBaeMbtrlYL4P/gTn9bhg29Df4=
Subject key identifier: 5F:AD:20:6C:1D:19:3B:31:BA:4F:E9:4E:E2:1F:25:D8:C8:5D:E9:CE
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AD362DCEC9F53A2A0B8BE20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b818cd24-21b9-369f-8ffb-2a3e41cab6db.roa
Signing time: Tue 26 Sep 2023 21:00:52 +0000
ROA not before: Tue 26 Sep 2023 21:00:52 +0000
ROA not after: Mon 25 Dec 2023 22:00:52 +0000
asID: 397242
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:d3:62:dc:ec:9f:53:a2:a0:b8:be:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 21:00:52 2023 GMT
Not After : Dec 25 22:00:52 2023 GMT
Subject: CN=b931ad5a-8ce4-4e5c-87e0-17ccf3bcd1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:0e:ea:06:d5:6f:6e:6e:a5:e4:14:08:57:
bf:e9:ff:92:1c:d3:d7:c6:d7:4b:e0:d0:17:ab:c4:
df:5c:35:f8:d9:29:58:31:f3:c5:00:aa:ab:1a:7b:
73:dd:d3:7f:b8:9a:06:48:7b:2a:d0:64:41:69:2e:
ca:d5:e9:6c:d7:86:11:18:9a:4e:57:fb:c0:6a:ca:
a2:de:61:d5:6a:51:cf:43:7d:9f:ef:d7:dc:1a:84:
d1:fa:be:87:d1:73:60:8e:85:58:48:1c:ab:43:b0:
81:01:84:88:52:d0:c4:1e:ba:a5:35:96:e5:13:48:
06:c3:0b:06:97:23:c6:22:7a:ff:ca:c4:39:aa:3b:
4a:63:59:1a:1f:5b:a7:89:43:74:8b:b3:47:db:13:
5c:bd:9c:42:2a:46:b6:a0:79:ca:7a:14:fa:62:12:
2f:28:86:b4:88:b8:d8:cc:b1:15:db:7a:87:48:26:
cd:36:13:07:85:54:56:af:53:4f:58:19:88:42:66:
e8:9a:1b:5c:a5:10:91:50:c2:4d:62:11:c0:31:0b:
dc:5d:bb:5b:c2:06:91:1b:f1:04:2e:6f:82:2c:5b:
67:a1:86:9c:68:de:75:3b:61:a2:a2:d2:49:10:b2:
a4:59:f5:38:eb:6e:a8:0b:7b:5c:91:e7:fb:19:b1:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:20:6C:1D:19:3B:31:BA:4F:E9:4E:E2:1F:25:D8:C8:5D:E9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b818cd24-21b9-369f-8ffb-2a3e41cab6db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:da:b6:ba:42:9b:0b:9b:04:4d:ad:df:7a:71:f9:a0:e4:7c:
50:f6:ee:19:e5:06:2e:98:a3:25:41:87:dc:8f:9c:5b:01:fa:
ed:db:0c:65:fa:66:02:4b:c6:0c:df:76:c8:77:db:7c:ad:0b:
a3:e3:18:75:70:3f:fa:33:b5:e7:7d:4b:86:c7:75:fc:e1:e8:
09:41:5e:88:95:30:78:41:8f:8d:5e:7c:18:a6:b3:4a:9f:fc:
9d:1c:c6:60:eb:01:9a:9b:96:b5:c5:39:69:43:75:4b:02:e7:
55:f2:ce:1c:b6:a4:2d:c2:3c:bf:10:b4:b7:98:56:39:79:b6:
f0:f6:b4:b1:be:4e:66:88:cc:fe:ad:14:13:dd:21:cd:d1:61:
f1:90:b7:c2:2f:31:21:2a:10:7e:79:65:89:9d:23:9e:a3:f0:
b0:89:bc:41:2c:67:aa:60:7f:7b:65:15:5a:6b:4d:63:84:b9:
18:bb:a2:7f:7c:aa:4b:54:ab:ba:10:6e:90:34:af:25:ea:97:
fa:39:00:4c:66:2f:dd:ee:a3:ec:4c:7a:e2:0e:b6:27:2e:8d:
1d:99:a7:ea:df:d0:75:2f:8f:6c:25:8c:54:94:55:9d:24:6b:
48:e6:1f:3f:91:fd:30:d4:1c:7d:15:ff:67:fa:42:47:7b:7f:
b6:6c:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 21:52:58 2023 by rpki-client on console-ams.rpki-client.org