Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef615c93-7c59-3d4a-9b80-6fd449916360.roa
File: ef615c93-7c59-3d4a-9b80-6fd449916360.roa (raw, json)
Hash identifier: Rt787tVMGZGhvkrrgQTjklGWsP9pZuHn83pEBCXe2LU=
Subject key identifier: A9:AA:F8:B4:43:91:9E:D2:E4:D5:96:3D:DF:51:EE:41:37:25:D1:0C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858435AA2BE31798790FAB42566E0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef615c93-7c59-3d4a-9b80-6fd449916360.roa
Signing time: Tue 26 Sep 2023 19:22:51 +0000
ROA not before: Tue 26 Sep 2023 19:22:51 +0000
ROA not after: Mon 25 Dec 2023 20:22:51 +0000
asID: 397235
IP address blocks: 156.154.58.0/24 maxlen: 24
156.154.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:5a:a2:be:31:79:87:90:fa:b4:25:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 26 19:22:51 2023 GMT
Not After : Dec 25 20:22:51 2023 GMT
Subject: CN=f8647bb6-a092-41dc-996b-cdd476f53bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:73:8b:7d:5b:86:d8:d1:6d:65:7d:4b:19:
03:bd:0a:7a:46:ca:f9:aa:44:16:89:a2:df:47:72:
be:39:41:6a:9b:38:76:18:bd:f9:33:bc:34:5e:6a:
78:59:ab:e8:35:1f:e0:df:13:51:19:c5:f0:df:f6:
65:1b:52:b0:a6:3f:31:21:79:1b:54:63:a9:7e:d3:
90:50:93:4a:bc:fa:e5:f5:69:2f:90:35:5d:1a:94:
c1:a0:d7:bd:e0:ca:fc:b3:fa:e5:17:f1:cd:1e:25:
44:a0:96:b7:63:fc:0a:bb:53:c5:08:0b:9b:df:79:
d1:34:30:fd:1d:e3:09:fa:37:64:04:0e:26:84:03:
51:6e:5c:47:22:96:c1:23:79:f7:be:a8:71:3f:49:
5c:f7:65:48:93:52:79:87:a4:5c:68:42:cc:5c:7d:
d2:06:95:4c:93:2f:4c:45:b2:b6:53:43:b2:77:b5:
0d:5a:f5:77:34:e1:29:0f:42:3f:56:77:88:7f:2a:
22:58:05:8e:46:57:92:e3:96:ff:65:fd:c1:31:5b:
c9:46:76:2d:8d:4e:de:8d:1d:e7:48:4f:1b:cf:b5:
58:72:86:3b:30:1c:b9:df:03:d6:39:fa:8c:88:6e:
2d:e4:6d:4b:64:6f:d9:b4:b5:ef:6c:08:7f:f4:83:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AA:F8:B4:43:91:9E:D2:E4:D5:96:3D:DF:51:EE:41:37:25:D1:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ef615c93-7c59-3d4a-9b80-6fd449916360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
156.154.58.0/24
156.154.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:01:72:06:97:ba:e4:21:0d:0b:6d:26:fd:22:cf:73:0e:27:
0d:ab:13:3a:48:99:3d:a6:2f:74:59:de:bc:38:98:c1:80:29:
2b:9d:43:b2:f2:d8:7d:a7:ab:e4:9c:db:74:5d:a5:4e:35:6f:
c4:4d:e0:e6:2f:85:8f:55:bf:d8:76:0f:ed:92:45:8e:35:0e:
72:d7:25:51:78:c3:7d:16:05:af:59:8c:e2:a6:79:b2:dc:74:
78:43:2f:a3:de:ea:a3:5e:c6:68:e2:1e:0b:c0:e6:31:ce:51:
08:cb:a8:71:6a:67:28:c3:06:93:57:80:19:6b:02:20:b3:f6:
97:27:93:53:3b:98:d9:ce:81:20:d7:43:82:98:84:37:61:53:
ca:18:63:76:1c:f0:30:ef:60:2a:30:f4:23:7f:a4:e1:7a:98:
0e:d5:a5:40:be:d8:74:0d:93:58:33:c4:19:31:4f:60:a5:fb:
10:54:1a:f1:60:c5:b0:f9:48:48:07:cc:13:1c:d3:97:a5:dc:
ce:df:76:55:28:bb:12:7f:e6:27:64:9e:5b:04:8f:b4:f8:dc:
7c:c2:7a:7a:1c:c1:ae:15:ef:0a:e3:22:34:67:f2:76:86:a2:
7d:7f:9b:cc:4e:9f:f0:51:3b:af:9e:70:03:c5:2b:23:df:88:
68:75:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 20:19:27 2023 by rpki-client on console-fra.rpki-client.org