Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/2bab6cdd-e801-337d-a714-7d01155d1187.roa
File: 2bab6cdd-e801-337d-a714-7d01155d1187.roa (raw, json)
Hash identifier: a2ugOVUpMKMqvh1PAZTScHraqXY5TNuGb4Vq2Q9kPTs=
Subject key identifier: 75:DD:8F:31:DE:20:70:3F:A8:04:65:27:68:AF:20:9D:F6:1D:D4:D6
Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial: 010D0C9F4328583D28E430AB69D21F393C55B680
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/2bab6cdd-e801-337d-a714-7d01155d1187.roa
Signing time: Sat 01 Jan 2022 05:00:00 +0000
ROA not before: Sat 01 Jan 2022 05:00:00 +0000
ROA not after: Thu 06 Jun 2024 04:00:00 +0000
asID: 7018
IP address blocks: 104.159.4.0/22 maxlen: 22
104.159.8.0/22 maxlen: 22
166.48.240.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:28:e4:30:ab:69:d2:1f:39:3c:55:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Validity
Not Before: Jan 1 05:00:00 2022 GMT
Not After : Jun 6 04:00:00 2024 GMT
Subject: CN=7948d954-7ade-4a20-816c-1a6a1487fec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:6b:3d:b6:b9:09:77:99:4f:e6:8f:f9:97:
e7:dd:12:14:bc:51:fe:bf:81:e6:a4:fd:c6:b3:83:
8b:58:1f:cb:e6:0c:e1:5f:8a:6a:d2:97:f7:6a:fb:
11:d1:55:09:9c:0d:92:e8:bb:c2:9c:46:9e:4f:95:
1f:29:af:05:df:33:8f:f3:ae:df:66:83:32:93:76:
bf:30:1a:3c:20:cf:bb:bc:d1:9c:59:58:8a:1a:5d:
1a:58:8d:f1:4d:bc:8d:03:b9:b3:d3:5f:16:28:15:
84:11:03:f2:b8:ec:19:85:16:80:eb:c9:de:c9:28:
12:e0:af:a2:fa:43:69:71:4b:ba:48:c8:3e:9e:df:
c0:b1:cd:27:55:fe:49:60:64:dc:9b:08:1d:b5:19:
98:9e:8a:50:e3:4d:42:d0:3c:a0:51:06:f1:cd:fb:
e1:4b:b4:04:cb:c2:b3:8d:43:cf:c5:ed:30:67:cc:
96:95:23:bf:8e:2e:3f:bd:e5:f9:60:2a:e9:85:07:
39:85:1d:a5:e5:8e:b1:38:fd:39:07:cf:88:6d:35:
bc:1c:46:01:2e:3b:12:df:77:bf:25:65:62:34:29:
d3:eb:ae:43:f3:09:ee:67:12:b4:f9:63:fd:30:c2:
a8:78:b7:ef:4e:48:d5:ea:1b:32:8d:ec:0a:0f:3c:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DD:8F:31:DE:20:70:3F:A8:04:65:27:68:AF:20:9D:F6:1D:D4:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/2bab6cdd-e801-337d-a714-7d01155d1187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
X509v3 Authority Key Identifier:
keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
sbgp-ipAddrBlock: critical
IPv4:
104.159.4.0-104.159.11.255
166.48.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:16:f7:1e:85:c3:4d:28:d7:2f:47:73:a3:9e:63:fb:b5:96:
33:b1:89:3b:63:b8:d1:f9:3e:b4:9c:e9:cc:0f:47:d9:69:cc:
17:52:b8:57:f8:a9:7f:89:bb:c3:57:e4:65:d6:9a:40:42:73:
fc:6b:e1:e7:b5:a8:fd:16:0f:69:2f:81:45:8d:88:15:75:b6:
7f:23:f2:9d:4f:b5:fc:ca:cd:ae:8a:ac:22:3a:1a:31:15:b1:
2e:d4:49:f3:dd:a3:37:b3:6e:f4:82:ea:98:d1:f1:40:dd:3c:
39:90:1d:06:34:67:ff:06:c6:c9:83:0f:c0:49:ab:d4:95:bd:
a9:c1:65:05:f0:e4:f2:ee:01:92:0b:a1:ce:4b:c7:bf:e1:dd:
e6:f9:74:6b:83:d8:b5:65:37:25:85:60:59:cb:f7:d0:61:73:
a2:ba:31:f0:57:f8:86:fa:39:2f:3e:47:ea:5d:33:88:a5:d8:
83:7a:9c:07:34:5f:7c:d3:2a:4b:1a:0f:48:0c:78:72:18:c7:
e6:1e:72:34:61:fa:44:58:fd:ca:d9:83:35:11:71:e6:70:50:
b9:fa:6a:96:94:1b:8b:24:49:7b:ee:5d:da:f9:53:85:c3:d5:
11:51:58:2f:ed:9b:46:73:0f:35:45:08:3e:b4:64:ff:7a:3a:
4c:e1:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:32 2023 by rpki-client on console-fra.rpki-client.org