Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9bdd2318-84c6-34cc-a2ee-1163be7400cf.roa
File: 9bdd2318-84c6-34cc-a2ee-1163be7400cf.roa (raw, json)
Hash identifier: fbhQq6jbwp9nSXsLsxJTH/OOdCsNfwEdFDAXtZRm1Qw=
Subject key identifier: A1:42:F3:A8:52:4C:9E:56:42:36:39:46:5F:E6:31:3E:7C:60:BE:1D
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F432858407C47935F089AFE1B4EE954C0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9bdd2318-84c6-34cc-a2ee-1163be7400cf.roa
Signing time: Thu 08 Nov 2018 17:48:49 +0000
ROA not before: Thu 08 Nov 2018 17:48:49 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 46606
IP address blocks: 162.214.192.0/21 maxlen: 21
162.214.144.0/21 maxlen: 21
162.214.104.0/21 maxlen: 21
162.214.48.0/21 maxlen: 21
162.214.88.0/21 maxlen: 21
162.214.112.0/21 maxlen: 21
162.214.120.0/21 maxlen: 21
162.214.160.0/21 maxlen: 21
162.214.168.0/21 maxlen: 21
162.214.184.0/21 maxlen: 21
162.214.208.0/21 maxlen: 21
162.214.224.0/21 maxlen: 21
162.240.0.0/20 maxlen: 20
162.240.16.0/20 maxlen: 20
162.240.208.0/20 maxlen: 20
162.240.64.0/20 maxlen: 20
162.240.32.0/20 maxlen: 20
162.240.48.0/20 maxlen: 20
162.241.32.0/21 maxlen: 21
162.241.40.0/21 maxlen: 21
162.241.48.0/21 maxlen: 21
162.241.72.0/21 maxlen: 21
162.241.104.0/21 maxlen: 21
162.241.128.0/21 maxlen: 21
162.241.176.0/21 maxlen: 21
162.241.192.0/23 maxlen: 23
162.241.232.0/21 maxlen: 21
192.163.192.0/19 maxlen: 19
192.163.224.0/19 maxlen: 19
198.1.64.0/19 maxlen: 19
198.1.96.0/19 maxlen: 19
198.57.160.0/19 maxlen: 19
198.57.192.0/19 maxlen: 19
162.241.96.0/21 maxlen: 21
162.241.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7c:47:93:5f:08:9a:fe:1b:4e:e9:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Nov 8 17:48:49 2018 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=bb117274-b58b-4c10-81bb-490cc618a23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:74:0e:f1:da:a6:a1:72:be:dc:3e:e5:36:
75:35:6a:dc:81:39:66:08:38:0c:df:4f:d8:01:77:
99:66:69:3f:74:39:db:07:11:9e:ea:a4:90:f0:e7:
f5:52:15:86:c5:0a:75:0c:aa:37:94:e4:89:75:c9:
e8:e5:0d:f9:98:16:ac:e0:cb:1d:e1:0d:3b:a1:4a:
e7:f2:56:57:a4:7f:6a:ae:95:f5:fe:fb:ea:66:69:
35:ff:7d:c5:46:51:17:71:0d:be:b8:d6:53:4c:0c:
b5:19:59:57:9f:06:57:14:ff:0b:9d:62:9d:c4:3f:
e4:04:b2:de:93:67:55:8e:77:e4:11:a9:2e:53:cf:
78:24:61:85:11:24:73:c2:b8:af:95:16:d2:7d:2a:
bb:01:6f:4c:41:33:6c:f5:44:49:c8:8a:45:a7:4a:
79:c6:fe:c1:e1:42:1c:af:40:1c:48:fb:bd:59:d0:
b4:f6:05:95:ed:b4:9d:e4:1d:9a:07:ba:ab:53:4d:
06:97:7a:5c:6c:67:97:51:2e:a7:fd:9e:af:fb:e3:
92:9d:54:72:06:32:49:5e:7d:3a:6b:c6:61:a1:10:
7a:f1:c4:b7:17:15:55:32:1f:d5:9a:ca:d1:dd:73:
c2:45:aa:44:fa:66:a7:3d:5c:7e:88:7a:85:06:2d:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:42:F3:A8:52:4C:9E:56:42:36:39:46:5F:E6:31:3E:7C:60:BE:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9bdd2318-84c6-34cc-a2ee-1163be7400cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.214.48.0/21
162.214.88.0/21
162.214.104.0-162.214.127.255
162.214.144.0/21
162.214.160.0/20
162.214.184.0-162.214.199.255
162.214.208.0/21
162.214.224.0/21
162.240.0.0-162.240.79.255
162.240.208.0/20
162.241.32.0-162.241.55.255
162.241.72.0/21
162.241.88.0-162.241.111.255
162.241.128.0/21
162.241.176.0/21
162.241.192.0/23
162.241.232.0/21
192.163.192.0/18
198.1.64.0/18
198.57.160.0-198.57.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:02:56:38:c7:34:92:b4:16:84:10:b0:c5:5c:ff:5c:14:b5:
7f:7e:70:be:01:74:fa:b9:7a:c4:a3:8a:6c:de:28:5b:a9:f2:
c3:47:da:4e:e4:10:47:1b:8c:6c:08:ec:0b:d2:34:26:fe:2c:
3c:d9:d4:0a:4f:a6:36:3d:94:55:93:f4:e3:d0:3a:07:6b:6a:
d3:57:64:0a:dc:a5:43:dd:4c:4f:42:c8:e3:de:70:b1:87:cb:
26:ac:b2:6b:31:5a:8d:11:55:23:da:23:24:70:15:25:22:4c:
46:71:0f:f9:dd:93:0b:b3:a0:24:2f:d3:5f:5a:2a:5f:18:c9:
43:dd:f1:c1:50:fb:50:16:d1:41:20:9c:fa:75:8d:24:78:de:
5a:83:dc:d3:05:7d:b8:86:35:7c:2e:72:d3:fa:89:0f:c2:25:
da:15:5c:d9:5f:3a:0f:56:ca:a9:0c:38:c9:15:0b:bb:76:f3:
53:a7:62:7b:ba:3f:5d:14:a9:d2:88:7f:37:3d:ce:00:02:bd:
65:0a:8f:fc:82:3a:21:df:d5:d2:f4:8a:95:7a:6f:db:36:fb:
e0:dd:53:90:41:65:35:cb:55:4a:60:b5:1f:c7:48:50:f9:5d:
b9:27:d9:92:bc:0a:18:89:c5:14:31:73:e4:f2:a2:cd:f4:7c:
ad:0a:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:50 2023 by rpki-client on console.sobornost.net