Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e564b66-9f7d-33bf-b73a-914ede682116.roa
File: 2e564b66-9f7d-33bf-b73a-914ede682116.roa (raw, json)
Hash identifier: jhGrF/G+fo46wPS3BEv23P86RonoQ7FtJXLlYXcyak0=
Subject key identifier: 3B:1D:04:D2:FC:30:D4:1D:50:70:72:B6:1D:85:66:29:C9:8E:2E:C8
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858455ECB30B8782C924944C9E880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e564b66-9f7d-33bf-b73a-914ede682116.roa
Signing time: Fri 29 Mar 2024 16:41:28 +0000
ROA not before: Fri 29 Mar 2024 16:41:28 +0000
ROA not after: Thu 27 Jun 2024 16:41:28 +0000
asID: 399989
IP address blocks: 23.26.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 16:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:5e:cb:30:b8:78:2c:92:49:44:c9:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 29 16:41:28 2024 GMT
Not After : Jun 27 16:41:28 2024 GMT
Subject: CN=95e0743e-a3ae-4429-a38f-59d192281901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:a2:ae:58:51:33:bc:7d:77:73:ef:e4:7a:
98:3e:6b:ab:fe:1b:68:89:70:a8:8c:8a:98:e3:84:
d9:bb:b1:b1:7b:61:2e:c7:1d:36:41:1b:7c:78:04:
8c:44:94:69:15:85:63:be:bf:0c:95:b8:46:0a:dd:
c1:8b:03:1c:62:2d:e5:a1:21:0c:d8:62:dc:45:5c:
7c:74:3e:5f:45:ba:b9:cf:b6:6e:18:c0:3a:44:c1:
18:5e:02:74:1d:63:7d:bb:79:fc:ea:74:24:48:1a:
0c:15:14:c7:ac:a1:0a:5d:74:3a:68:33:18:15:84:
9c:40:70:b0:87:86:d9:3b:aa:cf:00:48:ae:0d:b4:
47:40:8b:1a:7b:9c:57:71:18:7f:02:d1:91:35:a9:
5b:20:ce:11:8e:e6:50:84:04:e6:bb:c9:4a:3c:cc:
6e:b2:1c:e7:2e:3b:8d:cf:59:d9:b5:24:95:9b:45:
73:e2:1a:34:67:60:09:e3:55:48:77:60:31:68:95:
c3:cd:a8:f1:8c:be:19:4e:33:10:67:6e:76:3a:42:
53:9b:19:b7:e2:9c:74:92:d1:b4:75:5a:58:da:61:
2b:cf:9f:12:87:53:0c:f9:72:1d:fc:71:f6:ff:bd:
ca:fd:e3:0f:d2:a5:10:d9:6d:b1:d8:b2:21:ca:6f:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:04:D2:FC:30:D4:1D:50:70:72:B6:1D:85:66:29:C9:8E:2E:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e564b66-9f7d-33bf-b73a-914ede682116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a6:3f:87:b5:e7:f5:1e:82:5e:38:0c:b5:78:a6:85:b6:50:
9d:c8:c5:e2:1f:b8:4e:ae:6e:83:42:51:c9:3a:55:66:1e:95:
74:ea:43:23:f0:78:94:67:6a:71:fd:24:45:d4:d8:dd:a4:91:
fd:42:ff:ba:49:61:37:4c:67:2a:24:70:94:80:d3:e3:55:86:
32:8b:3c:6d:98:0e:a7:e7:6d:c2:ec:40:79:50:10:a0:63:37:
1d:0b:72:36:84:0c:d8:96:2c:7c:e3:3c:78:38:f2:a9:8d:f1:
3e:37:d0:c8:1b:a2:85:84:c1:4f:e6:be:db:21:41:98:a2:bb:
70:61:69:2e:a1:b4:70:f6:af:17:5b:e7:2a:50:81:de:49:87:
28:33:c9:eb:12:6d:b4:3f:98:85:d4:40:00:de:e0:25:32:74:
49:d7:ee:77:fd:fa:72:a8:8e:71:f2:80:55:8e:fa:e7:b7:ce:
cb:36:6c:f0:6b:43:4a:08:4d:59:c2:ab:76:0a:48:6c:1f:25:
99:fd:33:53:c2:b5:f5:ed:5a:7f:c4:2b:2a:9a:53:06:f9:a6:
6b:db:23:e4:a1:99:76:77:48:08:eb:74:9c:92:2f:53:8e:ca:
d9:94:ac:8d:fb:e4:78:3e:b2:8c:c8:ea:f2:91:71:9b:0e:e2:
df:bf:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 17:36:14 2024 by rpki-client on console-ams.rpki-client.org