Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33881f86-55a5-3303-bc4c-a94079d6f58a.roa
File: 33881f86-55a5-3303-bc4c-a94079d6f58a.roa (raw, json)
Hash identifier: /oJLiKNIUZdD/RdCPOSL3l9GThZoFoWQ78uO8vFJ0Oo=
Subject key identifier: F9:E2:F8:A5:8C:64:98:A3:5F:AB:38:17:2D:2D:96:A7:8A:35:61:CE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843FA89048530AD6093AFBC05B0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33881f86-55a5-3303-bc4c-a94079d6f58a.roa
Signing time: Thu 23 Nov 2023 02:00:16 +0000
ROA not before: Thu 23 Nov 2023 02:00:16 +0000
ROA not after: Wed 21 Feb 2024 02:00:16 +0000
asID: 132335
IP address blocks: 50.114.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 18:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:fa:89:04:85:30:ad:60:93:af:bc:05:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 23 02:00:16 2023 GMT
Not After : Feb 21 02:00:16 2024 GMT
Subject: CN=18c2c54b-d15f-4c55-8fdf-6917c2353db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:9c:69:e6:24:3f:e5:e2:e0:d4:fa:66:6f:
58:da:8c:6d:75:14:03:d3:12:32:fb:26:41:55:09:
d4:50:68:7c:93:26:77:22:c2:d7:e6:3c:04:e0:f0:
3d:b7:48:90:30:a1:b9:e4:4e:7b:dd:ec:2f:05:ca:
ad:2e:44:e1:7a:e2:27:9e:bc:45:a8:55:74:09:54:
50:5d:0c:2a:ea:aa:04:c8:de:5a:e5:a4:84:b1:8c:
82:91:aa:85:80:7e:ef:80:b8:09:19:ff:ba:49:eb:
2b:df:bf:74:26:02:21:cd:9c:fc:3c:e3:98:6a:35:
4a:2e:74:2f:cf:50:81:02:76:65:60:42:9f:c5:f1:
29:6b:7e:b9:2c:c0:11:68:cf:1c:4d:31:38:a0:e1:
92:45:6c:cd:89:fd:d6:b4:92:e0:9e:89:88:6a:e6:
f0:b6:e6:f4:fe:ca:db:4b:61:2d:0f:d1:ac:47:98:
8a:14:8d:8a:41:39:1d:b1:27:77:c9:5f:15:66:6c:
be:13:4c:bc:02:43:11:4d:9a:58:a6:9e:7a:9d:77:
33:64:fd:ff:92:b5:f3:de:55:b2:8b:64:10:76:3d:
5e:61:f3:50:1c:a3:c1:93:e9:c2:c8:6e:80:83:2e:
f0:4a:3a:fd:af:cb:a5:9c:f6:bf:11:37:e8:40:50:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:F8:A5:8C:64:98:A3:5F:AB:38:17:2D:2D:96:A7:8A:35:61:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33881f86-55a5-3303-bc4c-a94079d6f58a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:81:ab:1c:5c:ee:7a:59:23:0d:cb:40:3f:e2:af:51:da:0b:
c1:ce:66:4f:b4:37:18:c4:14:5f:32:69:d3:f5:ff:76:63:aa:
d2:46:4b:b7:d8:23:bd:a3:14:6c:67:37:6a:78:89:10:f1:a3:
7e:aa:1e:ae:9e:c9:cd:25:88:af:a1:d8:5d:5a:99:b3:38:aa:
11:ad:db:61:8d:0c:9f:68:e7:30:6d:78:70:09:df:a4:54:44:
5d:6b:2d:bd:77:3c:fc:46:8f:e3:75:91:60:98:1d:45:a1:3b:
76:d0:d4:cf:9b:fd:b6:91:5c:d3:6b:ab:14:e6:96:6c:a8:ac:
63:44:34:db:fd:94:24:66:36:e6:0a:6b:b2:69:f8:18:b3:d4:
08:97:1b:69:39:7d:c5:5e:fe:f5:6a:4d:b0:6e:5f:66:b5:d1:
01:be:20:c6:43:33:3e:16:e7:c8:25:3e:31:68:fe:1b:b3:48:
f6:b1:be:0c:fd:1a:b6:b3:b4:a9:45:90:0a:9a:57:0c:0e:83:
13:03:51:b7:f7:35:13:06:50:3c:be:32:45:e0:e5:a4:0e:95:
3d:d3:80:48:1a:a8:1a:ff:5b:9c:4d:72:23:36:31:64:bc:04:
a0:d0:e9:8f:50:32:80:b4:b8:8c:be:2e:e7:b6:12:bb:9f:1d:
b2:e8:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 21:09:56 2024 by rpki-client on console-fra.rpki-client.org