Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/58589e42-a46c-307e-a571-15cd68f4ecc9.roa
File: 58589e42-a46c-307e-a571-15cd68f4ecc9.roa (raw, json)
Hash identifier: mp/CwtpHVYs8I4uRI3z+liN8RQlnvtm9sLRiFxp9fCw=
Subject key identifier: AE:DE:12:9E:05:C1:6A:E0:9A:E1:39:07:0F:2E:54:07:AC:C1:9E:63
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858430723AB34B3CD40914D320EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/58589e42-a46c-307e-a571-15cd68f4ecc9.roa
Signing time: Sun 27 Aug 2023 21:34:44 +0000
ROA not before: Sun 27 Aug 2023 21:34:44 +0000
ROA not after: Sat 25 Nov 2023 22:34:44 +0000
asID: 834
IP address blocks: 23.26.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:07:23:ab:34:b3:cd:40:91:4d:32:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 27 21:34:44 2023 GMT
Not After : Nov 25 22:34:44 2023 GMT
Subject: CN=ad365cc8-db92-4b02-8bdc-517a551ff535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:fb:0c:27:60:a1:b8:18:49:53:d0:71:19:
38:fe:21:92:6e:71:60:ce:b4:4d:6f:a9:3c:dd:1f:
fe:cd:48:95:22:ce:15:cf:6c:f7:a2:05:17:e0:0e:
88:86:c7:7d:bd:5d:23:86:93:95:c9:5f:f9:44:b1:
ae:4e:2e:e6:c3:c8:c5:2b:bf:a1:f9:35:06:7f:67:
8d:eb:3b:f3:5f:ca:70:b5:b6:7d:ae:be:6d:92:fd:
c2:9c:49:e0:61:6a:23:59:d9:45:41:ef:75:20:e5:
1c:9a:ab:65:31:da:ec:ed:c2:a9:1c:45:43:54:ab:
8d:96:60:d6:5e:4d:6d:09:16:6b:b7:b3:27:ea:7d:
92:a1:5a:a9:fe:fe:20:fc:79:2a:a2:6c:ee:1b:18:
e4:37:f8:49:d9:25:46:36:8e:59:97:e5:05:ec:9b:
46:2d:84:55:13:0e:f8:42:64:a1:c7:ab:2f:2b:fa:
4c:3d:04:3a:f3:88:39:f3:84:62:be:90:81:98:f8:
59:be:4a:9e:4d:4c:23:09:ab:3b:3a:be:8c:40:0b:
c9:17:6e:41:c0:a8:8b:1a:53:01:63:c8:65:44:fc:
3c:6e:b6:e1:49:c6:88:15:81:d2:7c:05:ac:32:0c:
c5:9e:23:24:7a:98:e9:23:9d:52:7a:02:98:15:b0:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DE:12:9E:05:C1:6A:E0:9A:E1:39:07:0F:2E:54:07:AC:C1:9E:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/58589e42-a46c-307e-a571-15cd68f4ecc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c9:9f:56:b1:9a:2d:7c:e7:69:d1:8f:c3:d0:a3:48:2c:76:
5d:d6:e0:2e:05:ca:ae:3b:1c:3c:ce:fe:4e:de:1a:f1:a1:3a:
45:cb:a6:7f:63:df:b5:6b:76:0a:19:50:cc:68:67:f8:6a:6f:
b6:60:8d:ee:0e:a5:75:aa:04:82:c1:36:e2:2e:d4:40:47:a2:
ca:cc:09:59:db:18:e6:35:f3:ae:bd:dd:eb:3a:ec:af:53:20:
66:fa:c0:ec:c8:ae:1d:93:dd:b1:fd:57:de:f9:b1:03:f3:56:
f6:19:cf:ea:c8:1d:8b:12:63:90:6c:46:c8:55:bb:b0:f2:19:
fc:95:0f:c9:f7:75:f1:a6:a2:da:39:66:c4:03:1b:02:27:bd:
1f:49:7d:dd:6f:eb:fe:cc:2a:f7:f4:d3:18:2a:23:0a:b1:b9:
03:91:6e:be:de:15:59:21:8f:91:ea:3f:b2:be:d7:9b:26:74:
af:1b:72:e2:91:bc:fb:9b:74:64:71:b1:ba:d3:b2:42:33:fa:
a7:8c:13:53:84:12:13:28:7b:9f:9c:53:21:0f:54:79:bd:eb:
e5:91:b9:96:b1:61:46:56:1d:12:7f:29:67:83:e3:cb:d3:d6:
f2:0f:d0:1b:49:76:4c:1b:8b:6b:b1:ed:26:2b:23:87:8e:0c:
73:78:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 18:39:27 2023 by rpki-client on console-ams.rpki-client.org