Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6520a9d4-5b3e-302a-b057-0440745685e3.roa
File: 6520a9d4-5b3e-302a-b057-0440745685e3.roa (raw, json)
Hash identifier: gAqgg6ffxhpw0degBWd/H/47qWZOvyhFLs/gIL2O4TY=
Subject key identifier: 31:78:1A:F1:39:98:22:BE:3D:1B:34:57:4D:B2:52:98:B8:8B:8B:E1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843CFC9C65D25A57B81F62A2000
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6520a9d4-5b3e-302a-b057-0440745685e3.roa
Signing time: Tue 07 Nov 2023 18:31:05 +0000
ROA not before: Tue 07 Nov 2023 18:31:05 +0000
ROA not after: Mon 05 Feb 2024 18:31:05 +0000
asID: 400402
IP address blocks: 23.26.66.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:cf:c9:c6:5d:25:a5:7b:81:f6:2a:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 7 18:31:05 2023 GMT
Not After : Feb 5 18:31:05 2024 GMT
Subject: CN=fb31ed54-d19c-4d0e-8144-870dc5a110d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:0e:5c:f8:67:89:c4:b8:a6:a0:6d:dd:82:
4c:73:6e:64:e9:d6:e5:e4:c9:9b:59:c1:00:a8:2d:
99:ae:ac:29:96:5e:7b:2a:31:41:f1:45:2e:4d:c9:
42:3a:99:16:04:3d:14:f8:3d:d6:56:2c:36:88:46:
8a:a0:c2:4e:6f:2c:3a:f8:9c:37:73:d9:64:21:5e:
a1:eb:6c:d5:d7:66:e9:7c:ce:97:31:d4:0b:3c:25:
17:6c:6a:c6:0d:e5:2d:ce:a3:e2:70:35:aa:91:3e:
ae:d0:62:ab:de:96:f2:49:6c:92:93:61:13:1c:6e:
38:94:31:7b:cf:59:51:fd:62:d3:d3:a5:f8:b8:92:
aa:88:c2:83:c2:23:74:32:58:fe:c4:cb:9d:fd:42:
94:4b:a8:c8:f4:b3:dc:68:67:de:cd:2a:25:51:9c:
d2:98:1f:49:b1:06:8b:8e:1b:c3:db:69:1a:4e:74:
a3:ee:09:ef:a8:84:e7:7f:a0:29:2e:39:2d:68:83:
7b:08:75:f1:87:67:89:92:2a:7c:07:93:15:19:db:
b9:cd:1a:67:26:00:93:0c:45:47:15:59:00:c8:d3:
79:57:27:66:16:a9:1d:db:ed:ec:20:70:ff:65:51:
fb:78:49:cb:1e:ae:5b:62:16:b1:75:16:dc:1e:89:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:78:1A:F1:39:98:22:BE:3D:1B:34:57:4D:B2:52:98:B8:8B:8B:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6520a9d4-5b3e-302a-b057-0440745685e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.66.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:d3:25:53:92:fe:e8:fe:ed:55:53:ab:03:9f:9f:3b:7d:38:
66:43:0a:55:4e:2f:0d:f9:e2:85:33:53:60:91:7a:33:09:ae:
6d:dd:36:76:e1:51:75:db:48:07:da:29:6e:20:73:68:96:8a:
be:a8:d4:b3:90:5f:78:19:a9:92:d7:f8:42:8b:3a:77:b9:ee:
d1:3a:8c:e6:64:e3:e8:25:13:24:4d:1e:7f:49:d4:5c:c6:09:
82:88:d0:63:96:d0:9b:c3:a8:72:57:07:d4:dd:f2:0a:bc:90:
6f:72:39:81:e1:81:97:91:72:51:ad:9b:38:91:2a:08:56:70:
d9:b5:e1:7d:26:47:b2:85:36:a8:a3:95:7d:fe:88:27:e4:ab:
a3:7a:ac:bf:fb:12:96:aa:c1:56:51:88:15:5c:b4:0c:17:36:
12:d6:8d:a1:01:60:99:4c:44:ba:1d:ae:c5:93:ed:de:1f:52:
5d:74:f7:b4:3f:71:cd:ab:7a:c5:82:fb:8f:2d:5c:aa:63:4a:
87:aa:fa:f9:14:90:ed:28:16:e9:61:0f:4c:a3:12:a9:28:79:
5b:77:28:4a:e1:ee:3b:8a:5e:d5:77:f0:d5:f6:3d:c4:b1:8b:
8f:d9:5a:37:2a:21:f7:2b:33:cc:95:6a:f6:6e:05:11:35:54:
f8:10:a2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 18:19:09 2023 by rpki-client on console-fra.rpki-client.org