Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c1f43e0-ffb7-3c48-87db-fbd64acc8678.roa
File: 8c1f43e0-ffb7-3c48-87db-fbd64acc8678.roa (raw, json)
Hash identifier: Jrj3Y9G/+rh4AA+vNfpKh4eHdQsdJ7/O0vLjDtnA0wo=
Subject key identifier: 42:E2:DB:5C:9C:CF:36:15:CC:23:08:2E:B3:74:EC:40:59:45:CB:0E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858431B148A1CC9D36B469D97C9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c1f43e0-ffb7-3c48-87db-fbd64acc8678.roa
Signing time: Mon 04 Sep 2023 01:00:23 +0000
ROA not before: Mon 04 Sep 2023 01:00:23 +0000
ROA not after: Sun 03 Dec 2023 02:00:23 +0000
asID: 834
IP address blocks: 23.26.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:1b:14:8a:1c:c9:d3:6b:46:9d:97:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 4 01:00:23 2023 GMT
Not After : Dec 3 02:00:23 2023 GMT
Subject: CN=f41db04c-b9ee-4783-987a-0cbc3864f57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:b0:03:77:56:57:b5:d5:39:58:27:8f:1f:
e1:44:e8:0e:1c:b6:37:9a:b0:5c:b8:6d:c7:31:d1:
67:9e:31:16:f8:61:41:cf:40:36:00:9a:17:1f:4e:
be:65:9d:b0:1d:0f:05:b5:53:ea:99:37:c2:0f:74:
52:ca:28:a1:f6:8e:b0:6a:85:b1:1b:d7:a8:95:2a:
b1:d0:26:ad:3d:e2:e4:a2:f2:98:69:0e:53:a6:ee:
04:9a:0b:05:c3:1d:c0:61:7e:a7:83:46:27:94:6d:
f6:6b:e3:34:a3:d4:5a:5c:03:c2:9e:7e:06:3e:8d:
7d:c9:52:b0:ed:6b:76:4e:d5:45:88:e7:f3:f6:fc:
79:bc:d5:44:e7:fd:c6:aa:8a:12:1f:f3:85:6e:e6:
21:7c:d1:dd:41:da:a4:76:38:84:06:cc:b3:4c:ab:
de:28:29:98:92:b5:c2:7f:91:f6:76:4b:a1:77:2a:
59:97:51:67:98:4a:55:1b:f0:50:ea:85:76:29:e2:
51:15:8b:61:76:e4:78:53:cc:a2:9e:0c:68:20:43:
29:a5:ba:86:d9:6f:f6:5d:7d:37:aa:9f:a9:46:5a:
6e:03:ad:ff:8c:a1:c2:03:0a:df:7f:3c:84:b4:50:
3c:6e:a6:70:96:f8:33:51:3a:08:18:a3:b4:d3:f6:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:DB:5C:9C:CF:36:15:CC:23:08:2E:B3:74:EC:40:59:45:CB:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c1f43e0-ffb7-3c48-87db-fbd64acc8678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.50.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:4d:24:67:ed:43:50:f7:4f:a6:09:58:64:a9:45:19:31:7f:
cb:e8:cc:ed:bd:02:cc:50:12:ad:06:23:80:77:06:13:7e:be:
60:bf:b5:78:32:6e:4f:fe:f2:d3:58:b4:e3:99:33:3a:b5:c2:
a1:ce:ab:b7:dd:e2:67:3d:0f:23:27:10:ab:fe:2e:e2:79:44:
34:8d:d4:a3:c9:0d:01:e0:80:0e:91:66:89:10:71:44:83:79:
09:05:50:d4:1d:e7:31:fc:ae:48:87:9c:18:21:2d:cb:9a:75:
e7:aa:9a:6f:77:aa:c7:92:da:d9:97:d3:20:fc:1c:65:d0:73:
8a:9b:03:82:dc:64:0c:b0:fd:89:73:af:a8:08:2b:b4:03:23:
dc:fd:85:c2:21:3a:c4:ff:8d:d1:f1:56:50:6c:72:24:92:4b:
b6:c0:60:9f:7b:ea:89:ac:91:b8:36:03:15:be:5b:47:bc:70:
7a:4c:94:5f:cd:cb:10:67:a9:74:98:a5:91:58:52:79:1e:47:
8f:22:70:20:cb:33:69:20:92:b4:fd:c0:49:1b:d4:df:a0:1f:
c6:fb:52:eb:47:61:e1:0d:0b:46:df:24:06:2f:fa:54:a4:bb:
b8:4b:bc:46:10:ce:b5:36:fa:0a:de:8e:1c:7c:f7:0d:ed:39:
6d:83:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 18:50:47 2023 by rpki-client on console-ams.rpki-client.org