Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c25ded5-f640-3ddb-a4af-7bfab027b843.roa
File: 8c25ded5-f640-3ddb-a4af-7bfab027b843.roa (raw, json)
Hash identifier: cAtgLKhtmEts33PMMAHAt3WDy6k+dEvKlpybbhL8ci8=
Subject key identifier: DE:E9:AB:5E:88:E3:6A:50:FD:8E:EB:6C:75:B5:15:E2:D5:F8:FE:A1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843C1096A749C2CA11F5493FD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c25ded5-f640-3ddb-a4af-7bfab027b843.roa
Signing time: Thu 02 Nov 2023 11:42:11 +0000
ROA not before: Thu 02 Nov 2023 11:42:11 +0000
ROA not after: Wed 31 Jan 2024 12:42:11 +0000
asID: 400402
IP address blocks: 23.26.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c1:09:6a:74:9c:2c:a1:1f:54:93:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 2 11:42:11 2023 GMT
Not After : Jan 31 12:42:11 2024 GMT
Subject: CN=a2357c38-3057-472a-81b0-887f4794535a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:4f:8e:ae:58:ba:22:49:f9:7e:c0:53:bb:
ed:1c:39:3f:66:f0:04:c7:f4:82:29:35:d3:19:65:
14:e9:bb:52:2f:06:5c:e3:93:6f:04:c2:ab:47:f9:
a8:a8:b8:72:ce:00:38:c0:7f:66:cb:b5:75:bb:72:
f4:bb:98:f5:db:ba:2d:d7:e4:dc:81:ce:e2:d0:4d:
cc:81:11:84:7e:59:a7:d2:34:ae:73:1b:5e:be:24:
33:e1:60:ce:f5:21:dd:61:6f:33:7a:9a:72:5e:10:
c4:3c:37:ef:2e:aa:f1:aa:e2:60:22:ef:07:0c:32:
0e:8e:4c:e8:df:fc:95:2b:62:52:14:3d:76:1d:b5:
b1:10:91:2a:18:76:02:09:0f:d6:6b:b9:d5:c5:22:
a1:7b:b7:22:00:d5:ad:91:3a:c5:f8:9e:43:16:6e:
67:0b:cc:86:2a:07:f4:db:93:6e:cc:83:b5:a6:e3:
c4:9a:1c:8e:d3:24:20:73:f3:08:16:a1:8d:81:20:
9c:13:0f:32:4e:02:1d:8e:a6:32:63:b0:d1:ca:0a:
13:71:6b:cc:f9:6c:7f:50:1a:d6:8d:9d:b6:97:80:
3c:35:b2:b2:87:ab:fe:22:b1:a7:d4:64:39:8a:7c:
3d:22:36:61:a5:74:3b:ac:cc:24:c8:a3:e3:6f:d0:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E9:AB:5E:88:E3:6A:50:FD:8E:EB:6C:75:B5:15:E2:D5:F8:FE:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/8c25ded5-f640-3ddb-a4af-7bfab027b843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:8e:b1:05:8a:64:4a:d6:dd:34:f5:de:44:78:a2:82:ca:75:
da:4a:39:dc:d9:42:7d:95:6b:bf:76:6b:21:ea:81:59:b7:f6:
3f:ba:69:fe:76:6d:f0:03:c0:6e:97:71:20:31:b4:64:42:5e:
a4:6e:1d:97:09:a5:18:24:50:a9:e6:a9:1d:11:10:9e:f5:9c:
cb:10:cd:d1:e4:3c:ee:92:75:4e:95:a1:cb:da:f8:c8:6e:a9:
b4:36:c3:ae:2e:0e:42:9a:43:bb:ad:3b:93:5a:10:6a:e4:2a:
df:df:2a:93:f9:68:eb:cc:ef:e3:f4:bb:08:c9:0c:be:fd:02:
f6:d5:1e:c3:87:47:db:5c:9e:9c:ab:ad:1c:aa:b2:d8:27:a9:
67:81:04:10:69:8a:39:bf:32:8c:8e:ba:d5:62:7b:b4:7c:e9:
cb:c0:7e:44:98:64:5a:bd:41:19:cc:85:4b:27:22:99:65:4f:
36:ee:0f:65:40:2c:6d:cd:16:d7:a8:a1:a9:bf:7a:41:61:2c:
8b:fb:20:bf:4e:64:4c:cc:09:0d:1e:07:a0:79:67:29:13:25:
f3:f3:2d:fe:ce:ff:31:ce:4d:9f:e4:45:66:32:3a:90:89:61:
d0:38:68:7d:4f:05:d5:24:fb:b2:78:57:5a:3d:8c:c6:25:fe:
28:67:41:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 18:22:36 2023 by rpki-client on console-fra.rpki-client.org