Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6dd2a05-7547-3768-a019-8f36f308bb2a.roa
File: b6dd2a05-7547-3768-a019-8f36f308bb2a.roa (raw, json)
Hash identifier: iEdTOq91HY63RXJyoeoK0TkALVi9OUoMXlce8h2I11s=
Subject key identifier: 78:6A:7E:74:16:14:7D:C8:AA:CD:FD:CB:2F:3B:30:36:0B:D2:78:55
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858446C6917C90A03ACC5BAC95ED0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6dd2a05-7547-3768-a019-8f36f308bb2a.roa
Signing time: Tue 02 Jan 2024 20:58:11 +0000
ROA not before: Tue 02 Jan 2024 20:58:11 +0000
ROA not after: Mon 01 Apr 2024 19:58:11 +0000
asID: 834
IP address blocks: 23.26.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6c:69:17:c9:0a:03:ac:c5:ba:c9:5e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 2 20:58:11 2024 GMT
Not After : Apr 1 19:58:11 2024 GMT
Subject: CN=632ba018-f5db-400f-b6da-7e05fcfcb4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:33:60:2a:80:89:a8:7e:b8:b5:06:bf:f4:
33:17:82:e6:9e:4a:01:85:91:bf:2f:e7:75:a2:d4:
f4:fc:ff:2c:ff:67:84:85:74:c9:cf:66:03:3b:48:
85:50:03:55:2a:3d:73:35:5e:7a:59:44:ac:a4:00:
bd:17:32:b1:e1:7b:0b:f8:86:0a:0c:8f:f9:88:66:
40:96:27:0f:e0:f3:45:f9:ef:d4:97:e6:6a:3b:fc:
a9:84:78:94:32:00:c3:95:f6:4a:05:17:6d:50:1a:
d4:53:c5:b4:5a:dc:88:a8:b2:3c:c7:02:9b:f8:3e:
a1:f5:be:22:83:b3:17:50:84:be:e1:cf:4b:1b:26:
ec:ae:df:2c:ab:17:97:48:75:96:a7:ed:28:ec:c1:
8b:56:20:bb:98:74:51:49:bd:04:0c:4b:e3:37:8a:
92:ae:3e:d4:ea:9b:08:38:ab:7b:58:8a:de:e6:ca:
91:67:cf:66:2c:61:bb:86:db:b1:8b:e0:86:4e:09:
76:60:78:d9:d6:f4:b9:94:7b:ef:f9:53:c9:7f:99:
ca:b6:e3:2c:3e:03:0a:77:b9:ab:5f:eb:ea:dd:86:
20:68:a2:94:cc:eb:08:a5:7b:90:d3:64:8b:28:04:
42:cf:5b:28:8b:53:71:5e:6f:27:8f:b1:04:95:68:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6A:7E:74:16:14:7D:C8:AA:CD:FD:CB:2F:3B:30:36:0B:D2:78:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6dd2a05-7547-3768-a019-8f36f308bb2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:92:25:d7:c6:c9:ca:07:80:70:e5:f6:d9:bb:ed:e3:85:35:
08:58:3e:de:52:68:a7:3f:25:c6:ef:91:e9:9a:ef:e3:d6:04:
79:ba:82:51:cf:77:6d:3f:49:5f:c9:e5:71:fc:49:a2:20:50:
80:5d:64:87:05:94:23:84:3c:f2:65:b7:72:85:e5:fc:53:3c:
47:56:b2:07:12:70:82:88:a5:c3:b7:c3:01:31:47:40:6b:aa:
73:dd:7a:ed:de:76:f8:04:4b:b7:36:4a:59:1c:bd:d5:bb:47:
4e:53:99:24:70:dd:81:e9:ad:e0:db:3e:a4:75:3f:d8:40:73:
89:06:94:35:48:45:62:6d:4f:8d:fd:3b:b6:61:69:a6:9a:82:
64:61:cc:07:cf:18:36:c9:11:18:ba:48:b1:36:a9:e8:d6:aa:
48:03:e6:f9:58:c4:d4:3d:43:44:e0:b3:2f:8b:4a:e9:4c:b2:
fe:32:d0:74:d6:d0:bc:06:e9:c8:3b:0a:08:2e:d2:10:b3:72:
54:61:f9:bd:f3:ce:d9:1a:73:22:12:9f:31:85:a5:cb:73:ee:
f9:04:02:ef:f9:8d:fa:ff:64:91:27:52:60:ed:79:2a:34:56:
be:61:bb:d9:35:ef:9e:5c:02:ba:ce:36:83:35:4e:cb:f7:b6:
3a:5e:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 20:26:16 2024 by rpki-client on console-fra.rpki-client.org