Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf37db04-298c-3304-84a1-d4cb8daa1c16.roa
File: bf37db04-298c-3304-84a1-d4cb8daa1c16.roa (raw, json)
Hash identifier: 9wHFrEj1qV+oqQIuReEVex+WTSh0aWCQ2RNYCBjrogY=
Subject key identifier: 30:39:11:9D:FE:2E:50:5B:A0:23:5C:11:FD:46:3E:EB:96:61:F4:92
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843D547041708A0EED1707BFE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf37db04-298c-3304-84a1-d4cb8daa1c16.roa
Signing time: Thu 09 Nov 2023 17:42:28 +0000
ROA not before: Thu 09 Nov 2023 17:42:28 +0000
ROA not after: Wed 07 Feb 2024 17:42:28 +0000
asID: 834
IP address blocks: 23.26.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d5:47:04:17:08:a0:ee:d1:70:7b:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 9 17:42:28 2023 GMT
Not After : Feb 7 17:42:28 2024 GMT
Subject: CN=89fad531-25cc-4325-8aaf-939ac8ad2b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:91:4e:01:97:0e:2b:38:ca:97:0d:2c:5e:
6a:40:d6:71:27:a0:9c:50:db:20:b9:4b:13:20:fe:
0e:0c:40:53:0b:aa:66:2f:80:e7:a7:21:0b:27:cf:
03:e1:a4:d6:05:e9:6f:5b:07:12:ef:bb:f9:65:26:
9c:a6:48:59:4e:82:7e:fe:51:e4:42:bf:b6:6d:25:
82:fa:10:a8:b4:83:53:93:30:a9:45:28:24:d4:38:
57:dc:c7:5d:04:44:25:bb:c0:c3:4d:b0:40:41:fb:
aa:e3:44:a7:83:46:dc:15:3a:6b:4a:10:05:bb:8a:
ce:ce:c0:48:63:bd:4e:29:00:aa:a3:78:9f:25:a4:
ca:50:b4:2d:be:68:b3:59:b3:48:f7:f5:0f:88:39:
22:40:2d:09:85:5e:fa:b7:24:cf:ea:0d:86:a3:00:
c4:f6:7d:66:fe:ad:8e:5b:06:e7:80:76:b5:68:d7:
b7:d8:cc:07:29:c1:50:81:fa:d5:9a:dd:c0:01:6f:
1c:32:51:1c:72:97:f8:f1:32:56:5b:bd:30:86:a3:
0b:da:9b:bd:34:a8:08:3c:dc:47:6a:e7:3d:a2:e1:
d5:2b:1e:d4:ec:63:44:0e:3b:90:b0:a4:56:b9:d4:
d3:8c:8a:62:29:ad:f3:43:12:91:d9:ba:cd:11:9d:
93:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:39:11:9D:FE:2E:50:5B:A0:23:5C:11:FD:46:3E:EB:96:61:F4:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bf37db04-298c-3304-84a1-d4cb8daa1c16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:a0:d3:00:62:8c:71:e3:f4:ce:7f:a2:c1:5b:33:6f:3c:da:
b4:56:32:35:65:f1:c6:6e:6a:a4:d2:8b:d5:7e:00:eb:45:c3:
b7:d8:34:51:ba:ff:0c:49:e6:eb:b4:33:eb:ce:7f:ec:69:8d:
91:8a:f7:97:db:9f:34:10:13:ac:d8:4f:22:fe:3c:b7:40:f6:
d1:5f:96:c3:00:ad:94:1d:b8:f9:6f:c5:77:20:02:b9:6c:bd:
57:6a:9e:2c:8e:af:30:38:b0:21:a2:c8:4d:d0:b5:2c:5a:22:
53:80:7f:5a:c6:61:9b:26:f6:14:d5:db:8f:ef:79:b5:6b:7a:
be:fa:9c:f5:8e:e3:65:df:80:b3:a9:0a:c2:28:c7:0a:a7:ec:
8b:ae:fb:a5:87:26:9e:5e:d8:12:02:a0:7b:f9:d1:0b:d3:d9:
0f:d8:9c:3f:12:f1:de:43:a1:92:3b:1d:38:7c:77:c1:0f:f7:
22:ac:5a:d6:a5:42:c0:2d:7a:5d:09:89:27:9a:33:02:33:2e:
26:8e:a2:ff:83:92:2f:50:13:b9:56:84:d4:8c:9d:06:f3:34:
b6:27:22:4a:81:6c:11:8f:5c:2c:74:d1:8b:eb:a7:f0:3d:86:
8c:98:1b:d5:26:2e:9b:ee:c1:4d:73:cc:7b:f6:cc:9c:d5:fc:
94:b6:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 18 19:30:54 2023 by rpki-client on console-ams.rpki-client.org