Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c17c6b32-721b-3231-93e1-d6a128094145.roa
File: c17c6b32-721b-3231-93e1-d6a128094145.roa (raw, json)
Hash identifier: 3axXD6aB+RBC0BWYLHWEefWm/xNeKUM6CF4kkK3mSbo=
Subject key identifier: E7:DE:45:39:96:17:07:84:35:4D:6A:0F:72:FA:7B:1A:1F:38:6E:68
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858439E4AA13A4F32A18B5BACFB00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c17c6b32-721b-3231-93e1-d6a128094145.roa
Signing time: Sat 21 Oct 2023 01:00:16 +0000
ROA not before: Sat 21 Oct 2023 01:00:16 +0000
ROA not after: Fri 19 Jan 2024 02:00:16 +0000
asID: 42831
IP address blocks: 23.26.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9e:4a:a1:3a:4f:32:a1:8b:5b:ac:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 21 01:00:16 2023 GMT
Not After : Jan 19 02:00:16 2024 GMT
Subject: CN=2a2082c2-d152-40f4-b0dd-417167d81407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:12:db:f8:ee:b5:c8:9f:94:4f:a3:7a:f5:
08:0b:b5:ba:1c:45:e4:a8:ea:e9:69:c9:bc:aa:42:
0d:1b:39:3e:2a:aa:65:55:8e:2c:87:5e:8d:5c:d5:
3e:3e:2a:65:b5:2a:ca:97:e2:56:3d:42:82:f4:13:
98:3f:00:42:01:0a:63:63:6b:ee:ac:55:62:6d:b6:
6b:ab:f8:41:1b:69:d9:ee:02:f6:cb:7b:1d:de:f5:
fc:41:bd:f9:4d:b4:f0:7c:ab:c4:36:0c:5c:ea:60:
21:b4:07:5d:de:70:a5:ec:4b:4b:98:fc:a3:c0:32:
25:1c:27:9d:c4:38:2f:38:de:51:09:6b:68:5d:c9:
aa:a6:76:b7:ef:f9:44:0d:0a:d7:ca:b9:24:76:c1:
c1:c1:f3:1a:69:54:26:cb:b3:c7:c0:a2:65:d4:49:
2e:88:49:01:3c:58:5f:aa:af:de:45:87:64:10:47:
37:50:3c:9e:9f:59:88:f9:6d:04:cb:b8:cc:f8:34:
f7:5a:e4:7a:1e:5c:15:e3:bc:df:6b:1d:a6:64:cf:
a8:05:d3:c0:ea:0b:ca:26:2b:20:7f:cd:d8:8e:f3:
03:e1:04:a3:2e:87:8d:7e:c9:e0:7f:b8:cb:f0:46:
88:68:c9:71:72:28:bf:08:c2:c4:91:95:ae:d8:bc:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:45:39:96:17:07:84:35:4D:6A:0F:72:FA:7B:1A:1F:38:6E:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c17c6b32-721b-3231-93e1-d6a128094145.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:6d:9c:78:08:92:89:63:f3:45:a1:d2:52:e9:16:d6:30:35:
b2:ce:b1:9b:85:2c:e4:c5:40:b8:e5:d0:a9:18:5b:90:2a:68:
1e:d6:6f:ce:d1:e1:c8:a2:24:5c:8d:53:3d:d2:84:f6:44:01:
57:31:6b:72:96:dc:8b:68:64:81:33:68:12:25:39:0e:5b:0f:
4e:36:9d:88:b1:f8:4d:e3:06:14:70:b4:c4:3b:8a:aa:04:79:
53:cc:01:07:e5:33:3c:cd:98:d8:9d:68:c4:d2:c4:89:a3:39:
ae:c4:1d:eb:6e:88:b7:7f:49:98:90:76:62:d9:12:0b:74:42:
d6:fa:19:7b:9f:15:6f:63:51:74:ae:25:97:17:f1:8e:ae:67:
d7:cb:8f:20:a6:fa:87:84:bf:7b:7e:67:f7:98:26:b2:98:98:
e4:2f:48:ac:0f:7d:0b:09:03:26:81:d6:87:18:46:99:1e:4f:
46:1a:5d:7d:9e:79:76:b2:49:13:66:45:33:44:f3:c9:71:9f:
76:55:93:d7:0a:8c:39:3f:2b:38:cc:e9:35:06:79:af:57:2b:
3c:66:0d:78:d0:89:69:a2:0b:9a:60:de:78:ca:5c:04:ac:50:
e4:c6:d7:e1:cb:eb:95:c1:42:be:ef:08:10:f9:f1:e5:51:ac:
c4:1c:2e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 23:53:04 2024 by rpki-client on console-ams.rpki-client.org