Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d473acce-a8b2-3f03-a0e9-93ac30dae854.roa
File: d473acce-a8b2-3f03-a0e9-93ac30dae854.roa (raw, json)
Hash identifier: AaUMzuOMaCkq2btSG9MqKYqlvIeQvOKs9zxXSMxW7gA=
Subject key identifier: 16:7F:44:9A:F0:3D:8A:15:C9:30:49:44:A3:5A:34:F6:0F:D5:BB:C6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D73D0C4D7191CE86C1E77400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d473acce-a8b2-3f03-a0e9-93ac30dae854.roa
Signing time: Thu 10 Aug 2023 17:47:04 +0000
ROA not before: Thu 10 Aug 2023 17:47:04 +0000
ROA not after: Wed 08 Nov 2023 18:47:04 +0000
asID: 834
IP address blocks: 23.26.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d7:3d:0c:4d:71:91:ce:86:c1:e7:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 10 17:47:04 2023 GMT
Not After : Nov 8 18:47:04 2023 GMT
Subject: CN=1c0744fd-489b-4986-a019-e8b9bcc054fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:44:16:56:81:10:8f:1f:22:fe:42:dc:a1:01:
03:30:c4:b7:bc:bb:4a:65:03:a0:da:9e:9e:2c:df:
ab:76:bd:4b:d3:99:e2:84:19:8f:74:9d:9c:66:a0:
24:84:1b:53:69:b4:68:d2:ae:c0:02:54:1c:d1:fe:
c8:a2:69:47:63:50:df:86:a7:6a:4c:3d:f2:ca:b4:
cc:8f:66:73:81:66:39:ef:e0:22:2c:38:28:b3:73:
41:fb:7b:7c:90:96:9f:bc:8f:2a:85:d9:8c:2e:5f:
d3:b0:f2:be:81:19:4b:f3:30:65:b0:f5:dc:9b:ab:
ed:84:a9:22:5c:70:98:cc:5d:26:42:e4:a9:54:52:
50:13:27:64:81:72:2a:60:a4:21:c4:e8:6b:bd:5c:
7d:80:ab:ef:0d:2a:e9:43:a1:6d:25:4e:a2:09:e0:
1b:d0:5f:4b:0c:40:9c:17:c6:4d:da:8a:d6:ae:a0:
7b:17:48:4e:a5:16:14:5b:1f:18:94:12:9f:cd:45:
38:f1:c9:3d:32:6b:e7:90:84:b8:89:ce:d7:bd:0e:
9c:da:50:04:1b:85:16:29:62:b7:84:fb:a0:63:04:
4e:28:0d:bd:1e:1e:46:ed:a7:58:43:8a:8f:79:60:
fe:07:95:b2:23:ec:65:74:9b:15:65:dd:56:9c:7c:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:44:9A:F0:3D:8A:15:C9:30:49:44:A3:5A:34:F6:0F:D5:BB:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d473acce-a8b2-3f03-a0e9-93ac30dae854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:64:95:7e:2f:15:7a:aa:28:52:d8:7a:54:24:47:1f:d1:ba:
61:e1:04:77:2e:01:04:bc:f9:2e:72:0f:4b:b9:69:49:c6:97:
9e:ce:47:54:8c:35:37:22:09:6e:90:0d:0e:27:64:73:62:23:
c8:22:61:b0:51:ac:b7:e1:5b:8b:55:d9:cf:85:64:9d:0c:5d:
b6:1e:a3:2d:ba:01:c4:38:41:77:a8:95:f4:0f:58:dc:4e:f5:
6d:61:80:0a:fe:a1:e6:7a:21:f5:e5:5d:3f:46:c4:76:db:96:
46:0e:60:0f:7c:ee:c3:32:eb:9a:90:fa:be:be:22:3b:8c:22:
28:12:93:06:66:a4:3b:32:51:ac:c1:53:d6:db:6e:f2:f1:d4:
90:61:f9:f6:b3:ee:f2:f1:61:ad:b4:ff:05:2d:fe:d6:21:ca:
54:a9:cf:15:c5:80:6a:04:2e:7c:f5:04:99:2b:26:74:f6:09:
79:7e:55:8d:ca:d3:8b:34:54:2a:79:6c:be:42:36:f2:95:00:
ec:63:b2:0e:a3:e5:1b:fa:43:a0:a6:34:d2:5f:95:c3:28:e1:
5a:d3:c3:48:f0:20:d0:30:7f:90:76:3a:40:ba:e2:f6:cf:3d:
e7:4d:43:67:56:af:81:22:f2:03:17:1b:83:a8:5c:a0:f1:62:
9d:d6:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 14:06:02 2023 by rpki-client on console-fra.rpki-client.org