Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db44545d-2343-3dcb-954e-c0f68c28608d.roa
File: db44545d-2343-3dcb-954e-c0f68c28608d.roa (raw, json)
Hash identifier: yIlp/8tNLh19ib5DFc3i+o7wUUa5NvWbrwA2Yqws2V8=
Subject key identifier: 53:C6:14:03:90:A1:DE:D6:96:D9:75:84:2B:F3:C3:2A:DB:8B:D8:9D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858446769AAE4C09170E27E489C50
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db44545d-2343-3dcb-954e-c0f68c28608d.roa
Signing time: Mon 01 Jan 2024 02:00:16 +0000
ROA not before: Mon 01 Jan 2024 02:00:16 +0000
ROA not after: Sun 31 Mar 2024 01:00:16 +0000
asID: 834
IP address blocks: 23.26.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 21:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:67:69:aa:e4:c0:91:70:e2:7e:48:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 1 02:00:16 2024 GMT
Not After : Mar 31 01:00:16 2024 GMT
Subject: CN=6756b574-7d2a-4667-ad66-9a12453d99e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d5:30:fe:2a:b5:a1:7c:a5:eb:15:51:43:8b:
7d:50:a8:0f:8a:7d:f7:af:0b:eb:7c:19:c2:a5:6c:
7a:6c:dc:f9:e8:a6:da:6a:88:8e:3c:5b:27:6f:f0:
0f:76:1d:f6:2c:2b:03:19:9e:f7:c8:c6:22:68:49:
bb:34:2c:fc:4a:ef:1e:35:29:83:f7:05:35:46:34:
94:ff:9c:fb:fb:fc:c4:34:32:9c:fe:ad:87:23:26:
bf:f1:49:49:7e:7b:88:84:a8:c3:3d:4a:77:e9:60:
20:b1:f8:89:b4:26:1a:ff:52:81:b0:49:6f:8e:3c:
23:21:6b:f0:9f:06:24:28:a6:7d:6c:b3:3f:17:94:
cb:72:c0:19:d1:17:93:9e:6b:65:eb:51:e5:44:23:
eb:72:dd:54:ee:2e:1e:63:2d:c6:a3:ee:3e:41:df:
5c:ea:a2:54:4f:21:a6:f0:df:d1:07:59:9c:dd:08:
38:32:b7:9c:11:32:00:43:54:1f:e2:39:d1:b2:09:
17:a3:9f:75:7e:fb:7e:1e:1a:ca:e4:75:43:21:75:
c8:88:fd:87:6b:ad:36:08:cf:53:3e:74:84:1b:b8:
cf:06:96:e5:25:7e:07:48:9a:a4:b3:26:a9:24:1d:
b0:54:78:fd:83:bf:7d:8a:0a:25:0f:82:d9:c5:b5:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:14:03:90:A1:DE:D6:96:D9:75:84:2B:F3:C3:2A:DB:8B:D8:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/db44545d-2343-3dcb-954e-c0f68c28608d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:39:6a:21:18:23:73:9e:9e:04:46:18:16:a3:ef:c0:f9:2e:
5c:f6:06:3f:6f:71:98:a7:af:bf:5f:32:48:62:c7:b0:f4:98:
f0:0a:95:e0:14:ca:14:ad:2f:61:dd:f9:d1:1c:ee:71:be:62:
33:b8:b0:b4:81:ca:46:fe:bc:a9:3b:8b:b7:cc:c0:78:3d:14:
02:c1:f7:4b:ce:c5:e5:a1:ad:f2:77:4a:db:2a:ca:e6:d5:56:
57:70:67:9b:bc:3b:68:8d:04:06:ff:f0:19:85:7a:2e:07:13:
3b:af:f4:70:c0:f4:8d:45:2b:f7:cb:0b:f8:07:0b:b2:cb:b3:
c7:88:e2:c0:d3:bd:89:55:4e:98:65:c3:bc:16:6d:1e:dd:9c:
44:49:f3:17:49:31:76:33:3b:40:d1:59:78:71:c2:eb:02:d6:
09:1e:e7:a6:b8:09:e4:7c:be:66:33:fa:93:64:d6:f9:49:bf:
50:fb:f7:7e:71:1d:08:8e:39:31:e3:92:b8:ff:dd:45:75:79:
b3:0c:7c:c1:be:13:65:c4:5e:62:7d:42:15:e1:72:78:1e:df:
bb:aa:b4:7e:fe:15:d7:20:79:ff:d4:27:3a:02:a0:f3:f1:c7:
a6:b0:45:a8:c4:a2:be:2f:b1:d9:b5:2d:e8:a2:b1:1b:77:f0:
40:e1:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 00:16:38 2024 by rpki-client on console-fra.rpki-client.org