Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/4e185ad0-d8e1-3e01-9a30-a8d92776b3b0.roa
File: 4e185ad0-d8e1-3e01-9a30-a8d92776b3b0.roa (raw, json)
Hash identifier: 3LgIrUsTd97sZeHo3M4KU7UEcMAYQu+L8Vl/TeKWHqY=
Subject key identifier: 8C:09:3C:43:FF:82:58:48:7E:EA:D3:06:EB:5F:9F:A8:A4:6B:8F:4F
Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Certificate serial: 010D0C9F432858441EDEAE1A6A180E67C5388280
Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/4e185ad0-d8e1-3e01-9a30-a8d92776b3b0.roa
Signing time: Wed 06 Dec 2023 02:22:04 +0000
ROA not before: Wed 06 Dec 2023 02:22:04 +0000
ROA not after: Tue 05 Mar 2024 02:22:04 +0000
asID: 14315
IP address blocks: 23.247.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 17:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1e:de:ae:1a:6a:18:0e:67:c5:38:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
Validity
Not Before: Dec 6 02:22:04 2023 GMT
Not After : Mar 5 02:22:04 2024 GMT
Subject: CN=7ac181b2-13de-40a7-b673-5f89c28fe92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:47:d1:2d:b9:9c:06:06:8d:5b:8f:35:47:
5f:f8:5a:da:26:54:06:8a:78:77:45:bb:52:1c:7b:
40:02:01:28:86:2d:e4:da:98:d7:2d:c6:4b:2a:ba:
89:3e:6f:6f:a4:b5:07:5c:61:50:f2:dd:41:13:24:
37:8b:4e:af:f5:d0:1d:77:8a:92:32:bf:0b:1f:09:
69:aa:99:32:7f:29:8b:95:e5:14:84:c8:71:f3:7d:
fe:3f:54:1e:0e:db:b3:c9:2f:41:cb:21:49:ca:b1:
52:45:c9:96:93:42:5e:28:65:bd:c8:3b:92:6d:dc:
1b:b9:7f:e7:71:78:fd:31:c4:33:d0:c3:ec:01:9d:
c2:27:fb:78:8f:4a:7e:9a:d2:ab:27:37:f9:7f:ef:
e3:b5:1f:d4:df:84:ad:bc:fd:a3:5f:07:da:38:88:
7b:0f:cf:29:ce:4e:00:32:e9:fa:a9:7d:1c:29:1e:
e4:18:76:39:ab:32:3a:95:2e:86:9e:70:66:72:92:
b2:ff:28:60:25:0e:de:42:ea:be:63:26:56:68:13:
9f:df:18:6a:22:d8:0a:1d:de:06:60:41:f5:43:4a:
6a:03:ee:ba:ff:09:d4:49:a2:69:01:3b:17:59:34:
41:88:05:10:cb:a8:54:97:24:87:18:e3:05:f8:77:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:09:3C:43:FF:82:58:48:7E:EA:D3:06:EB:5F:9F:A8:A4:6B:8F:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/4e185ad0-d8e1-3e01-9a30-a8d92776b3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl
X509v3 Authority Key Identifier:
keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:6d:a4:ad:31:b0:1f:ea:b6:ce:36:09:04:8f:eb:5e:4c:0d:
6f:55:dc:d9:30:11:22:7f:19:ad:0b:38:b9:59:2c:c7:dd:f5:
93:08:aa:ef:fb:a0:5e:c0:d1:15:97:9e:ab:50:db:30:87:78:
02:5e:59:fa:a5:fa:62:d4:79:b5:9a:2b:c2:41:5c:51:22:9c:
fc:7f:80:25:d5:10:98:62:a8:a2:71:64:56:30:4a:12:25:b7:
5f:68:cd:03:09:8c:f9:cd:fe:72:f8:45:f8:7a:c9:af:7d:24:
ab:0c:df:f7:b3:a4:96:d5:bd:30:5a:16:41:61:f0:56:bb:9a:
1b:4a:c7:79:9b:54:ab:c5:18:28:73:8f:71:e2:35:59:f0:b8:
5c:2a:8e:05:92:7f:ad:16:3c:de:b6:1a:db:73:6d:50:18:e6:
b7:73:2d:5c:55:fa:b8:d2:12:9a:14:3a:d4:98:0b:c5:d5:88:
2f:82:73:23:e8:a7:64:d9:1b:bf:ec:ea:a2:7f:14:04:4c:90:
c4:55:d4:de:3b:11:57:90:a2:1d:e3:02:20:3e:f7:4e:ba:80:
72:f1:1c:72:d6:20:cc:e6:65:be:a0:3c:ad:67:d1:da:8b:45:
d3:37:8b:10:62:d0:76:1d:86:82:58:69:3c:f8:d8:19:03:e5:
45:c2:b8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:57:23 2024 by rpki-client on console-ams.rpki-client.org