Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/f176ad1a-39de-32ea-a6d0-dcadc680a5b4.roa
File: f176ad1a-39de-32ea-a6d0-dcadc680a5b4.roa (raw, json)
Hash identifier: UM+OZH/9yEImVyy7tGKg4Us1CrrU0q31p0x0CdNb01I=
Subject key identifier: 0F:2B:B1:D3:5A:F6:50:CF:36:7A:8D:12:41:CA:33:D9:83:56:52:5B
Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial: 010D0C9F43285843A8101BED09776BC3986A2000
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/f176ad1a-39de-32ea-a6d0-dcadc680a5b4.roa
Signing time: Tue 24 Oct 2023 13:00:20 +0000
ROA not before: Tue 24 Oct 2023 13:00:20 +0000
ROA not after: Mon 22 Jan 2024 14:00:20 +0000
asID: 42831
IP address blocks: 23.170.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a8:10:1b:ed:09:77:6b:c3:98:6a:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
Validity
Not Before: Oct 24 13:00:20 2023 GMT
Not After : Jan 22 14:00:20 2024 GMT
Subject: CN=78d2373f-66b2-48ec-9cc7-aba23627817f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:81:83:43:74:06:b7:0b:64:28:c4:dc:4a:
b3:1d:3c:d0:6e:93:6f:8e:a4:ef:29:5e:8f:2e:ed:
80:0c:6e:72:3b:18:0e:1e:6f:0c:39:1d:b3:8f:fd:
8c:d5:11:1a:44:ab:f3:6b:1f:3c:38:e2:3b:b5:57:
d2:0c:cb:b6:fc:76:a3:d9:ec:67:2e:07:cc:08:6f:
a6:59:e0:f3:37:f1:b7:9b:02:be:2e:75:a2:84:6c:
05:66:ed:04:98:8b:30:db:a7:53:e1:67:d1:3a:4e:
00:28:2d:3a:54:c7:bb:5a:f5:b0:d9:e5:27:b2:1e:
df:d0:dc:b8:cc:b8:87:1d:1a:0e:29:0b:8f:43:0c:
ff:6d:23:59:58:19:98:d1:a0:94:28:e6:76:83:85:
70:af:d6:85:84:d5:7f:a8:9d:34:ca:ff:c5:1a:cb:
ad:22:27:a2:26:5b:d3:2a:62:51:f0:0c:d8:b8:53:
80:14:cd:ca:19:ad:6e:d2:f3:aa:57:9e:2d:9a:99:
58:39:81:c7:71:3f:9d:db:c2:78:da:ba:de:9d:de:
1c:b4:e6:90:dd:6f:c9:38:62:b7:cd:ea:7c:27:b2:
97:fd:ee:56:a1:0c:c6:64:67:5c:31:bb:01:c1:c8:
4e:e8:99:22:5f:a2:58:3d:e2:e7:3d:d2:e5:a8:3e:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:B1:D3:5A:F6:50:CF:36:7A:8D:12:41:CA:33:D9:83:56:52:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/f176ad1a-39de-32ea-a6d0-dcadc680a5b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
X509v3 Authority Key Identifier:
keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
sbgp-ipAddrBlock: critical
IPv4:
23.170.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:4f:0e:04:66:78:23:1f:62:48:9b:ee:03:21:ee:fb:40:d7:
bf:2e:4b:08:1f:56:1d:8e:ce:51:35:66:af:0e:15:c5:8a:5f:
5d:2d:f0:c6:61:f5:c3:e2:6e:9c:5b:32:4a:fe:a7:a8:86:79:
dc:01:76:2f:05:ef:04:33:29:23:a0:bd:cd:59:67:0b:52:05:
86:f4:5c:d2:dc:97:3e:3b:90:f1:02:a0:e1:d1:95:a9:23:cc:
b5:60:b5:61:37:6b:a1:cc:fa:07:86:dc:c2:27:55:5b:e2:92:
e1:84:60:0c:d0:bf:3f:fa:11:bd:ac:b5:13:38:2d:b9:46:a5:
85:e3:50:97:56:48:c8:de:02:f5:0b:1d:b9:41:cb:d4:2e:5a:
c8:55:5a:d1:0e:3d:e3:7b:4c:fa:40:2a:87:69:b4:5f:8a:a7:
c0:eb:03:3f:fd:92:72:f1:bf:29:27:4b:b6:21:ff:11:9b:d4:
2e:f9:32:19:2c:d7:ad:a9:82:04:dc:f8:f7:15:b3:78:aa:d9:
f0:7d:cd:39:0b:e4:78:ef:8c:ae:ad:12:d7:37:f4:fa:af:68:
7e:8e:8e:8f:cc:5a:3b:13:32:1b:a2:c8:7b:b4:c1:1d:e5:0c:
6c:3a:b2:09:d0:ae:bd:4f:7d:2a:1a:99:43:6d:57:37:17:a2:
c8:d0:85:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 19:57:29 2024 by rpki-client on console-ams.rpki-client.org