Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8/2358bd40-8445-3213-adf8-320b0d441c2f.roa
File: 2358bd40-8445-3213-adf8-320b0d441c2f.roa (raw, json)
Hash identifier: /Wf+EhaerM7aFT//HmgntrA++tGAywK8PDYqncETSsk=
Subject key identifier: 33:10:C0:FC:FB:E9:40:55:E8:5B:28:7E:91:05:FC:92:47:58:04:8D
Certificate issuer: /CN=46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8
Certificate serial: 010D0C9F432858438C253849900CAA9AA51BF280
Authority key identifier: BA:DC:38:37:D4:3A:B1:5D:33:5D:B8:FF:5F:82:64:1B:DC:95:31:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8/2358bd40-8445-3213-adf8-320b0d441c2f.roa
Signing time: Sat 14 Oct 2023 13:00:18 +0000
ROA not before: Sat 14 Oct 2023 13:00:18 +0000
ROA not after: Fri 12 Jan 2024 14:00:18 +0000
asID: 31905
IP address blocks: 23.150.184.0/24 maxlen: 24
2602:2a6::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:8c:25:38:49:90:0c:aa:9a:a5:1b:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8
Validity
Not Before: Oct 14 13:00:18 2023 GMT
Not After : Jan 12 14:00:18 2024 GMT
Subject: CN=4d5c5b8f-58d7-469e-99fb-57092a731f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:67:42:df:9e:31:6b:83:cb:78:f0:ec:71:
1c:19:bf:6c:4e:e8:73:fd:35:57:ff:d2:28:da:11:
0b:a2:5f:15:48:40:88:f8:42:d4:4b:a7:7d:a9:0c:
97:35:49:3f:00:22:36:29:d3:fe:42:f9:a2:ef:ee:
16:96:73:5e:31:f5:f1:94:4e:a4:28:5e:aa:ee:23:
1a:1f:75:39:a2:d8:21:e2:ec:26:8a:d8:e3:ab:ca:
f9:38:3e:53:cb:cf:23:78:ab:63:33:16:99:76:87:
55:88:d6:d3:0d:30:03:94:d3:a7:d9:53:82:0f:b1:
a0:4a:de:8b:8d:27:8b:90:80:b6:11:c7:f4:3e:4f:
25:9f:db:0d:92:84:35:7b:66:3e:5a:3c:44:9f:f2:
cd:25:ae:5c:c5:99:2d:48:7a:3b:43:90:2f:37:ac:
b2:c1:e9:0d:f5:84:a5:80:93:7b:1c:11:3e:2c:21:
81:09:24:85:51:0a:32:d5:77:21:7f:ba:e2:da:96:
3b:9b:09:bf:60:16:6b:ab:01:64:5c:7c:63:8f:79:
52:09:ef:23:65:1c:48:ed:b2:a0:6a:56:d8:72:6e:
aa:db:16:17:70:c9:6e:8b:dd:14:ae:53:db:47:ff:
07:8a:3c:24:7a:5f:72:ae:c8:ef:ba:3e:7f:13:b8:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:C0:FC:FB:E9:40:55:E8:5B:28:7E:91:05:FC:92:47:58:04:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8/2358bd40-8445-3213-adf8-320b0d441c2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8.crl
X509v3 Authority Key Identifier:
keyid:BA:DC:38:37:D4:3A:B1:5D:33:5D:B8:FF:5F:82:64:1B:DC:95:31:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.184.0/24
IPv6:
2602:2a6::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:9f:2b:84:75:04:21:a7:47:a2:1a:fa:21:89:e1:a3:40:88:
f5:f6:cf:2c:34:0a:04:c2:8b:79:ea:19:15:a7:a8:3d:d6:8b:
b9:6d:ab:ff:cc:2f:3b:2a:d5:54:fc:c5:74:00:4d:f1:46:fe:
aa:7b:9d:28:44:86:3e:1a:57:bc:0f:19:5c:38:19:99:e6:85:
85:42:3c:8b:09:fb:32:ec:ef:b2:91:62:df:7a:7d:5f:59:77:
48:5c:8a:64:35:3b:61:3f:31:54:a0:bb:6a:53:9d:d1:ae:62:
c4:2d:37:a4:8a:cc:77:77:06:4c:6e:42:59:60:e0:d5:cd:86:
a5:30:ad:3f:33:cd:51:08:9f:08:92:f6:41:b8:d4:f3:2c:24:
32:9e:90:5f:e7:ef:41:ef:8d:d1:8c:a4:d0:ee:7a:67:e5:7f:
74:c4:2a:56:e5:4b:39:41:75:18:eb:b4:53:bc:03:c8:c3:7b:
cf:5f:05:43:c7:cd:02:29:80:ec:3a:b0:23:6e:6e:e7:8b:d6:
0b:19:9b:28:ac:2f:7f:4d:e9:a2:e1:0f:10:ad:c7:39:49:76:
7f:ea:89:fd:0d:fb:b6:de:93:4d:bd:2c:b4:e9:58:62:14:78:
94:04:14:99:56:e4:8d:68:aa:8e:c1:58:98:53:bb:f7:d9:38:
ad:27:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 17:53:11 2023 by rpki-client on console-fra.rpki-client.org