Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169c7f3a-c32d-3343-bd21-4a50bc1a9d01.roa
File: 169c7f3a-c32d-3343-bd21-4a50bc1a9d01.roa (raw, json)
Hash identifier: giFImrw7oHeVPBwZ8RKqHDyT/Of184KdaMLeTxS2b0o=
Subject key identifier: C6:31:3F:8B:4E:F6:A0:07:B5:B6:27:EF:40:68:7F:26:87:53:C8:5E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858449B0F7E7B737EACD21A1921C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169c7f3a-c32d-3343-bd21-4a50bc1a9d01.roa
Signing time: Fri 19 Jan 2024 14:00:31 +0000
ROA not before: Fri 19 Jan 2024 14:00:31 +0000
ROA not after: Thu 18 Apr 2024 13:00:31 +0000
asID: 35994
IP address blocks: 23.40.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 15:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:9b:0f:7e:7b:73:7e:ac:d2:1a:19:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:31 2024 GMT
Not After : Apr 18 13:00:31 2024 GMT
Subject: CN=f26d6c26-0568-4d53-aa6e-0934e3a4e7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:be:c5:f8:a5:d9:66:23:ad:d6:1a:98:ad:
36:a1:ef:a7:b5:d7:21:c1:1d:4f:f1:6b:2c:d5:33:
fa:c8:35:8c:db:90:71:dd:d3:e8:3e:35:0c:0f:31:
60:7c:cf:23:dd:25:11:6c:96:57:4a:73:ff:d8:83:
24:02:5e:f1:43:31:c8:9b:2e:41:0c:94:f9:62:f0:
24:7c:2e:9b:7d:1d:e9:6c:0e:d4:11:09:c8:61:90:
9f:f8:3b:b4:1a:dd:af:14:7f:75:bc:67:32:93:39:
cd:e5:3c:c6:d7:6e:ad:cb:9f:a7:27:a5:ed:a6:7a:
53:82:5c:52:28:c4:a4:77:e6:cd:3a:f4:57:bd:1a:
4f:69:30:1e:19:1c:48:04:64:fd:59:92:38:66:ca:
2a:b9:cf:af:77:92:68:32:0e:d8:0b:ce:37:8a:2d:
2d:c2:57:e5:e6:5e:58:1e:3d:67:95:99:f3:ee:d9:
8b:7e:59:13:8d:7e:49:60:cd:c9:52:e2:81:4a:6d:
5d:d6:fe:89:ba:e3:75:fc:1b:5e:53:86:9d:03:2e:
56:34:a4:d8:e1:72:13:42:d9:58:fd:0e:b7:fb:46:
ab:3c:8c:40:df:30:3b:48:85:f8:18:07:5c:e4:aa:
21:00:98:bc:b8:5c:c9:36:f3:d4:98:f4:56:12:ec:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:3F:8B:4E:F6:A0:07:B5:B6:27:EF:40:68:7F:26:87:53:C8:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/169c7f3a-c32d-3343-bd21-4a50bc1a9d01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:f7:9d:09:2b:3d:bf:cb:89:c2:37:52:56:73:92:b3:66:2b:
8c:73:0a:af:7d:02:33:74:13:0e:a7:11:f3:dd:ab:f6:d7:df:
c4:f3:94:37:e8:eb:62:42:dc:fc:6b:d9:b3:d0:b1:e5:9f:71:
dc:e4:eb:c5:a2:ea:14:51:6e:40:44:74:3a:0f:2e:d6:10:99:
d5:ae:ee:7b:31:8a:82:68:ad:87:e9:0b:14:64:e8:61:5d:74:
4c:3d:25:73:ed:cc:74:9c:21:f7:6a:1e:71:f1:de:d3:9a:98:
63:40:1d:52:9f:97:e5:3c:c6:0a:87:27:b0:db:c7:2a:11:79:
5b:ee:f5:e9:c0:09:69:f9:da:9d:45:c3:22:91:c4:bd:90:d5:
d8:9a:f9:28:59:8c:76:19:ab:c8:a7:a4:f5:31:7f:db:7d:e4:
f3:43:6b:24:ac:01:49:c2:87:a9:7c:dd:3d:8d:b7:e9:2f:8f:
69:16:f2:f5:af:38:67:dd:a7:6a:d7:76:5e:c2:ed:ee:17:bb:
16:d7:01:56:b1:7e:3c:99:79:3e:52:44:c3:ed:d0:21:a2:22:
0f:3c:2e:37:c4:ee:8f:a5:9c:37:9c:7a:ca:50:22:81:75:e6:
82:e4:ca:0c:96:3f:b9:7d:1b:1f:f1:49:82:3b:77:82:71:fb:
ef:f5:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:17:01 2024 by rpki-client on console-fra.rpki-client.org