Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/c222ebab-9d65-315a-a3f2-d6dac62a28a3.roa
File: c222ebab-9d65-315a-a3f2-d6dac62a28a3.roa (raw, json)
Hash identifier: 9+z46lismSAMvtihBvgsOXYxm70wrDWdMO/4e4ur2iA=
Subject key identifier: 8A:E5:66:AF:FB:A2:9F:B1:AC:1E:FF:B9:8D:B9:85:C2:52:4D:11:3C
Certificate issuer: /CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Certificate serial: 010D0C9F43285843A501C0F35B41EEC4FF1A9080
Authority key identifier: EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/c222ebab-9d65-315a-a3f2-d6dac62a28a3.roa
Signing time: Mon 23 Oct 2023 10:44:07 +0000
ROA not before: Mon 23 Oct 2023 10:44:07 +0000
ROA not after: Sun 21 Jan 2024 11:44:07 +0000
asID: 393577
IP address blocks: 23.142.248.0/24 maxlen: 24
2602:291::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a5:01:c0:f3:5b:41:ee:c4:ff:1a:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Validity
Not Before: Oct 23 10:44:07 2023 GMT
Not After : Jan 21 11:44:07 2024 GMT
Subject: CN=20de1a68-29cb-4c86-9ac2-5391316d33b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:fe:ea:04:a5:6e:aa:c9:cc:13:3b:0a:27:
25:1e:52:cf:30:43:04:d5:5d:1f:64:e1:fa:e7:a2:
cf:b9:2a:43:8a:a8:51:92:61:6c:cd:62:98:a0:91:
e5:ef:95:bc:57:bd:69:ad:57:10:f3:98:80:98:73:
ad:02:46:c5:cc:41:6d:ad:21:23:00:ad:5e:f2:45:
f4:84:fe:6d:86:92:79:be:67:9f:e4:26:2c:2c:1e:
12:87:fc:a4:c3:9c:2b:ef:70:97:74:57:a0:0e:6a:
c5:2e:23:93:40:91:e5:6a:83:4d:9c:d2:2f:ff:8a:
7c:ca:7f:c0:45:4f:f5:5e:b2:d2:05:a7:d2:6f:27:
59:0b:80:f6:19:6f:3b:00:3f:05:af:da:06:3a:f9:
93:16:ec:b4:ba:04:b0:4c:10:7d:0e:a2:11:b7:43:
d9:d7:46:58:46:65:7a:95:93:63:54:df:9d:ea:98:
48:a6:ee:73:5b:62:87:ab:a8:82:af:9d:22:a1:28:
b2:c3:44:26:37:ed:92:91:b6:a1:fd:ef:fe:4f:1e:
53:e1:02:31:86:8c:f1:12:d9:44:05:93:36:92:9d:
5b:dc:c1:c9:d2:48:cd:69:30:34:58:ec:22:d5:4b:
18:9c:18:b0:42:a3:df:ab:6e:77:5d:fc:5c:3b:82:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E5:66:AF:FB:A2:9F:B1:AC:1E:FF:B9:8D:B9:85:C2:52:4D:11:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/c222ebab-9d65-315a-a3f2-d6dac62a28a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/9330b8fe-8cb9-471b-a186-5ab83c9e451d.crl
X509v3 Authority Key Identifier:
keyid:EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.248.0/24
IPv6:
2602:291::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:27:5d:bd:a3:29:fd:f6:36:0a:86:5d:2a:68:3a:fd:ad:ab:
17:25:81:06:57:96:6f:65:0c:b0:5f:d3:e8:04:4b:ca:6c:eb:
08:ae:8b:31:bf:2f:6c:3e:1f:19:b2:23:2b:7c:dd:f6:88:1a:
84:3c:67:9e:91:40:b6:2c:25:bd:a2:36:c9:16:f5:3b:43:91:
d4:70:65:7d:0a:2e:21:cd:36:27:83:5a:e9:ca:77:30:7e:88:
62:7a:c2:8d:97:4c:df:8f:63:6c:94:f1:a5:94:bb:6d:54:9e:
f7:8c:38:a3:b7:3e:9d:3b:87:89:d8:74:fc:7a:c1:cf:57:f8:
cf:26:f5:10:4e:4d:c0:c5:ff:5e:49:fc:06:44:24:37:e4:bf:
af:18:38:be:44:e7:e3:e9:40:29:77:ad:d4:17:d9:8f:18:d0:
ad:ff:17:d8:b3:64:32:60:ff:0b:96:90:3c:ec:ef:e9:e7:ed:
69:4b:3b:04:31:bf:0f:04:5a:86:39:30:ab:b4:cf:0d:6e:de:
85:e4:a2:44:9d:2c:c3:e2:32:0e:08:ce:b9:68:76:64:db:52:
9f:dd:72:d2:f3:f8:6b:b4:f7:d7:85:d2:85:34:ec:c8:29:45:
d2:4c:6b:a3:2d:09:1b:6d:aa:27:2f:57:4b:1e:cb:06:55:d5:
5d:c8:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 11:43:18 2023 by rpki-client on console-fra.rpki-client.org