Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503cdd68-aeb6-3449-a263-740c11bc2cde.roa
File: 503cdd68-aeb6-3449-a263-740c11bc2cde.roa (raw, json)
Hash identifier: evjqkXrz9fZAGIlyl6ZXqOABmveJ10csgOHJXjIIWLU=
Subject key identifier: 8D:30:0B:25:E9:1D:49:41:FD:1E:20:CB:E3:32:E5:54:F9:A9:47:B6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584851A579A8E9529ACAF545DA00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503cdd68-aeb6-3449-a263-740c11bc2cde.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 273741
IP address blocks: 23.26.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 18:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:79:a8:e9:52:9a:ca:f5:45:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=d334f430-51d3-40d7-9bd3-537de780b397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:66:8c:56:a6:0c:46:20:53:01:09:76:22:e9:
c7:99:77:95:4f:13:48:f8:5d:3e:93:80:57:11:56:
12:19:c0:1f:dd:f9:25:52:d8:f8:42:9f:70:79:e2:
24:d9:0b:3e:0e:d2:79:fd:9a:2b:10:64:9a:84:f7:
69:92:10:e6:44:11:a6:60:e0:61:13:68:7a:06:7b:
4a:fe:38:87:52:73:85:1a:d0:b5:92:b3:c5:2d:71:
02:d6:f9:07:d7:cf:fd:c3:58:ec:e6:83:55:41:bd:
62:67:55:a2:7b:6e:3b:de:30:4a:f8:9c:ec:59:63:
e8:ad:cf:e2:8b:33:c8:fe:97:6c:3c:5b:ac:13:36:
25:c6:a0:ef:35:38:3c:5c:71:1f:7d:a0:30:7e:6e:
30:b0:7e:2c:13:4b:8b:8c:70:3e:93:e5:76:91:ac:
34:83:d0:bd:23:16:92:43:75:9e:b3:9a:aa:ac:e6:
b8:dc:d5:ab:44:5f:de:a9:44:a3:3d:0a:59:03:cd:
85:98:e4:02:48:26:81:4f:e3:ad:e5:a0:0f:79:c4:
18:9b:99:62:aa:be:80:77:b7:b1:e1:c4:f8:91:5e:
35:94:dc:e4:17:9e:a8:83:d7:ab:43:39:38:75:cc:
e8:28:19:4b:f5:1f:15:9b:0c:56:3c:fd:5a:7b:e6:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:30:0B:25:E9:1D:49:41:FD:1E:20:CB:E3:32:E5:54:F9:A9:47:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503cdd68-aeb6-3449-a263-740c11bc2cde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:a8:03:41:07:8d:c4:c6:fc:43:53:63:3d:da:65:6a:3b:77:
de:3e:cb:43:e9:4c:dd:e4:e6:d3:c2:23:66:a1:96:2f:30:3e:
c6:fd:a7:ce:0b:99:8c:92:2c:0c:cc:bc:66:88:b3:f8:5f:0f:
b9:e6:96:fd:bd:0e:22:95:1b:45:13:f9:c2:59:85:22:11:3c:
83:a2:ee:e1:2e:c4:de:55:db:f1:60:b5:32:99:15:32:02:96:
c2:1b:cc:05:8f:06:69:2f:0c:24:a0:f8:5d:4a:f5:8f:b8:f1:
90:1c:fe:fa:9e:f0:fc:b1:58:5c:72:9f:da:ae:ce:81:bc:e7:
17:27:b0:35:df:ad:33:66:c6:c2:03:1f:d6:f7:ba:5d:6e:44:
14:ef:48:d1:6c:91:8f:95:b3:d2:1a:49:be:f1:a0:ad:15:f7:
c1:96:e5:25:e1:b2:d2:e3:20:cf:3c:28:92:91:2c:7a:27:66:
61:df:5e:c9:1f:90:14:d2:19:a1:7d:7d:97:75:b7:2b:12:64:
59:1e:1e:d7:7e:21:a0:b0:74:88:c5:b9:df:77:2d:79:e0:a0:
3a:3d:80:fa:97:e8:84:cc:40:df:32:a1:e7:de:be:39:5f:5f:
a3:19:50:b8:f5:f7:63:4c:13:66:62:61:d9:fb:23:b7:06:e1:
a4:ae:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:59 2025 by rpki-client