Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5385f8c-e9ca-3126-a157-31363de7b517.roa
File: c5385f8c-e9ca-3126-a157-31363de7b517.roa (raw, json)
Hash identifier: SXduSLrcLLHxX8+0kKYKY9OMdK92PTyFsMM51uYteHY=
Subject key identifier: B3:B7:3B:08:8D:A3:FF:41:78:DD:62:7B:82:03:49:DC:D2:E0:28:2E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584870407C26A1634308CCD3E900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5385f8c-e9ca-3126-a157-31363de7b517.roa
Signing time: Sun 05 Jan 2025 01:07:21 +0000
ROA not before: Sun 05 Jan 2025 01:07:21 +0000
ROA not after: Sat 05 Apr 2025 00:07:21 +0000
asID: 398781
IP address blocks: 23.26.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:40:7c:26:a1:63:43:08:cc:d3:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 5 01:07:21 2025 GMT
Not After : Apr 5 00:07:21 2025 GMT
Subject: CN=a6d50e88-8571-4faf-83c6-8f16817caa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:c3:3f:52:75:07:72:ab:3c:e5:4c:0a:91:
2e:a4:43:de:b9:85:f4:4c:02:1c:4b:23:22:3c:f6:
91:b3:92:2b:b8:96:ea:b4:30:7b:75:a1:8e:74:f3:
13:81:a4:b8:61:8c:1b:09:87:04:11:c1:20:11:fe:
92:c0:28:b9:49:5a:1e:25:22:18:59:77:79:f2:21:
54:a9:bb:64:ef:97:2c:38:be:60:3c:dc:85:4a:60:
94:0e:6b:15:89:2f:af:f8:be:14:37:49:55:04:c4:
b2:aa:07:7b:85:fa:75:38:9c:a6:11:2b:12:39:4c:
74:5e:c1:6d:54:02:fc:2e:51:08:1f:5b:06:a5:6b:
a6:2b:ff:e5:4f:17:b2:00:87:cd:16:84:2a:f4:3e:
c9:dd:39:fc:3b:1c:20:4b:f0:69:4f:c5:af:71:d9:
a7:6f:56:30:33:44:02:d4:c4:f8:d1:92:0c:31:09:
32:c6:8e:b3:53:fe:3a:10:a6:32:12:3d:4b:e1:58:
91:58:8d:98:6e:70:dd:f3:ec:ea:44:e6:1c:87:ce:
54:b4:3b:aa:02:a1:31:7c:45:f8:ee:c8:eb:d0:2b:
0b:f7:1d:e1:32:61:c4:4a:5b:53:df:10:56:f4:ef:
d6:f4:11:81:b4:a9:78:26:9d:91:c4:d0:5c:ef:9b:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:3B:08:8D:A3:FF:41:78:DD:62:7B:82:03:49:DC:D2:E0:28:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5385f8c-e9ca-3126-a157-31363de7b517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:3d:aa:a9:ff:52:16:95:3f:f1:03:dd:70:be:4d:19:6c:27:
65:26:70:9f:1e:c4:6d:fe:a3:30:fe:f7:81:80:56:6a:fd:36:
dd:6e:80:86:e8:02:27:7a:48:26:77:7b:a3:f9:91:84:bf:8d:
51:aa:b6:4f:83:c4:65:e0:ef:d2:66:46:2f:db:c4:70:fc:b4:
41:47:27:aa:48:0c:94:f9:38:f0:aa:de:17:ae:fd:53:e7:5c:
9e:d2:e9:38:80:3c:fd:e0:9f:19:5f:d7:e9:6f:5c:6b:08:37:
3c:41:a9:8f:f1:8d:41:04:83:79:0f:e7:b6:7d:cb:41:8d:62:
d3:45:a8:34:64:77:27:30:a3:4b:b4:c6:32:b1:ba:cd:a1:e7:
9f:4d:b8:04:44:e3:f9:0a:8d:f4:4d:c3:23:8f:63:09:ff:27:
51:ac:39:97:4c:cd:e8:45:bf:ad:6f:21:32:40:f2:9d:7d:d2:
a4:3e:a7:55:95:90:c9:eb:f6:34:c1:83:f6:bd:cc:fa:94:38:
97:cd:bc:5c:a6:f7:a1:d8:22:00:3a:b3:24:61:c4:37:d7:cf:
1a:19:ea:8c:0e:ef:cb:34:3b:c2:be:62:cc:47:1a:3d:f5:c1:
6b:f9:50:b3:54:17:b7:8f:0f:bb:3b:95:11:90:5c:fb:2a:ba:
46:f7:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:01:11 2025 by rpki-client