Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f328877f-3111-30d2-8e58-6f70085088d0.roa
File: f328877f-3111-30d2-8e58-6f70085088d0.roa (raw, json)
Hash identifier: kLMvnU5kj17Bqn0ZD2T8rube6GkmZQnfRMVFZIaOzWQ=
Subject key identifier: 96:28:D0:35:97:1B:E0:F5:04:8B:9F:67:F6:29:77:84:42:80:7D:59
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858451B7AEDD20999C64C6DEDD6E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f328877f-3111-30d2-8e58-6f70085088d0.roa
Signing time: Tue 05 Mar 2024 14:00:31 +0000
ROA not before: Tue 05 Mar 2024 14:00:31 +0000
ROA not after: Mon 03 Jun 2024 13:00:31 +0000
asID: 46450
IP address blocks: 23.26.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 15:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1b:7a:ed:d2:09:99:c6:4c:6d:ed:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 5 14:00:31 2024 GMT
Not After : Jun 3 13:00:31 2024 GMT
Subject: CN=51716e75-03f4-4a8f-8de9-434c34ce4ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:71:53:34:a5:54:b9:c5:bd:c0:3e:b6:5d:
33:eb:3c:b4:b2:1e:35:0a:a0:4a:22:76:d9:e9:f3:
61:ea:55:d1:dc:47:37:a4:cd:70:ad:3f:6c:eb:76:
da:c9:78:58:a8:da:96:10:00:05:1c:b2:39:b3:d2:
ae:b4:fc:6b:3d:d4:6e:da:dd:b1:fb:13:44:ab:87:
d9:02:ad:ae:bb:8c:fb:ec:bb:cb:2f:8f:b6:45:50:
c0:2e:a8:ae:ef:b7:b7:60:9f:2f:09:f2:c8:e1:06:
cf:91:9c:6b:9a:0d:b0:39:8a:d8:09:77:ca:8d:f0:
15:b4:e1:9c:fc:95:f7:2b:6d:3f:be:00:11:fd:f3:
43:03:94:53:e5:c2:83:5b:41:de:42:23:d3:1c:8d:
96:a4:ed:8d:05:55:20:0e:f6:0d:63:70:d2:e6:48:
a7:6f:39:b7:d3:62:99:74:35:0a:b5:4a:63:48:f3:
37:fa:30:94:77:01:5d:b5:d6:e7:90:e6:88:03:29:
2a:2f:2e:8d:e2:74:43:69:13:9f:e1:dd:40:ca:0a:
ac:c7:b5:a2:9f:48:8f:5f:7e:af:20:f3:92:10:18:
e9:bb:85:f3:38:fd:f0:b1:88:15:7e:7c:55:68:83:
92:fb:75:d1:c5:46:bc:50:42:59:9a:f9:6f:eb:57:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:28:D0:35:97:1B:E0:F5:04:8B:9F:67:F6:29:77:84:42:80:7D:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f328877f-3111-30d2-8e58-6f70085088d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:fb:da:a5:f0:81:70:b8:20:76:19:b7:05:85:2a:6b:8b:47:
9f:8e:7f:98:f4:4d:2e:4b:f4:09:06:d8:f8:f9:f3:c3:8d:cc:
54:22:12:ea:5c:8b:9e:b8:49:56:4e:da:0e:d5:b2:3d:8e:1d:
e5:e4:d7:fa:38:d3:ec:7e:4d:c3:32:db:f1:44:95:40:f9:c8:
5f:71:4e:5b:41:7e:df:7f:6a:e2:9b:d2:03:a1:4e:27:96:13:
85:69:c9:5d:ff:5f:cf:fa:a0:32:23:93:c2:8e:e9:ff:82:82:
b3:67:61:13:fd:ae:40:b7:a2:af:82:d2:6b:44:a4:a0:62:34:
d6:db:aa:2e:1f:9b:a4:31:3f:2e:33:9d:45:01:19:71:57:e8:
39:90:4b:65:19:54:84:3c:cc:f5:e7:01:d7:28:50:ee:e0:de:
54:5d:fa:22:2c:b8:2b:ff:13:9e:4c:2f:a2:29:9f:e3:6f:ed:
63:42:ed:8a:9f:72:aa:15:c0:f9:3a:bb:a7:1a:db:d8:69:e4:
fd:5b:1b:bf:6c:3c:0c:7c:71:3e:d5:65:09:f8:18:2a:34:12:
e3:80:a7:c9:8f:9b:98:5d:a5:a3:cf:27:a8:98:05:de:f8:a9:
29:74:0f:0a:79:b3:5e:fe:b5:e1:69:c1:07:4f:62:86:8c:c9:
bf:9d:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:47:41 2024 by rpki-client on console-ams.rpki-client.org