Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/15210fb3-690e-32b7-b8cb-7d580be42dd0.roa
File: 15210fb3-690e-32b7-b8cb-7d580be42dd0.roa (raw, json)
Hash identifier: CJblcf0laa9lezV+OOcHAWLlt+exNjcs2CndMMa0wmQ=
Subject key identifier: 10:C8:76:28:61:3F:48:24:1B:D6:A0:90:59:5D:54:44:D0:57:50:4B
Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial: 010D0C9F432858467B5D13399CD90232C000E780
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/15210fb3-690e-32b7-b8cb-7d580be42dd0.roa
Signing time: Tue 09 Jul 2024 15:04:58 +0000
ROA not before: Tue 09 Jul 2024 15:04:58 +0000
ROA not after: Mon 07 Oct 2024 15:04:58 +0000
asID: 33039
IP address blocks: 23.173.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 02:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:7b:5d:13:39:9c:d9:02:32:c0:00:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Validity
Not Before: Jul 9 15:04:58 2024 GMT
Not After : Oct 7 15:04:58 2024 GMT
Subject: CN=3b6910af-bb17-48dd-b41e-ca69db168871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:4c:20:f1:6d:e7:0d:37:19:a6:b8:d5:83:
5c:d9:ce:f4:57:23:a6:38:f0:5e:59:ca:88:b9:bb:
2b:9b:25:fe:4f:3a:b2:7a:b0:46:93:aa:7a:93:92:
70:e5:0d:62:f4:fd:e4:2f:c1:43:fc:8c:63:10:1e:
c0:48:e8:17:89:98:1e:a9:50:d2:9a:e8:b2:96:f6:
73:24:22:26:70:e1:ef:0d:25:f9:25:d0:21:e4:c7:
8a:d3:9a:3b:b9:0d:2a:4e:dc:c3:b7:db:aa:b1:cf:
6a:11:e5:63:41:d1:0b:a2:e6:6f:bf:ad:df:9b:75:
66:03:e6:5c:e3:5f:f2:70:7a:10:86:81:34:79:48:
f2:56:af:a3:7b:e6:87:74:b9:ee:96:a5:4d:e9:d7:
8c:d2:f7:e1:04:f5:86:9d:bf:b9:8a:44:a3:80:4e:
ab:c8:a7:26:a1:2f:a3:ba:62:3b:ee:09:bb:ca:dd:
d1:56:7e:0c:e7:b4:10:a7:e3:9c:c1:f0:e3:2e:8d:
aa:c6:cc:bf:20:a7:d7:84:01:82:c8:f5:78:a4:4f:
39:67:81:69:0e:67:62:a0:46:da:d7:d2:58:7c:47:
1d:f2:f0:71:da:00:1a:12:4e:ea:15:e2:4b:ac:73:
f7:ba:93:88:e1:83:9e:44:0f:66:d9:56:1e:a8:01:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:76:28:61:3F:48:24:1B:D6:A0:90:59:5D:54:44:D0:57:50:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/15210fb3-690e-32b7-b8cb-7d580be42dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
X509v3 Authority Key Identifier:
keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:2c:4b:b4:9e:c9:c4:0f:bc:b7:68:7a:ab:fb:d6:2f:b2:f0:
03:3b:57:30:4e:5e:1f:48:3b:e7:29:30:e5:21:1b:50:48:d9:
39:66:57:d5:d8:46:e1:2e:1d:59:52:1c:cd:fa:d3:c5:72:a8:
d8:a3:d9:0f:18:8b:5d:2c:72:09:c7:1d:c4:c5:bc:9e:69:f2:
41:60:b3:77:7f:8d:d8:69:14:be:49:4d:c0:74:79:99:90:f2:
b1:08:62:c6:e3:40:6f:88:aa:39:86:e6:3b:41:c1:e3:de:6d:
ff:f8:13:39:53:f3:01:78:f6:ad:10:3a:ef:ee:70:a9:00:54:
3d:1c:c4:8d:94:4a:5a:2d:40:5c:4e:83:ac:ce:3a:a2:3b:7e:
59:ea:d4:af:1d:6d:27:13:08:1e:d5:a6:af:af:22:19:53:98:
e6:a3:e9:ca:a8:0e:db:ea:1a:14:06:91:f4:0e:be:b0:17:1d:
8f:9c:da:c5:1e:5e:84:f4:e1:64:b3:76:ec:4b:94:06:f2:87:
d0:48:e2:6f:be:6d:18:c1:de:38:24:2c:7d:af:ab:0a:7c:09:
4d:ab:0b:de:5b:5e:95:66:49:01:ff:87:25:31:d6:b2:95:dc:
fa:c7:87:d7:95:c2:d4:70:65:e5:94:66:a8:a4:cb:e3:28:70:
18:19:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 05:17:00 2024 by rpki-client on console-fra.rpki-client.org