Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c13e8b3-222b-37af-a21d-d38aba2fe0a4.roa
File: 6c13e8b3-222b-37af-a21d-d38aba2fe0a4.roa (raw, json)
Hash identifier: GyfBQg+yf0A86nMh+erDFWH7wDNwD8cPPqL6O/hrRc4=
Subject key identifier: 78:BC:97:EC:F0:AC:CC:12:57:CF:26:2C:E3:65:CD:0F:C3:1A:13:B1
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584577E2182087FB3D6298FDDE80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c13e8b3-222b-37af-a21d-d38aba2fe0a4.roa
Signing time: Sun 07 Apr 2024 16:22:49 +0000
ROA not before: Sun 07 Apr 2024 16:22:49 +0000
ROA not after: Sat 06 Jul 2024 16:22:49 +0000
asID: 7922
IP address blocks: 23.249.160.0/24 maxlen: 24
23.249.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 May 2024 16:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:77:e2:18:20:87:fb:3d:62:98:fd:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Apr 7 16:22:49 2024 GMT
Not After : Jul 6 16:22:49 2024 GMT
Subject: CN=bf695a3f-5e3f-4cd4-ac66-a02b9145633f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:29:ea:6b:97:e2:43:6a:6d:f2:b1:01:1b:
9c:4b:97:3a:5e:44:91:dc:43:96:4e:df:7c:8b:06:
77:8c:34:bd:0d:65:3d:ee:cb:e8:85:04:6d:e1:5a:
ed:d6:19:f9:8e:2e:49:a8:1c:3a:78:d7:09:10:7c:
c8:ee:2e:b3:45:22:21:69:7c:b8:5f:b0:5d:21:08:
0f:c4:70:63:b3:1e:8f:46:5c:26:67:f2:42:aa:54:
9d:f2:42:b2:5c:ca:24:6b:9b:d6:14:50:92:3b:da:
20:a7:71:47:17:55:fc:f6:c4:b4:8f:c8:eb:31:8c:
f1:84:f6:be:0c:5c:ac:22:89:98:e5:c1:29:0d:6a:
3b:c4:29:7e:7d:37:a3:e5:f2:23:ad:6f:aa:86:0e:
aa:07:1b:fa:bb:bd:68:0d:81:b5:f2:4b:aa:47:84:
a2:6f:35:0f:2f:f8:fb:4d:d6:3a:6b:dc:cd:9e:eb:
b1:8d:31:26:2c:8c:1e:18:b8:b4:6d:a5:59:f9:fd:
08:be:83:44:03:1e:88:13:f8:b5:11:cf:2a:e7:0d:
4e:73:9e:66:42:27:a9:db:5b:f6:f6:61:80:7d:7d:
8b:53:c5:a5:26:ed:4d:e3:10:7f:15:f2:79:f9:62:
9d:6b:01:fa:5b:df:d2:82:88:9b:f4:63:3e:dd:a8:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:97:EC:F0:AC:CC:12:57:CF:26:2C:E3:65:CD:0F:C3:1A:13:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/6c13e8b3-222b-37af-a21d-d38aba2fe0a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.160.0/24
23.249.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:d5:cc:b7:0e:c4:6a:e5:5f:97:e0:6b:cb:4f:68:9b:17:07:
be:a8:2c:8a:95:cd:e5:ac:b3:39:bb:70:83:f0:2f:ff:95:53:
dd:c4:db:75:30:5c:46:0a:b9:b2:de:4e:61:54:6b:64:47:0e:
fe:40:ea:2b:ee:73:5e:47:35:cd:58:0c:e1:10:71:2a:b5:eb:
e3:1a:fe:f1:37:7b:66:80:0f:ea:25:3a:7c:d6:6c:76:cd:40:
95:b1:9f:ef:41:54:74:09:91:d0:41:ff:b5:d2:de:cb:95:da:
bb:8b:e4:19:38:dd:e5:b6:04:40:31:14:7a:9e:54:77:99:7c:
dd:dd:5e:7e:08:72:20:6b:be:41:37:13:9d:b1:8b:f3:1b:9c:
b2:62:28:2a:91:90:3a:f2:89:a1:c2:73:c3:25:0b:de:59:43:
ee:3d:1a:ef:95:be:61:e6:b9:9f:05:f6:33:da:da:e7:e2:76:
2d:8b:ed:91:6f:cb:01:be:0b:b9:20:88:66:c1:56:6e:8a:a8:
b6:d3:e2:b2:ff:13:d1:dc:39:d7:cf:63:7b:fc:50:2d:3e:20:
63:3e:d9:a5:ae:9a:bf:9b:69:f1:df:0c:11:7e:3f:c4:b2:d0:
81:db:72:d4:22:55:86:f0:87:ff:45:ab:ee:ef:70:b0:fc:6f:
9a:5c:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:42:23 2024 by rpki-client on console-ams.rpki-client.org