Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/0bf4908d-ee79-3439-a069-adcb57e16170.roa
File: 0bf4908d-ee79-3439-a069-adcb57e16170.roa (raw, json)
Hash identifier: UMmYwPOs1AkhSa1HybqZnCglpftxpfTdcpfre5jNZTQ=
Subject key identifier: 62:6D:6A:1D:4E:65:0A:D5:75:1B:DB:1D:1A:F4:CF:E4:93:91:F5:2A
Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial: 010D0C9F43285842F5645AFE5F2588CE3F9BD240
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/0bf4908d-ee79-3439-a069-adcb57e16170.roa
Signing time: Mon 21 Aug 2023 13:00:24 +0000
ROA not before: Mon 21 Aug 2023 13:00:24 +0000
ROA not after: Sun 19 Nov 2023 14:00:24 +0000
asID: 142632
IP address blocks: 23.247.170.0/23 maxlen: 23
23.247.168.0/24 maxlen: 24
23.247.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:f5:64:5a:fe:5f:25:88:ce:3f:9b:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Validity
Not Before: Aug 21 13:00:24 2023 GMT
Not After : Nov 19 14:00:24 2023 GMT
Subject: CN=f7f323b0-de70-46bb-ae1a-c14c91b2a8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:35:e0:70:42:5c:13:63:a7:80:ed:d3:a8:
e5:10:01:13:fd:cd:a1:75:f8:b3:44:c3:ef:fa:31:
55:14:bc:6c:59:a7:10:32:d4:ee:6c:1a:08:6a:71:
cc:b9:69:a7:b6:89:1e:8b:39:1f:6b:a4:73:78:ec:
fb:73:44:2d:23:d7:7e:f0:b3:98:f1:73:85:5c:3b:
45:c2:96:89:f9:a5:e1:01:33:2b:ac:6d:5a:83:0c:
93:16:ac:0c:02:da:42:c9:1e:65:f8:64:eb:16:fc:
8e:f3:e0:24:5f:2b:ec:e3:20:6f:d6:4a:c8:c2:c3:
b1:96:eb:d9:c9:7a:66:4d:02:d3:1f:5f:94:99:64:
8e:31:95:ed:75:e5:52:1b:57:9d:32:b1:88:39:21:
9a:97:6e:11:01:c4:ff:76:38:5f:5b:ca:f2:6f:71:
27:87:0a:c6:8f:02:eb:f0:22:c7:3a:16:bf:27:48:
83:47:ab:83:cf:41:0c:2f:60:30:e3:0b:75:a8:ef:
d8:fc:e3:cd:61:1e:40:a0:99:c3:d9:97:9e:78:1e:
e9:cb:ce:b9:f3:71:99:69:3c:2f:8a:95:d7:35:f6:
6e:30:11:26:43:b8:2a:78:82:d0:22:a5:32:1e:1c:
40:94:b7:31:fd:5e:c1:a2:4f:c0:ee:8e:a2:5e:3b:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6D:6A:1D:4E:65:0A:D5:75:1B:DB:1D:1A:F4:CF:E4:93:91:F5:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/0bf4908d-ee79-3439-a069-adcb57e16170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
X509v3 Authority Key Identifier:
keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:71:9e:dc:6b:36:b7:d9:95:97:8b:20:aa:c8:4e:3c:ea:26:
3d:ba:ec:51:e4:5d:39:ef:6b:25:83:75:89:2b:14:4d:64:48:
30:0c:75:85:3f:cd:ee:ec:78:7c:a8:f9:31:d7:71:24:31:84:
4d:31:63:9e:39:f8:40:e9:9c:6e:53:a7:1f:a4:32:b2:54:9e:
8b:d9:85:fd:0b:98:9f:b4:bc:03:56:85:e1:5e:e1:36:17:74:
f4:2f:5d:24:e1:8d:9a:6d:97:95:4b:b4:46:da:3e:52:f5:59:
22:c2:bc:60:ae:28:64:83:f7:f3:56:28:56:c0:a9:74:a3:76:
73:25:62:e6:46:45:07:dc:dd:cf:1b:67:21:fa:d1:76:b9:53:
e2:4c:6b:d4:3a:f0:ac:5b:a7:d5:6f:57:d1:c3:ab:38:57:d8:
0b:d8:d2:83:33:b2:c1:94:a3:2f:2a:77:b1:8e:0b:3a:05:b2:
98:82:e5:6d:74:20:31:0f:03:44:36:1b:7b:22:c3:65:c3:02:
93:13:41:95:05:9e:92:87:d3:1f:54:73:cc:24:76:63:f0:da:
bf:d1:92:7a:99:1b:9f:35:0a:7e:03:da:35:73:e0:29:b9:df:
ca:67:c5:cf:7b:6a:69:02:a6:fd:d9:ac:09:7b:68:c0:1b:58:
bf:59:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 16:18:37 2023 by rpki-client on console-fra.rpki-client.org