Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/afa3f1cc-4bae-3c21-a460-12dbbff03c75.roa
File: afa3f1cc-4bae-3c21-a460-12dbbff03c75.roa (raw, json)
Hash identifier: 650hH/+QM2X5upi8ayZgCScGvsQvIsk3rerQP5kpArk=
Subject key identifier: 5A:70:2C:EE:E4:26:C3:D2:32:7C:3D:C0:46:0B:65:E2:2C:9C:4A:24
Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial: 010D0C9F43285843010DD07306EA4410A4F40900
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/afa3f1cc-4bae-3c21-a460-12dbbff03c75.roa
Signing time: Fri 25 Aug 2023 17:15:51 +0000
ROA not before: Fri 25 Aug 2023 17:15:51 +0000
ROA not after: Thu 23 Nov 2023 18:15:51 +0000
asID: 142632
IP address blocks: 23.247.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:01:0d:d0:73:06:ea:44:10:a4:f4:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Validity
Not Before: Aug 25 17:15:51 2023 GMT
Not After : Nov 23 18:15:51 2023 GMT
Subject: CN=006ffda3-f58d-45a2-ae50-a5bb5430c7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:5f:9d:4e:e6:1b:54:80:68:d4:81:bc:60:
cb:43:c2:e5:94:68:f2:22:c9:19:90:00:00:96:ec:
70:18:09:e7:94:9d:74:b2:f7:3c:fc:38:62:30:da:
f8:fa:ec:4e:49:52:c2:31:93:9e:74:99:0f:d2:c4:
07:43:8d:62:fb:f2:f8:3f:4d:25:3f:ad:2d:65:1e:
19:7d:93:43:46:e3:9e:f5:69:a5:07:1e:35:97:4c:
ee:33:58:d0:1f:46:e4:3c:1c:82:82:ff:22:67:42:
f3:e3:7d:26:35:74:70:e3:da:77:ee:2b:76:57:e1:
7b:5b:80:3d:14:41:e7:e7:b0:8e:2b:9f:0f:89:97:
76:4a:5d:f6:40:47:85:6f:fb:30:d2:0c:bd:df:ae:
1f:8e:c7:d7:a6:98:10:b6:08:52:b1:93:a0:3c:43:
8c:02:10:a5:1e:b5:0c:3b:70:3b:5a:94:a7:5e:bb:
07:a5:51:81:79:a9:41:f8:f9:fc:e7:95:2d:da:1b:
b6:aa:da:fd:c2:54:df:65:be:39:60:6d:1c:4f:52:
0b:a3:e3:7b:8c:b6:27:f0:77:6b:2f:c2:74:8e:8e:
fe:e9:a7:7f:bf:d5:cc:88:08:2b:e0:01:a1:ce:7d:
8f:ce:09:b4:31:70:f0:c5:c9:44:cf:85:6e:a7:8b:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:70:2C:EE:E4:26:C3:D2:32:7C:3D:C0:46:0B:65:E2:2C:9C:4A:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/afa3f1cc-4bae-3c21-a460-12dbbff03c75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
X509v3 Authority Key Identifier:
keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:81:2f:6b:cd:3d:b0:3b:0b:56:8b:46:65:cc:05:d9:d9:5f:
15:8d:0a:4c:9e:e1:62:4a:80:4c:5d:6e:1e:d1:e8:cb:de:41:
7e:3d:22:3e:4d:5c:47:a9:59:45:b2:e4:02:49:5c:88:11:d7:
37:e1:0e:b1:cf:60:fd:0c:00:e8:97:41:55:d0:bc:99:09:78:
a4:eb:4d:87:6d:cd:6f:17:89:18:9f:cb:33:d6:fe:97:19:c5:
dc:39:2e:58:10:7a:f4:6a:37:df:da:dd:f2:e7:3d:54:e8:ce:
b1:1c:73:db:1e:ea:e5:60:2c:3a:40:59:6d:e9:6a:3a:a4:18:
78:c8:05:32:4b:c6:8c:dd:b0:e0:51:a8:fd:28:c5:86:64:4e:
77:5a:51:04:02:9c:de:ad:11:8b:a5:dc:75:92:a9:15:e7:3e:
02:21:1e:bc:f3:e3:14:ff:0a:5e:e1:d6:1d:cb:98:a1:02:c1:
b9:e0:01:75:ff:5f:22:6c:d8:00:90:33:bc:48:62:af:4b:4a:
2e:e8:ab:1a:e5:97:a3:43:b5:b0:c7:93:cd:01:9e:0d:06:ef:
f1:b4:83:66:da:2f:e2:79:e7:53:dc:35:f2:d8:7e:b1:97:da:
d4:eb:9c:3e:6e:9b:fd:17:61:fc:01:4f:cf:12:10:5c:ad:1d:
1a:ca:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 19:14:13 2023 by rpki-client on console-fra.rpki-client.org