Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/aefb8355-26e8-3af7-a774-e3ae8d699aa7.roa
File: aefb8355-26e8-3af7-a774-e3ae8d699aa7.roa (raw, json)
Hash identifier: 5JYRsWSGhUV4/jMy0l4Wln0amFL/weF5dQBl3dykD4w=
Subject key identifier: 63:E8:0F:58:7F:C0:B6:63:87:52:6E:B7:BF:D5:CA:3E:5E:68:7E:C7
Certificate issuer: /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
Certificate serial: 010D0C9F43285846C0EA75C56E3A9DD8D928D420
Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/aefb8355-26e8-3af7-a774-e3ae8d699aa7.roa
Signing time: Sat 03 Aug 2024 13:00:37 +0000
ROA not before: Sat 03 Aug 2024 13:00:37 +0000
ROA not after: Fri 01 Nov 2024 13:00:37 +0000
asID: 54657
IP address blocks: 23.156.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Oct 2024 12:34:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c0:ea:75:c5:6e:3a:9d:d8:d9:28:d4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
Validity
Not Before: Aug 3 13:00:37 2024 GMT
Not After : Nov 1 13:00:37 2024 GMT
Subject: CN=35ca9892-e5c0-42f2-98c1-03dbd6f4a7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:eb:46:fb:a0:51:84:44:34:01:6e:e8:e4:
d4:33:22:41:be:2f:b9:ee:78:25:0f:b4:37:26:1c:
53:33:8c:0b:f4:a1:85:29:30:49:d6:31:92:12:e6:
e1:18:d8:2b:38:14:b8:33:51:38:33:fe:ae:32:77:
9b:e6:87:e6:6d:a3:52:96:a3:cc:12:0c:d0:9a:6e:
e8:69:3f:76:e7:98:ea:52:86:82:05:b8:15:a2:3e:
0d:41:e1:53:81:11:76:a3:f5:7f:b6:91:03:6d:d2:
d2:33:0d:5d:ba:8a:0f:a8:77:bc:be:6a:89:6d:13:
52:91:34:a6:60:b3:b9:2a:1f:80:4a:28:2a:b5:8b:
36:c2:25:22:18:77:c6:30:77:f9:bc:12:5c:b0:b8:
de:28:c7:5b:3b:07:ed:99:20:80:bc:ec:92:2e:e4:
5a:9a:5e:09:10:11:07:b2:b3:42:91:5b:cf:f9:6e:
81:48:8d:d6:19:bc:5f:d8:8c:fa:c6:08:8d:4e:4a:
c2:3b:6c:03:00:b1:bc:a7:c6:7f:ea:96:50:e9:d8:
ba:a2:f1:5b:51:e8:64:e1:0a:03:75:7c:76:a3:8f:
50:5d:c5:49:de:0a:f0:a6:1b:cf:bd:3a:b6:12:34:
87:8b:ba:9d:1d:59:ed:97:a8:06:dd:82:24:b9:c6:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:0F:58:7F:C0:B6:63:87:52:6E:B7:BF:D5:CA:3E:5E:68:7E:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/aefb8355-26e8-3af7-a774-e3ae8d699aa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl
X509v3 Authority Key Identifier:
keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:99:33:f7:cc:30:cc:8a:03:cb:a7:c7:ab:62:00:ec:63:02:
96:c5:48:fb:2c:58:33:53:d7:cf:b5:2b:b2:3a:7e:2e:b5:4a:
b2:e6:bc:83:fc:8e:2f:f1:ac:6e:81:a2:56:09:b3:0a:9a:71:
7a:9d:16:f3:7a:56:20:84:d1:a9:7a:1a:16:9e:29:e6:07:82:
c2:91:bc:35:7f:7e:24:9e:55:6d:86:f2:91:31:fc:e5:2b:b6:
b6:6a:fa:d1:e2:c7:f2:d1:0d:6a:34:d1:4e:7e:d0:18:3b:4a:
b6:1c:93:f3:f8:7e:47:2a:b0:88:e2:71:b5:b1:5b:51:09:09:
14:a5:80:8d:c0:65:91:d9:21:01:ec:bc:f0:12:11:b0:66:c3:
50:49:9c:7e:b4:ba:3a:4b:61:17:dd:47:1b:23:e3:a9:92:a3:
20:1e:58:bb:2b:47:d5:a7:54:c5:91:25:fa:4d:86:6c:2d:b0:
75:f7:42:44:c4:fa:77:08:0d:de:31:f7:71:8b:f4:13:c2:03:
21:e7:5f:ed:92:da:ca:cf:7d:da:b3:5c:f0:1b:6d:a5:2e:7d:
36:d0:4b:18:18:76:66:ff:61:ec:d1:d0:aa:ef:0a:f7:06:d7:
98:9d:85:99:71:96:65:ba:04:56:f8:9d:26:88:f6:b9:44:b8:
5c:cf:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:26 2024 by rpki-client on console-fra.rpki-client.org