Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2924f45f-ec3b-3901-950e-5c5029205cac.roa
File: 2924f45f-ec3b-3901-950e-5c5029205cac.roa (raw, json)
Hash identifier: TGvFcneAByUAosfi4s82+offC1cdMIwbwck/BNhOSNM=
Subject key identifier: 5D:77:1A:1B:3A:5B:2B:A2:61:03:BB:09:0D:69:47:35:A1:4F:21:B2
Certificate issuer: /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial: 010D0C9F43285843D4D8E53C18804CE28BF30980
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2924f45f-ec3b-3901-950e-5c5029205cac.roa
Signing time: Thu 09 Nov 2023 14:00:20 +0000
ROA not before: Thu 09 Nov 2023 14:00:20 +0000
ROA not after: Wed 07 Feb 2024 14:00:20 +0000
asID: 25759
IP address blocks: 23.160.200.0/24 maxlen: 24
2602:fa3d::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d4:d8:e5:3c:18:80:4c:e2:8b:f3:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Validity
Not Before: Nov 9 14:00:20 2023 GMT
Not After : Feb 7 14:00:20 2024 GMT
Subject: CN=56dff8da-a90d-4a79-a81e-ee2c0b2041b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:6f:4e:97:ab:4a:95:98:b1:39:0e:dc:ac:
91:85:ef:50:f2:3a:12:88:ff:33:67:ff:95:65:5b:
57:81:e2:ba:40:23:c2:54:ef:c9:af:38:05:73:ee:
86:e3:21:4a:bf:03:c7:27:c4:62:50:d2:41:19:fa:
01:69:d5:17:52:dd:97:5c:0d:86:c2:a6:33:ba:06:
2e:96:a9:5a:c4:a2:fc:c6:3c:a7:34:70:57:75:0a:
20:ff:8e:bd:68:84:4c:87:c1:8c:74:33:71:35:be:
e0:58:88:b7:82:c8:d9:04:c4:2a:4c:0f:86:3a:f2:
08:0a:80:18:66:80:f3:dc:67:f0:12:bb:e3:cf:bc:
a5:f2:d1:d7:2b:2b:c0:4f:f0:c8:d6:05:7d:54:83:
75:40:5f:86:e0:df:e4:eb:33:7a:f1:2e:b3:23:31:
66:e2:30:89:5a:e8:81:eb:68:76:64:3f:29:e2:b7:
f2:39:8b:ba:25:9f:8c:f7:38:d8:74:41:ff:f4:0a:
f5:49:a4:a0:be:fe:4a:a4:53:19:99:c2:92:51:9d:
e2:48:a7:48:38:19:2e:28:3b:2c:4f:ba:7c:bc:cf:
f9:89:98:06:47:20:81:be:a1:87:99:f5:d2:ea:be:
1a:3f:d5:24:58:75:02:9d:51:85:91:14:25:05:97:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:1A:1B:3A:5B:2B:A2:61:03:BB:09:0D:69:47:35:A1:4F:21:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/2924f45f-ec3b-3901-950e-5c5029205cac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
X509v3 Authority Key Identifier:
keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.200.0/24
IPv6:
2602:fa3d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:d8:50:06:22:43:3b:6a:ed:f0:df:66:8c:a9:78:20:a3:c0:
6c:50:6e:c4:2c:8a:a3:0c:92:ea:59:e1:5d:53:79:d1:0f:4d:
b1:a3:65:94:01:ba:95:83:6c:8d:52:f6:50:8f:99:5a:f2:97:
6c:06:8c:57:3d:0e:71:1b:79:cf:e2:27:74:11:0c:88:62:a0:
31:71:ae:d0:46:e5:b2:6e:c6:21:8a:01:cd:d2:0e:86:f8:e3:
63:d8:6a:4f:d0:4c:7e:08:39:75:15:97:53:b0:39:34:3c:d2:
a8:2a:7a:cc:6f:49:55:3c:85:eb:35:32:81:be:f8:87:8f:83:
a1:74:f6:16:8f:39:90:90:a4:eb:6d:bc:db:e6:0b:17:09:57:
9c:bf:8c:87:76:81:3d:b2:a6:92:54:75:07:86:eb:8d:be:ab:
10:03:d2:7d:cf:4b:16:fb:4d:ae:43:95:9a:5e:3a:10:e4:28:
45:ad:26:5d:14:76:2d:79:94:69:69:21:31:97:67:f5:e2:79:
99:21:96:bc:d5:0f:08:ec:2a:0d:9d:81:89:20:0f:d2:c5:98:
34:7f:3d:73:95:5a:9a:38:13:74:41:cf:0f:97:3f:46:ad:7d:
09:47:18:4a:46:c3:72:dd:6d:74:a9:fb:74:40:1b:4c:b6:c4:
2e:c5:50:da
-----BEGIN CERTIFICATE-----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Generated at Sun Nov 26 19:17:54 2023 by rpki-client on console-fra.rpki-client.org