Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c643120-2115-303a-8f1f-2bdf3ac0d674.roa
File: 4c643120-2115-303a-8f1f-2bdf3ac0d674.roa (raw, json)
Hash identifier: bPTJMmgsnU3y1hzaTRPAXQ41PKZf124RhN5Pvp89kB0=
Subject key identifier: AA:1B:5D:1C:5B:01:7F:64:3D:04:91:99:1C:AD:39:CB:65:89:96:16
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844B2CA34C7F619A0BF0CD58680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c643120-2115-303a-8f1f-2bdf3ac0d674.roa
Signing time: Sun 28 Jan 2024 02:00:26 +0000
ROA not before: Sun 28 Jan 2024 02:00:26 +0000
ROA not after: Sat 27 Apr 2024 01:00:26 +0000
asID: 397630
IP address blocks: 23.230.21.0/24 maxlen: 24
23.230.44.0/24 maxlen: 24
50.117.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 15:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:b2:ca:34:c7:f6:19:a0:bf:0c:d5:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 28 02:00:26 2024 GMT
Not After : Apr 27 01:00:26 2024 GMT
Subject: CN=3fff1a5a-adb1-43e0-afa8-2c519d6139a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:97:a4:5e:71:d2:5b:ef:4c:8f:37:cf:2f:
b7:cc:40:c2:89:0f:fc:8a:7e:5a:71:9f:1a:49:e0:
b0:34:1d:c2:3a:ef:53:0f:2b:07:a5:d7:c1:4a:b5:
d5:21:18:8b:6c:8c:49:1f:95:b7:a1:75:ee:cc:f8:
45:07:43:94:90:37:39:c0:97:23:58:16:a8:bb:5d:
e5:8b:19:f0:cc:ea:d1:21:a5:59:4a:a8:67:64:19:
83:16:b1:3b:c2:cc:c1:9f:d5:6a:84:23:b3:dc:08:
6d:f8:f0:5a:59:58:0e:cb:c5:09:87:e4:15:33:f6:
f0:df:c4:4a:03:c9:06:77:e6:54:dd:b9:20:af:2d:
2f:5c:15:76:56:48:f7:6a:9e:39:27:c3:ac:a3:33:
b2:e3:77:4c:60:e4:69:b9:0f:a5:31:2d:19:b7:5b:
23:bb:6a:a1:05:ba:d1:59:ee:ea:b5:20:02:81:c2:
e3:5b:ba:04:76:81:7e:fc:18:f9:55:01:1b:dc:e9:
70:1b:d3:80:5b:68:87:82:51:e4:d6:fc:c1:2f:df:
c3:b1:0d:f3:5a:59:f1:fe:0b:6b:9c:d5:01:51:99:
55:f6:7d:45:b5:a2:04:d2:da:a3:e1:ec:d3:af:0e:
09:36:e2:c8:3e:86:46:73:7d:61:64:1e:93:bd:2b:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:5D:1C:5B:01:7F:64:3D:04:91:99:1C:AD:39:CB:65:89:96:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c643120-2115-303a-8f1f-2bdf3ac0d674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.21.0/24
23.230.44.0/24
50.117.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:6a:1e:2b:d7:f0:e5:44:29:e7:f6:a1:8a:5a:34:50:77:72:
d3:d7:fa:30:d9:f5:1b:f0:6a:5e:05:83:18:d7:a2:9e:fe:40:
09:90:00:08:2f:96:d2:fb:d2:d0:af:74:ff:88:db:cd:f9:6e:
a9:73:a3:c7:16:0e:0f:5f:b5:82:07:22:0b:eb:5e:ea:c5:60:
80:5e:85:49:4d:c0:ad:b5:51:52:0c:3a:40:f4:67:b8:e2:46:
d9:42:19:bc:32:02:0a:5e:f8:b9:f1:12:2c:17:81:48:90:56:
09:f2:27:9b:fb:c5:a3:fc:e3:10:2e:8b:7c:bb:1b:06:c4:6c:
e6:c7:20:ed:ca:72:6d:fb:81:46:5f:24:dc:67:09:08:f1:83:
5c:d6:45:0c:5a:a0:b1:99:62:f1:d6:42:9e:09:55:5a:8c:d9:
3e:3a:ce:0e:02:25:19:09:c3:df:bb:67:d4:ab:17:ae:bb:54:
82:aa:55:82:6a:cc:9e:3e:6a:cb:77:5d:80:08:85:da:80:18:
13:d3:70:45:e0:cc:8f:14:08:ed:d4:a0:ee:af:fc:b3:ea:7d:
58:b4:b6:17:6a:f3:fd:58:3c:a3:2d:cc:1f:91:19:ca:df:c2:
dd:c3:34:c8:91:19:c9:26:b3:c1:f9:91:42:82:cf:9b:c2:31:
b4:5b:23:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:13:09 2024 by rpki-client on console-ams.rpki-client.org