Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/afc7b5e6-cec7-3d26-83d8-b58eda4c3ec9.roa
File: afc7b5e6-cec7-3d26-83d8-b58eda4c3ec9.roa (raw, json)
Hash identifier: m5Vp9S4vq4/U6dhajWLzEuAa/yqDg+6McO8xrgp1eS4=
Subject key identifier: 45:AF:46:2E:69:EE:97:FE:B5:10:9D:D2:9F:25:02:EA:E6:DC:45:79
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F432858441C53394F3FA568492CC58600
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/afc7b5e6-cec7-3d26-83d8-b58eda4c3ec9.roa
Signing time: Tue 05 Dec 2023 04:29:27 +0000
ROA not before: Tue 05 Dec 2023 04:29:27 +0000
ROA not after: Mon 04 Mar 2024 04:29:27 +0000
asID: 203888
IP address blocks: 23.167.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 02:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1c:53:39:4f:3f:a5:68:49:2c:c5:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Dec 5 04:29:27 2023 GMT
Not After : Mar 4 04:29:27 2024 GMT
Subject: CN=32d1ec9e-81cd-40cb-9b7b-0fdf97f0c5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:c4:72:df:ec:40:a5:13:f5:43:bd:c4:56:
8a:d0:de:d2:2b:14:5f:2f:de:66:ca:a2:f9:ce:95:
4f:d3:6b:01:0e:23:e0:07:a5:39:e2:f6:e8:5d:ee:
98:d0:1e:c4:9f:47:6e:d0:4c:63:bd:6d:d1:13:91:
16:d6:04:38:b9:28:b7:4d:04:98:d1:88:10:a2:a2:
97:50:c4:72:60:77:a9:81:ad:fa:6e:9b:fc:cf:1b:
35:d2:b0:fa:71:52:9a:1c:f6:a7:6a:c8:81:08:e9:
33:a6:d4:eb:fd:25:ae:c8:1f:95:b1:db:25:65:04:
7f:8e:86:34:25:9b:cd:31:7b:3d:3a:62:a2:db:ab:
fd:34:98:13:6a:4a:01:cc:75:6d:23:f3:74:a1:3b:
88:01:38:81:60:7b:d7:1c:be:ed:19:d7:cc:f5:ce:
50:78:ab:f2:3b:d2:1a:0d:28:5c:6b:bf:c6:2c:87:
36:ed:80:9c:4a:23:73:99:37:72:5a:2c:75:07:e3:
dd:77:03:50:f4:18:4f:cf:91:de:00:99:50:a0:f9:
e1:bf:04:b5:d9:34:f0:68:9e:f1:9a:aa:c1:e9:84:
cc:2b:e5:84:21:96:80:2b:a1:95:a6:86:8e:fb:45:
89:e9:44:c5:57:bd:d5:b9:e4:92:e7:14:02:e5:d6:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:46:2E:69:EE:97:FE:B5:10:9D:D2:9F:25:02:EA:E6:DC:45:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/afc7b5e6-cec7-3d26-83d8-b58eda4c3ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:66:05:72:15:1f:64:00:90:58:2c:53:0d:86:48:b5:53:ff:
6b:2b:79:c7:9b:a4:5d:58:ba:e3:54:a8:9a:e8:ff:1e:d8:6a:
7d:fb:57:09:16:1c:c3:71:7d:7b:17:79:0e:a4:3d:d1:6f:d5:
82:0e:7f:50:df:ee:20:90:9f:22:4b:ab:7b:50:0a:03:d7:07:
45:7a:a9:d4:7d:0a:56:bd:2b:ea:21:3a:3e:fd:4e:3f:47:e1:
ac:0a:da:26:67:3f:0f:52:d2:bd:10:57:13:3d:d9:16:26:6e:
e0:11:aa:1f:a6:f3:03:6a:54:72:30:e0:99:bb:d7:f6:0e:2c:
fa:4d:e8:e7:52:cb:87:69:f7:73:ac:bf:fd:b3:ba:a6:b7:eb:
c8:f3:c1:16:ce:82:69:dc:2a:00:98:2f:78:c5:27:f1:80:e1:
db:d5:e7:46:10:28:a8:3d:06:6b:b7:4e:b8:69:11:c0:2e:77:
4e:5e:bd:4d:2f:14:6e:76:80:6e:4e:3b:da:30:36:b0:32:71:
04:50:88:fa:ce:e3:76:d4:99:5d:64:7b:25:e6:ee:95:f0:2e:
5f:11:6c:ea:09:c2:37:d4:c0:4c:5a:3e:4c:0b:db:68:28:21:
db:af:91:a8:d7:a7:79:9a:33:fa:0e:4c:ec:66:f1:12:c1:91:
30:21:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 06:07:10 2024 by rpki-client on console-ams.rpki-client.org