Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0d1c3c7e-acb8-3809-a1fa-b71db1075e8d.roa
File: 0d1c3c7e-acb8-3809-a1fa-b71db1075e8d.roa (raw, json)
Hash identifier: U2HZLVCqWvbC5/auGGEeU68t/wGRTHopFbaVVgPdlFs=
Subject key identifier: 73:89:C1:DB:8F:33:5D:05:C8:50:E1:DB:93:42:3E:B3:53:43:8D:67
Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial: 010D0C9F4328584522759B63B2478465CA1EE100
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0d1c3c7e-acb8-3809-a1fa-b71db1075e8d.roa
Signing time: Fri 08 Mar 2024 02:00:26 +0000
ROA not before: Fri 08 Mar 2024 02:00:26 +0000
ROA not after: Thu 06 Jun 2024 01:00:26 +0000
asID: 209242
IP address blocks: 23.141.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 08:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:22:75:9b:63:b2:47:84:65:ca:1e:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Validity
Not Before: Mar 8 02:00:26 2024 GMT
Not After : Jun 6 01:00:26 2024 GMT
Subject: CN=66f8794f-c331-43fd-8c4c-9a5dd37e7be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:41:2b:17:68:5c:10:64:9b:c3:20:02:2e:
10:e4:de:a9:e0:88:49:b7:44:1d:b0:6c:be:3b:ae:
49:1d:21:e8:50:96:18:f4:43:c6:ef:c7:91:50:2b:
a3:cc:46:f2:b5:66:2f:9d:0b:16:a5:6e:49:b4:b8:
69:70:ed:b3:f8:7a:76:47:c9:3b:6d:ca:a9:7a:43:
ae:d3:a0:35:99:ed:95:ee:db:c2:9f:ef:92:d3:11:
b5:3b:c3:51:b8:6c:9d:65:32:08:ea:08:5c:f2:95:
a4:aa:60:24:a5:2b:f3:57:f4:5f:f3:7f:0d:05:79:
9a:c5:fd:c6:b4:b2:63:20:68:ff:e4:0b:4c:dd:61:
80:6b:22:70:a9:9f:cf:0f:38:9b:2a:36:4f:b8:d7:
b8:19:69:25:3c:bd:6d:fe:0d:9a:62:5d:6d:48:6e:
11:e9:86:9e:37:9f:dc:83:ba:12:af:52:82:28:3c:
47:49:86:86:6d:28:18:54:d9:eb:65:45:81:88:b1:
33:01:d4:61:53:60:84:89:37:d3:4d:94:33:96:e4:
b6:2d:40:88:dd:e6:11:be:62:8d:c5:43:48:cf:f4:
3f:16:29:7a:9f:35:15:1a:fa:13:ae:ce:a6:a8:36:
db:d0:55:6a:d7:e4:57:99:bc:72:de:45:f3:46:6f:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:89:C1:DB:8F:33:5D:05:C8:50:E1:DB:93:42:3E:B3:53:43:8D:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0d1c3c7e-acb8-3809-a1fa-b71db1075e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
X509v3 Authority Key Identifier:
keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:b8:3a:2e:3d:e1:8d:ab:dc:dd:b1:94:3c:88:95:01:0e:9f:
d9:02:a5:1a:e2:ad:a6:fc:81:46:87:71:7c:c6:8f:6b:96:af:
f1:5f:59:7c:2c:c0:d7:fc:90:cd:7b:10:70:60:52:01:65:99:
80:83:fc:3b:b3:5c:c4:81:c4:36:0c:31:66:e5:bb:39:7f:60:
82:bc:4e:98:97:a3:89:4c:da:2d:7f:2b:a8:f2:94:1f:7c:73:
ac:7f:b1:dd:6e:7a:fa:d7:58:52:61:ea:66:42:52:87:73:02:
de:d0:15:12:2e:e7:11:95:d3:12:de:dc:04:46:f0:19:7a:64:
2d:03:7f:7f:d6:e5:a4:e7:a1:75:49:2a:b8:ec:69:7d:a1:e3:
bd:74:ee:32:93:91:1d:6a:c1:26:ab:dd:4c:73:58:d3:84:6b:
c4:45:a3:16:82:c1:25:94:a3:d5:26:38:b7:52:80:86:4a:f7:
1d:2d:37:1c:a1:f5:ec:2e:29:77:a7:8a:ff:2d:37:84:71:81:
c9:84:34:4a:32:7d:30:75:a8:06:3a:a2:ff:c4:87:4b:c7:9f:
5b:ee:90:97:4d:1c:81:c9:66:80:85:42:94:23:70:46:7d:ea:
a9:5a:6c:3e:de:91:43:c9:2e:9e:6a:b5:10:5f:0a:f8:27:4f:
ec:eb:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:49:30 2024 by rpki-client on console-fra.rpki-client.org