Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/027ae0a4-6f1e-352b-b62d-d3df2c71bfa6.roa
File: 027ae0a4-6f1e-352b-b62d-d3df2c71bfa6.roa (raw, json)
Hash identifier: d5FxK3aDmsvA+/mWVSqp0BxuXviwtPyXxlS6fJGPU6E=
Subject key identifier: 80:6E:76:E2:E3:5B:44:FC:46:EB:B1:D0:C7:6F:B2:AE:B3:44:F9:2F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858437A20A62D16678924B9908F20
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/027ae0a4-6f1e-352b-b62d-d3df2c71bfa6.roa
Signing time: Sun 08 Oct 2023 02:06:36 +0000
ROA not before: Sun 08 Oct 2023 02:06:36 +0000
ROA not after: Sat 06 Jan 2024 03:06:36 +0000
asID: 11798
IP address blocks: 166.1.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:7a:20:a6:2d:16:67:89:24:b9:90:8f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 8 02:06:36 2023 GMT
Not After : Jan 6 03:06:36 2024 GMT
Subject: CN=1ff80e29-8e0c-45a6-88b5-16804908b5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:bb:2f:8f:c9:e7:23:d4:f5:a7:36:cc:91:
64:2e:96:29:71:bf:37:f9:d7:74:2d:51:15:d3:3c:
fa:76:b6:61:87:bd:f2:77:a2:3c:5e:37:ea:f0:e8:
8d:bb:38:7d:b1:a7:0a:1d:79:07:72:ee:12:09:dc:
43:a5:77:ee:8e:f1:66:ed:f5:32:84:13:86:88:74:
4b:2a:66:ed:17:17:9c:e4:d5:6b:52:b9:e2:84:1e:
07:e4:e7:7b:0b:14:3b:44:cf:1c:4c:5c:89:63:ab:
69:ea:f9:01:01:7e:ae:8d:37:1f:75:83:e6:7c:e3:
11:43:57:3d:1c:9a:06:05:53:aa:f0:dd:01:03:af:
7a:97:ac:7a:5c:35:70:6e:c2:d5:47:01:8c:3e:c2:
57:a0:e4:48:62:f0:80:c2:a7:1d:81:02:b2:91:0c:
90:1c:3d:39:89:a8:32:8a:b3:13:05:34:eb:1d:41:
8f:d7:d6:ba:59:b3:92:e4:82:8e:36:90:ec:a5:67:
97:41:91:7a:81:a5:2e:01:18:c9:6b:b6:6b:74:d7:
d9:df:45:19:60:80:e3:0e:96:24:9d:30:06:c0:fd:
56:ec:92:20:41:1e:5e:a4:3b:eb:9a:0c:11:44:16:
4c:41:e7:b2:a8:db:1e:88:5d:7e:1c:61:85:4f:77:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6E:76:E2:E3:5B:44:FC:46:EB:B1:D0:C7:6F:B2:AE:B3:44:F9:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/027ae0a4-6f1e-352b-b62d-d3df2c71bfa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:ba:34:a9:37:6e:c7:a5:d9:05:af:24:7d:e7:a9:d0:21:4c:
b6:82:05:0e:69:65:59:06:d0:9f:43:cc:43:16:26:4b:25:96:
9b:e8:aa:97:d5:92:ac:71:2a:c6:91:43:55:91:94:79:8b:7f:
cf:2a:6d:80:b4:a5:f4:fe:13:76:ad:04:c6:04:14:0d:1c:0e:
0c:ce:39:36:8d:d1:9a:29:52:72:06:c5:60:1b:2d:00:91:5f:
a5:14:25:b5:6f:9f:92:84:4e:4e:56:6e:77:42:ac:fb:82:be:
7a:58:fe:2b:d6:2f:73:ca:37:a0:af:40:45:ac:23:c6:d6:8a:
4f:62:d9:44:70:0e:69:dd:11:60:5d:15:8c:f3:0b:1f:4e:50:
ab:48:b8:54:97:97:bd:9c:6b:ff:92:6d:17:3f:99:57:1b:28:
85:61:ad:31:5e:9a:30:ea:f9:ad:52:7f:6c:7b:8e:70:6b:7d:
15:1b:a3:9c:47:85:f8:fa:6c:58:84:a3:73:fb:8d:b9:84:6b:
aa:1a:17:da:29:71:4c:7a:12:db:18:af:de:76:4b:7b:df:24:
6e:7b:34:db:b8:62:25:0c:ab:26:ee:29:06:40:2f:55:e5:36:
ca:b8:93:ff:7a:48:fc:5e:29:0e:e4:d9:f0:41:7b:05:22:3d:
00:be:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 16:56:59 2023 by rpki-client on console-ams.rpki-client.org