Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0384e3ab-2d10-34d2-8b78-a0b1ccb4bff8.roa
File: 0384e3ab-2d10-34d2-8b78-a0b1ccb4bff8.roa (raw, json)
Hash identifier: bG/4U+qD2NSzLheJEsaTHrNIEHmr7VEOOrOXraiR2KA=
Subject key identifier: 90:E2:DD:6E:CA:C7:04:C2:DB:58:D4:34:2D:97:88:CE:7E:FD:F0:CD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842B3C933DC61C543D222A74900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0384e3ab-2d10-34d2-8b78-a0b1ccb4bff8.roa
Signing time: Sat 29 Jul 2023 01:00:18 +0000
ROA not before: Sat 29 Jul 2023 01:00:18 +0000
ROA not after: Fri 27 Oct 2023 01:00:18 +0000
asID: 399471
IP address blocks: 166.1.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b3:c9:33:dc:61:c5:43:d2:22:a7:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 29 01:00:18 2023 GMT
Not After : Oct 27 01:00:18 2023 GMT
Subject: CN=f575d06c-8fd9-4a2b-8816-7080af20f3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:f5:63:c0:f5:1c:30:d2:a7:51:29:30:5a:
55:b7:d6:09:13:55:e6:9d:6e:78:95:32:5a:d5:52:
6c:4f:35:de:a2:8f:8f:ec:9e:6c:89:92:04:bf:56:
e7:cc:83:02:76:14:fd:15:7b:e4:7d:b6:54:be:2f:
a1:d4:28:bc:ef:56:5b:c9:fc:c0:39:4a:7a:d5:82:
39:57:11:74:d7:7c:34:e7:ba:1b:25:94:4d:b3:f8:
d3:89:a0:bd:3c:8f:c4:62:64:41:5e:8b:46:81:9b:
4f:47:0c:e4:a2:e2:63:7c:d7:3f:83:b9:f0:f4:0c:
6a:e5:c1:eb:37:3a:8e:e0:1c:ce:da:1a:01:5c:89:
f0:f4:55:0c:91:50:46:b1:87:7e:51:9d:56:77:73:
54:87:79:16:21:f9:4c:60:28:ab:e4:78:a7:1e:80:
7c:ba:aa:89:9c:51:7b:b8:9d:e4:70:1a:95:02:e6:
79:7c:0b:9c:b9:8f:8b:0c:50:47:1b:64:1a:40:81:
da:41:c9:80:e3:53:4d:b0:6b:12:67:d2:e7:93:c3:
57:a9:3a:3c:71:0c:7a:3e:51:e6:46:9f:8c:ee:9e:
04:ee:60:97:65:91:cc:be:1b:af:3a:47:51:a2:f2:
a5:9c:df:f8:90:47:e4:4e:eb:6a:7a:d6:40:a4:ce:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E2:DD:6E:CA:C7:04:C2:DB:58:D4:34:2D:97:88:CE:7E:FD:F0:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0384e3ab-2d10-34d2-8b78-a0b1ccb4bff8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:65:1c:a8:37:04:82:32:2b:16:bf:b1:74:f0:1f:9e:b9:5b:
64:02:6a:f8:5b:1b:25:d3:c7:91:8c:ac:64:88:a6:fc:94:58:
05:44:f6:69:1a:83:d7:10:03:5c:48:d8:c1:ed:7f:5d:27:9a:
99:76:29:cd:10:e5:2a:fc:c0:c9:0d:87:34:4c:dc:bb:2d:da:
30:cf:27:9c:50:7a:cc:12:93:76:94:ea:a8:32:ae:50:4a:6a:
1d:ec:a1:59:44:8c:3b:41:48:80:5d:44:04:9b:fb:73:cc:d4:
23:9b:49:a2:e0:ae:23:d0:a2:6d:8c:08:39:51:73:24:d8:09:
57:93:b6:25:dd:d5:1b:5d:7a:5c:13:71:58:94:49:c9:b0:44:
8b:91:7b:a4:9a:eb:3b:8b:d3:d5:68:36:89:22:be:7f:35:64:
e5:5d:ac:59:d9:9c:ca:99:46:22:ca:59:ff:b2:da:ad:12:67:
2f:ab:17:2f:48:82:0c:13:07:1f:a2:41:64:93:08:0c:3a:44:
61:ab:a4:d2:46:13:f1:a0:59:0d:c3:8f:93:6d:e1:6b:32:8c:
f1:38:84:70:dd:9b:66:5f:b9:cf:20:35:08:a8:e6:c7:e5:4e:
2d:f8:e3:b1:66:3d:27:9f:e7:7b:71:df:e0:38:1f:15:f2:b7:
b6:58:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 16:44:24 2023 by rpki-client on console-fra.rpki-client.org