Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0acce1a7-4cab-316a-a217-7e5ea22091e4.roa
File: 0acce1a7-4cab-316a-a217-7e5ea22091e4.roa (raw, json)
Hash identifier: h+n1yeyhmKWvsifn4xdx97PhNIYuZp+NkfzjIKehjUc=
Subject key identifier: B0:8B:D5:7A:35:FC:4D:09:A9:D2:53:A7:C6:69:78:FB:36:E6:23:59
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843693FB87707D2712062A67FF0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0acce1a7-4cab-316a-a217-7e5ea22091e4.roa
Signing time: Mon 02 Oct 2023 01:00:23 +0000
ROA not before: Mon 02 Oct 2023 01:00:23 +0000
ROA not after: Sun 31 Dec 2023 02:00:23 +0000
asID: 211432
IP address blocks: 108.165.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:69:3f:b8:77:07:d2:71:20:62:a6:7f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 2 01:00:23 2023 GMT
Not After : Dec 31 02:00:23 2023 GMT
Subject: CN=2086b199-f238-46eb-8767-6b83c65399e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:bb:1a:f7:37:47:f6:67:bb:2d:9d:ba:59:
d9:40:ec:36:e1:1f:c0:4b:1a:59:d1:74:d2:4a:08:
2a:4d:81:a6:cd:45:92:ce:3e:f8:d3:2a:2c:bf:bd:
2d:4b:de:57:37:14:19:9f:8e:8c:e3:2d:16:38:2e:
f4:f1:03:fb:fe:75:48:c2:55:09:3b:58:8c:73:0a:
11:70:2b:94:80:d3:c0:b2:47:be:e1:50:80:a3:4a:
c5:93:15:99:81:65:7e:20:12:37:eb:5f:0e:83:4a:
4e:84:65:f8:01:13:9b:b4:53:c1:ac:eb:f1:21:e3:
22:a0:8f:44:64:fd:f0:e1:9a:04:52:fd:fc:2e:22:
68:16:90:79:04:a0:24:89:d5:51:68:21:d2:b0:b4:
89:68:a3:17:5c:99:05:9c:e2:f2:f6:17:bd:43:de:
e4:ce:1c:67:4d:51:ab:4c:25:ef:fb:60:71:63:ae:
df:8c:1f:f2:61:ed:9a:67:e5:cd:e1:9e:f3:61:20:
f6:a9:68:ae:40:f6:72:6d:12:4b:3b:0f:3b:01:e8:
e3:3f:0f:a3:75:0e:d5:6c:d2:27:7d:bc:b7:82:ad:
f4:71:f1:13:20:03:3c:dd:fc:db:cb:dc:94:66:c2:
71:21:a3:0a:a4:09:98:84:69:46:22:72:47:db:47:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:D5:7A:35:FC:4D:09:A9:D2:53:A7:C6:69:78:FB:36:E6:23:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0acce1a7-4cab-316a-a217-7e5ea22091e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3f:94:2c:3e:4c:14:2c:cc:a4:ed:f0:be:1a:11:e1:76:9c:
b7:30:97:4d:f3:9a:85:81:cf:ed:ec:7a:76:e4:79:1e:f1:fc:
54:51:29:1c:d6:c4:a5:a5:55:12:03:2c:08:29:37:99:91:73:
77:7c:82:06:54:99:4b:bf:d5:f3:e2:7f:39:e5:aa:bc:72:ec:
6a:f8:26:fc:b9:2c:dd:da:d7:54:9f:49:39:f3:2f:db:8b:58:
44:5e:ea:cb:fb:11:d3:56:76:e1:1f:d6:50:08:7c:0d:a4:1c:
be:95:49:b3:4c:a4:6c:fd:60:7e:87:26:d1:d3:89:05:6b:7f:
37:13:2b:06:55:88:32:53:84:fa:f7:89:6e:b9:6f:93:27:40:
e0:2e:46:81:27:37:61:a0:7a:62:39:b2:86:27:9e:90:0e:f3:
42:09:51:dd:c0:e6:a8:ce:49:87:7c:22:57:a9:62:c4:d4:52:
cb:58:65:2a:b7:50:23:1a:63:a1:5a:ea:f8:b0:ba:1f:f0:50:
b3:ca:05:2f:6b:f6:42:5f:54:53:61:1a:b5:46:b2:f7:55:b2:
b1:c9:5f:cc:bf:5b:70:0b:e0:4b:5c:d8:b5:75:00:49:03:b9:
e9:8c:10:99:30:c8:ad:82:42:5f:e3:95:8a:99:46:ce:91:de:
ae:86:50:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 18:26:47 2023 by rpki-client on console-fra.rpki-client.org