Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bc9a8fd-4a08-3b0f-a752-5e1d0fa413c5.roa
File: 0bc9a8fd-4a08-3b0f-a752-5e1d0fa413c5.roa (raw, json)
Hash identifier: nCqGzC5Fy1dPW/qz+9bcs0yg9QlmchbSuv5bCZqBGTg=
Subject key identifier: 06:55:01:BD:8C:DB:21:D3:0B:61:14:88:C1:9B:1E:23:9D:DD:D8:4C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844372D30C779F2287D697B3600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bc9a8fd-4a08-3b0f-a752-5e1d0fa413c5.roa
Signing time: Thu 14 Dec 2023 19:19:39 +0000
ROA not before: Thu 14 Dec 2023 19:19:39 +0000
ROA not after: Wed 13 Mar 2024 18:19:39 +0000
asID: 15083
IP address blocks: 166.1.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:37:2d:30:c7:79:f2:28:7d:69:7b:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 14 19:19:39 2023 GMT
Not After : Mar 13 18:19:39 2024 GMT
Subject: CN=9813dab9-4ca1-4a13-b489-0c84a4b3b114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:de:6f:89:fa:9b:14:05:bd:71:d7:e3:17:d0:
c5:c6:f4:9c:01:e4:c0:ca:0c:49:56:09:83:01:ed:
2f:86:71:21:b4:93:a3:7e:e4:a5:be:03:3b:44:64:
29:d5:cf:fa:a5:8e:13:c9:f8:45:1b:ca:45:f0:ee:
2d:69:03:0d:9f:9c:ed:fc:cc:80:c3:1a:3b:68:26:
85:5f:ba:1c:f9:aa:ea:29:b1:aa:b9:bd:47:f1:a6:
10:40:15:57:a8:57:6e:3e:21:fe:02:df:9b:54:79:
ce:ea:2f:0e:ae:aa:ea:50:9b:5c:95:4f:9c:40:ec:
f0:4b:b5:29:09:f9:8d:dd:fd:6a:a5:78:e6:d0:a1:
3a:ad:0f:c8:4c:4a:a8:80:70:8b:15:46:4f:8e:8e:
e6:2d:eb:8e:5a:b9:3b:da:1b:d5:6c:e1:39:8f:b9:
f8:b2:33:d5:c1:ad:c5:a7:64:0e:69:6e:5d:93:aa:
a1:a7:eb:c9:40:76:b2:5f:d4:3f:bc:9c:78:56:06:
e6:de:f9:66:fd:f6:d3:b3:13:a7:33:30:7b:5c:88:
04:f9:27:13:75:2c:e3:b2:c4:14:ff:04:3e:0b:a1:
32:24:3c:0f:65:91:9b:bd:22:58:52:23:66:34:51:
9b:b5:83:f8:b0:a8:1c:e5:42:c5:80:c6:f2:34:d6:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:55:01:BD:8C:DB:21:D3:0B:61:14:88:C1:9B:1E:23:9D:DD:D8:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bc9a8fd-4a08-3b0f-a752-5e1d0fa413c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:af:a7:1e:c2:44:96:bb:59:03:61:6a:ab:1b:13:c5:47:7b:
fe:8f:37:0a:99:34:9c:a1:76:fa:ec:51:2b:12:00:2b:66:d4:
bc:87:4a:6f:63:a0:d9:96:e2:4e:cc:51:49:fe:31:bc:ec:29:
58:be:74:8c:58:c4:fb:cf:c9:37:a4:91:ab:83:d5:75:df:4c:
de:74:8c:24:f8:7e:af:1a:ed:40:3b:98:ba:01:37:3f:2b:b8:
5b:3c:87:58:a3:5e:c6:4c:bd:c8:c4:03:c8:70:79:08:bd:1d:
94:56:4f:17:7a:31:09:5b:48:1f:f7:2b:fd:6b:7b:b7:0d:ae:
15:b7:86:89:56:22:23:76:f3:eb:5f:80:c6:1a:a8:b1:13:06:
97:a8:58:37:b0:19:e6:6d:a0:94:b3:8f:07:d6:9d:22:47:87:
17:56:0d:e0:81:32:77:1c:30:fd:c0:e1:62:07:41:48:d0:10:
b3:18:d2:09:19:8e:d0:f5:e1:21:bc:2e:41:3a:f7:80:4b:87:
55:64:85:3d:d6:8e:41:fb:7c:e8:98:13:34:bc:4f:00:63:ba:
6b:0f:08:56:f6:b8:7d:89:54:0e:05:8b:d5:8e:c7:9c:d8:c5:
67:19:77:e1:30:09:4d:3a:ac:8f:92:1f:c7:93:d9:f1:45:d3:
af:9d:dd:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQ3LTDHefIofWl7NgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTIxNDE5MTkzOVoXDTI0MDMxMzE4MTkzOVowLzEtMCsGA1UEAxMk
OTgxM2RhYjktNGNhMS00YTEzLWI0ODktMGM4NGE0YjNiMTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd5vifqbFAW9cdfjF9DFxvScAeTAygxJVgmD
Ae0vhnEhtJOjfuSlvgM7RGQp1c/6pY4TyfhFG8pF8O4taQMNn5zt/MyAwxo7aCaF
X7oc+arqKbGqub1H8aYQQBVXqFduPiH+At+bVHnO6i8OrqrqUJtclU+cQOzwS7Up
CfmN3f1qpXjm0KE6rQ/ITEqogHCLFUZPjo7mLeuOWrk72hvVbOE5j7n4sjPVwa3F
p2QOaW5dk6qhp+vJQHayX9Q/vJx4Vgbm3vlm/fbTsxOnMzB7XIgE+ScTdSzjssQU
/wQ+C6EyJDwPZZGbvSJYUiNmNFGbtYP4sKgc5ULFgMbyNNb9xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZVAb2M2yHTC2EUiMGbHiOd3dhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMGJjOWE4ZmQtNGEwOC0z
YjBmLWE3NTItNWUxZDBmYTQxM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgFuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADavpx7CRJa7WQNhaqsbE8VHe/6PNwqZNJyhdvrsUSsSACtm1LyHSm9j
oNmW4k7MUUn+MbzsKVi+dIxYxPvPyTekkauD1XXfTN50jCT4fq8a7UA7mLoBNz8r
uFs8h1ijXsZMvcjEA8hweQi9HZRWTxd6MQlbSB/3K/1re7cNrhW3holWIiN28+tf
gMYaqLETBpeoWDewGeZtoJSzjwfWnSJHhxdWDeCBMnccMP3A4WIHQUjQELMY0gkZ
jtD14SG8LkE694BLh1VkhT3WjkH7fOiYEzS8TwBjumsPCFb2uH2JVA4Fi9WOx5zY
xWcZd+EwCU06rI+SH8eT2fFF06+d3Xw=
-----END CERTIFICATE-----
Generated at Wed Jan 3 20:26:15 2024 by rpki-client on console-fra.rpki-client.org