Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12e8443f-5e5b-3031-b2b0-c38fb445768a.roa
File: 12e8443f-5e5b-3031-b2b0-c38fb445768a.roa (raw, json)
Hash identifier: u0uFbysP54SN0S/wriBvYvCFfiXnmyP43hqqndYR/T8=
Subject key identifier: C2:45:3A:A9:7F:3F:8C:BF:72:8B:CC:41:0D:C7:88:F6:E1:F0:F0:4B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584412C84EDB002438BF9ACAFDC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12e8443f-5e5b-3031-b2b0-c38fb445768a.roa
Signing time: Fri 01 Dec 2023 18:27:17 +0000
ROA not before: Fri 01 Dec 2023 18:27:17 +0000
ROA not after: Thu 29 Feb 2024 18:27:17 +0000
asID: 834
IP address blocks: 166.0.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:12:c8:4e:db:00:24:38:bf:9a:ca:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 1 18:27:17 2023 GMT
Not After : Feb 29 18:27:17 2024 GMT
Subject: CN=020bfb97-7d5b-4dea-849f-aa8b6bb55d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:99:19:c0:bd:2b:15:e9:9b:bc:0f:cb:76:
73:07:cb:b9:09:45:ca:1c:50:d5:c7:91:ae:11:f9:
63:7d:b7:5b:f8:21:0b:a4:21:f6:c6:d3:1c:50:52:
95:3f:7b:8a:98:64:87:72:89:de:43:6c:76:2e:58:
f2:2d:08:99:c4:04:cc:3f:f6:0d:27:32:fc:8d:85:
d2:3c:06:7d:3d:6d:3a:9f:62:13:9c:bb:dd:c4:7f:
da:f9:ff:38:ca:13:02:b6:2a:e1:7b:93:38:53:02:
43:7a:d0:aa:62:78:9c:54:2f:a1:38:e5:a0:f1:e9:
c8:e7:40:ff:0f:83:da:47:00:77:dd:1c:63:cc:40:
58:03:c0:c2:97:0c:8e:6a:ab:19:de:c9:f2:20:1f:
55:ae:5d:63:e9:f5:fd:a8:7c:0b:77:c0:31:75:e9:
ce:c2:95:5b:c0:b6:74:d4:c0:a3:10:c7:16:64:04:
b1:97:48:99:89:0d:56:42:92:e8:88:85:db:f7:90:
6d:7e:3a:7c:f9:1f:d0:f2:db:8e:d8:5b:48:d8:db:
85:99:df:13:1c:6b:bc:c2:4b:aa:a9:c4:a0:6b:28:
05:a4:b0:6a:2b:24:ec:06:31:43:80:75:d0:53:9d:
6d:2e:41:fa:9b:12:08:95:cf:0c:8d:1b:67:8e:30:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:45:3A:A9:7F:3F:8C:BF:72:8B:CC:41:0D:C7:88:F6:E1:F0:F0:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/12e8443f-5e5b-3031-b2b0-c38fb445768a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:fd:d4:fc:12:84:b4:d0:65:87:f2:c1:d2:a7:69:95:26:a9:
f8:3d:29:40:ad:62:c5:3b:e5:1b:ba:bb:f6:8f:82:8b:81:22:
44:a0:98:33:42:76:2f:5e:47:70:57:ce:46:f2:81:1b:fe:c7:
a4:ee:bd:8d:1b:c8:67:ad:96:69:73:c9:3c:fb:c9:6f:26:9a:
cc:f4:fb:1d:93:a6:36:6a:c7:5f:71:82:f1:4d:9b:4b:f5:95:
6b:13:86:54:c7:2d:90:3b:4c:fd:62:0f:51:b0:db:e8:2d:38:
87:63:78:a5:9f:f5:b4:1e:fd:7b:44:0b:ed:5c:72:46:8c:40:
f6:55:ea:7a:62:69:e8:9e:83:83:88:af:72:ac:42:6c:32:60:
e0:67:7d:a2:81:38:b0:a8:ce:8a:54:c0:15:45:19:20:ae:af:
c0:c9:58:b4:cf:31:d1:2e:c9:4a:d3:c2:f8:42:87:41:45:7b:
ee:fd:97:37:46:ac:1d:a7:73:32:f6:05:56:cc:a0:35:cd:e4:
b8:9e:9a:b5:08:95:dc:be:e9:80:ce:05:34:da:0a:c9:5b:a7:
45:15:1e:65:79:96:75:22:a2:4f:ea:f6:e9:23:bf:b7:7c:a3:
60:8b:eb:a1:61:0e:78:16:52:05:64:e2:ee:f0:46:49:e2:0c:
13:f7:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 19:25:44 2023 by rpki-client on console-fra.rpki-client.org