Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1873d450-7a1c-3650-9d06-eeec89aeb1e4.roa
File: 1873d450-7a1c-3650-9d06-eeec89aeb1e4.roa (raw, json)
Hash identifier: jcX7djtg/dbLa/ZnzSEN+nECsvU9qlLtwSYyoWopy8g=
Subject key identifier: CF:05:83:58:37:0E:88:87:5F:C3:2C:50:26:ED:65:B7:05:0B:E1:9E
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858421ED23E9858434818B461E480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1873d450-7a1c-3650-9d06-eeec89aeb1e4.roa
Signing time: Mon 05 Jun 2023 16:23:08 +0000
ROA not before: Mon 05 Jun 2023 16:23:08 +0000
ROA not after: Sun 03 Sep 2023 16:23:08 +0000
asID: 834
IP address blocks: 108.165.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:1e:d2:3e:98:58:43:48:18:b4:61:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 5 16:23:08 2023 GMT
Not After : Sep 3 16:23:08 2023 GMT
Subject: CN=1ccb67e4-b7e0-4980-8256-d344a3242286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:ec:0d:31:1d:c3:cc:f6:37:a1:1f:e8:35:
1d:1c:07:6a:94:07:75:af:7e:d6:2b:51:ca:55:33:
0c:5c:18:9b:f5:98:2b:58:93:90:a8:94:7b:e5:1f:
cd:d2:0d:5d:88:0a:9b:df:90:03:2f:80:f2:ce:c8:
fc:d5:4b:37:d2:6f:28:d7:7a:54:6a:68:d4:63:51:
e4:db:bd:92:63:d8:74:50:81:30:88:98:28:14:7e:
b8:52:e9:ad:b5:39:6d:e5:3a:7a:af:6e:47:0d:06:
d2:58:f3:bb:e4:0d:7b:16:27:0e:98:43:26:06:69:
1d:10:ff:79:22:a2:d6:65:2b:53:f2:ee:f4:fb:8d:
30:42:c2:d1:72:ec:f5:df:ec:a2:53:8f:c8:06:e4:
43:7a:2c:3d:4b:8a:6c:58:cf:c9:31:6e:06:ea:eb:
52:ef:fd:67:37:cf:93:95:f0:ed:5b:2c:05:9d:c5:
7d:90:9c:0a:3d:bd:d1:de:ba:a8:1e:da:22:55:ae:
f8:d9:d2:1d:3a:ec:08:63:e2:41:7a:9f:39:55:37:
7b:c7:22:14:51:d8:64:4d:41:a1:dd:09:6a:e3:e3:
0b:92:08:67:b4:eb:5a:98:08:49:ec:fa:53:02:70:
6c:cd:4c:be:4c:14:8b:57:ba:36:bc:80:04:9b:0a:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:05:83:58:37:0E:88:87:5F:C3:2C:50:26:ED:65:B7:05:0B:E1:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1873d450-7a1c-3650-9d06-eeec89aeb1e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:d2:53:1a:14:80:36:ec:12:f7:09:44:22:a6:8c:eb:e7:1a:
17:7e:7f:dc:9e:99:6b:15:6c:5f:9b:19:18:b9:68:07:1a:d4:
f8:12:3c:5e:42:99:61:40:d5:08:7d:f8:ba:12:95:83:27:72:
91:a7:ff:03:a0:0c:11:d3:0c:5c:fc:18:fc:eb:e2:89:eb:5e:
c0:77:cc:70:ad:91:f8:f7:20:d6:bd:f2:fa:86:4d:be:35:74:
b3:51:4f:44:fa:6e:5a:8f:eb:a4:87:d9:3f:97:1c:ae:ec:43:
19:fd:bc:f5:fe:cb:42:d2:a1:bc:57:84:62:75:78:16:40:8e:
d2:a6:e8:96:35:27:ec:c0:2d:09:53:f2:33:8e:90:fb:e3:ab:
96:16:40:0e:d8:b3:79:a1:5f:0c:1b:22:f6:ff:24:f2:f7:34:
08:65:5c:2f:0d:d5:0d:32:ce:a8:41:87:be:39:dd:4f:db:58:
46:71:b7:13:a8:d0:f0:ad:c6:79:9d:1c:ca:f2:e8:85:8e:61:
c1:ad:f3:f3:b8:b2:3a:b7:d4:4c:fe:a5:90:7a:2a:6b:05:b4:
54:5e:9f:92:01:df:a5:d4:85:fa:a2:13:8a:49:fd:50:21:e4:
b3:6c:1d:1f:75:e1:b6:14:a9:ad:fa:a5:8e:8d:4d:05:13:8e:
37:36:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:17 2023 by rpki-client on console-fra.rpki-client.org