Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1998c1f6-6e6b-3914-b5c8-880f66359b3e.roa
File: 1998c1f6-6e6b-3914-b5c8-880f66359b3e.roa (raw, json)
Hash identifier: A9PoNIyHUik4BE5/32+RZX1lcNbjTP0AxzZm8avYq+o=
Subject key identifier: 71:5D:B3:DE:80:E1:35:26:48:37:EE:FD:B4:9D:AF:60:10:E6:40:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584464B31E844580F7DEE259BB60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1998c1f6-6e6b-3914-b5c8-880f66359b3e.roa
Signing time: Sun 31 Dec 2023 02:40:53 +0000
ROA not before: Sun 31 Dec 2023 02:40:53 +0000
ROA not after: Sat 30 Mar 2024 01:40:53 +0000
asID: 834
IP address blocks: 166.0.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:64:b3:1e:84:45:80:f7:de:e2:59:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 31 02:40:53 2023 GMT
Not After : Mar 30 01:40:53 2024 GMT
Subject: CN=06c357ad-2e81-4513-9ef9-e0827bcd07a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:11:4e:b5:62:1d:2e:55:e2:6e:09:77:ec:
7f:7d:22:6f:9d:1e:0a:16:08:31:d4:eb:22:b4:a7:
30:f1:3f:6b:e9:69:d0:e1:a9:db:47:29:48:ac:8c:
06:c0:fe:49:6c:69:d6:59:87:91:7e:92:79:42:be:
e2:cb:a8:2d:36:ad:fb:16:84:e8:fe:10:ef:6f:50:
5d:fc:60:fc:99:8e:5a:84:1d:08:77:a9:a0:f4:8b:
99:db:e4:d6:d6:94:c4:49:85:ad:24:6e:84:16:19:
c3:64:99:0e:e5:5b:f8:7f:0d:e9:98:5c:05:22:c0:
b8:6a:c4:bb:de:b1:09:16:6d:30:90:4f:27:55:58:
0e:67:07:0c:ec:9e:9b:23:cd:e9:2b:36:c3:65:a5:
2c:5e:5f:55:2a:5a:02:b0:6e:48:8a:b1:c9:db:5a:
55:24:9d:ad:1d:1c:22:fa:12:97:67:5f:5b:68:8a:
ed:c8:80:20:85:45:a5:22:be:dc:73:31:12:3a:92:
c9:e4:03:03:8d:6a:3e:da:07:3d:d8:58:0e:9b:ab:
b7:ff:5f:62:f0:27:c8:39:4b:73:40:ae:8c:86:8f:
98:19:68:c7:14:d5:64:7a:e3:17:60:df:68:16:b7:
7d:30:98:fc:32:f5:69:98:36:84:6f:5f:65:08:2e:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:B3:DE:80:E1:35:26:48:37:EE:FD:B4:9D:AF:60:10:E6:40:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1998c1f6-6e6b-3914-b5c8-880f66359b3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:eb:7f:82:29:6f:f8:2f:b1:96:f0:df:d3:6c:45:03:6b:e0:
6c:f6:b7:97:11:f8:26:42:90:28:99:d2:eb:4f:7e:ad:da:b1:
95:c9:79:97:c6:d9:34:08:a6:2f:f5:0b:39:db:f5:cb:ef:a3:
0f:6e:d8:76:0f:5a:96:d4:ba:c3:8a:51:2f:36:13:e0:ca:9d:
9f:9d:6a:80:26:83:fd:ac:79:e3:9e:47:9c:bf:1a:5a:a7:42:
fa:19:aa:66:95:6d:87:32:2d:f7:24:98:7b:8b:ac:10:9d:5f:
b1:62:19:a1:49:fd:1f:b4:ae:69:44:82:81:99:56:58:d6:a8:
3e:f5:35:b2:c6:40:6d:5c:6a:73:1f:ab:6c:51:78:55:cc:4c:
bd:dd:5d:c9:3b:ff:a3:7c:08:3c:cd:16:bb:f5:56:c2:76:92:
e4:d4:12:84:0b:53:2f:12:9f:51:f2:90:93:56:2f:13:fb:d8:
23:67:d8:83:83:c3:08:68:f4:46:f3:86:9d:a8:ec:17:4f:f2:
85:63:aa:52:f1:27:3c:f1:a4:50:96:b7:dd:12:a1:e0:ed:cc:
0b:31:19:1f:6e:fa:40:81:60:fb:17:eb:e8:6b:9a:ea:e8:b9:
a7:c0:9f:19:56:fb:73:bd:4e:69:83:07:e6:f3:16:aa:c1:ce:
14:45:a3:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWERksx6ERYD33uJZu2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMTIzMTAyNDA1M1oXDTI0MDMzMDAxNDA1M1owLzEtMCsGA1UEAxMk
MDZjMzU3YWQtMmU4MS00NTEzLTllZjktZTA4MjdiY2QwN2E1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MQRTrViHS5V4m4Jd+x/fSJvnR4KFggx1Osi
tKcw8T9r6WnQ4anbRylIrIwGwP5JbGnWWYeRfpJ5Qr7iy6gtNq37FoTo/hDvb1Bd
/GD8mY5ahB0Id6mg9IuZ2+TW1pTESYWtJG6EFhnDZJkO5Vv4fw3pmFwFIsC4asS7
3rEJFm0wkE8nVVgOZwcM7J6bI83pKzbDZaUsXl9VKloCsG5IirHJ21pVJJ2tHRwi
+hKXZ19baIrtyIAghUWlIr7cczESOpLJ5AMDjWo+2gc92FgOm6u3/19i8CfIOUtz
QK6Mho+YGWjHFNVkeuMXYN9oFrd9MJj8MvVpmDaEb19lCC4tAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFds96A4TUmSDfu/bSdr2AQ5kBlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMTk5OGMxZjYtNmU2Yi0z
OTE0LWI1YzgtODgwZjY2MzU5YjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApgDDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbrf4Ipb/gvsZbw39NsRQNr4Gz2t5cR+CZCkCiZ0utPfq3asZXJeZfG
2TQIpi/1Cznb9cvvow9u2HYPWpbUusOKUS82E+DKnZ+daoAmg/2seeOeR5y/Glqn
QvoZqmaVbYcyLfckmHuLrBCdX7FiGaFJ/R+0rmlEgoGZVljWqD71NbLGQG1canMf
q2xReFXMTL3dXck7/6N8CDzNFrv1VsJ2kuTUEoQLUy8Sn1HykJNWLxP72CNn2IOD
wwho9Ebzhp2o7BdP8oVjqlLxJzzxpFCWt90SoeDtzAsxGR9u+kCBYPsX6+hrmuro
uafAnxlW+3O9TmmDB+bzFqrBzhRFo5w=
-----END CERTIFICATE-----
Generated at Fri Mar 15 18:58:35 2024 by rpki-client on console-fra.rpki-client.org