Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c8775a2-b96e-3848-a1ef-f2913570bb83.roa
File: 1c8775a2-b96e-3848-a1ef-f2913570bb83.roa (raw, json)
Hash identifier: 3K85DS1cqoi5cGogrXW4OwEeqFiJOq/rqDoY4n9SsNs=
Subject key identifier: C8:7B:FD:C6:10:B2:EA:BA:4B:E3:18:EE:8C:99:E0:E0:FF:0D:46:50
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584412C642FCA05DAB3000D96580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c8775a2-b96e-3848-a1ef-f2913570bb83.roa
Signing time: Fri 01 Dec 2023 18:23:10 +0000
ROA not before: Fri 01 Dec 2023 18:23:10 +0000
ROA not after: Thu 29 Feb 2024 18:23:10 +0000
asID: 834
IP address blocks: 108.165.86.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:12:c6:42:fc:a0:5d:ab:30:00:d9:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 1 18:23:10 2023 GMT
Not After : Feb 29 18:23:10 2024 GMT
Subject: CN=d87670d2-4272-4123-b20d-3e1e0d607f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ee:d3:1e:23:6e:82:c5:a9:9b:36:fc:d3:99:
80:57:7a:56:ea:78:2b:57:b6:40:b9:f2:65:31:7c:
fd:7c:8f:59:f1:12:89:75:53:ed:4c:54:4a:5c:d4:
4c:e5:53:8a:68:bd:fa:9f:e2:a8:6f:25:dd:47:49:
3e:66:e3:8e:00:61:6c:33:19:68:14:60:e0:94:c4:
83:aa:45:3d:87:dd:23:9a:7e:73:be:76:f0:97:0f:
42:32:61:95:4f:74:ea:13:e5:78:a0:e5:d5:e4:83:
16:d2:72:20:ed:61:c9:93:01:2b:d0:6a:c6:3b:24:
61:7e:d8:a8:96:3c:c0:f2:ec:a6:4f:2a:ff:d6:7f:
f3:bc:d5:12:92:f9:07:54:3c:6a:e4:6d:9d:c1:df:
66:86:3e:e1:63:ff:4d:69:e6:13:6e:c6:0b:98:6c:
ea:df:cd:68:b8:57:2b:91:8f:e6:08:2a:f8:49:7a:
31:d1:05:ba:96:1a:dd:e3:5f:0a:3e:06:e7:a4:9c:
30:db:3f:63:56:16:24:d6:b0:2c:fd:53:f0:27:a2:
a4:f5:1b:be:fe:32:f0:ce:37:58:41:8d:cb:d6:19:
15:0e:a5:3c:6e:f1:ee:4d:ad:5a:04:fd:01:1f:5b:
86:81:eb:0b:5d:6e:47:24:f6:97:2d:7e:bd:1d:b9:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:FD:C6:10:B2:EA:BA:4B:E3:18:EE:8C:99:E0:E0:FF:0D:46:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1c8775a2-b96e-3848-a1ef-f2913570bb83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:a7:40:56:5e:8d:57:03:df:95:5f:8f:bc:82:6a:e8:af:50:
a0:50:49:ab:3b:d3:33:e6:f1:50:93:33:c3:b2:a5:84:14:28:
89:53:44:d2:7a:12:d6:5d:7c:03:46:a0:fe:ec:e0:8c:64:f5:
09:bf:36:eb:9f:2f:4d:e6:1d:33:eb:d6:7f:f2:58:ea:f7:4d:
36:e6:9d:1e:e5:e1:29:4f:75:a2:7b:cc:12:f5:2e:cc:bc:2c:
a6:ee:77:d2:55:87:df:2c:35:51:f7:eb:14:9b:88:4a:d4:45:
a7:60:99:f5:4a:20:7c:15:c3:59:9d:cc:51:55:86:82:8d:03:
a1:95:be:57:80:76:2c:90:32:87:e3:c0:44:53:ff:12:96:e7:
1e:9d:bb:6d:e5:42:61:33:55:ef:73:24:64:8f:a6:55:23:33:
a8:fe:d9:6c:c5:b2:e3:f5:78:c0:af:93:90:f7:60:08:62:13:
0b:4c:f2:04:f9:27:6c:a5:9a:0f:67:c2:ee:b8:d2:83:9b:e4:
98:b5:d4:12:d2:16:4d:c3:1a:ca:57:57:c6:b4:b8:4f:ea:35:
7a:49:bd:b0:c7:8f:68:14:5a:d8:1c:78:8d:5b:ab:92:43:d6:
95:de:cb:88:0a:ee:26:71:ed:58:dd:03:60:8a:57:70:52:02:
69:6c:a4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 10 01:04:38 2023 by rpki-client on console-ams.rpki-client.org