Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dcdfdf0-52b0-3020-a881-09e5d0a43524.roa
File: 1dcdfdf0-52b0-3020-a881-09e5d0a43524.roa (raw, json)
Hash identifier: SVXtNbL6hzK05UZrKJ9SSJE9mzvhy0c97Dz6YQOT3tk=
Subject key identifier: D7:08:F6:70:BF:74:69:8E:BA:D1:A1:37:88:99:7D:13:FE:DA:26:6C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BDEAD2E90A75C716DA7CE680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dcdfdf0-52b0-3020-a881-09e5d0a43524.roa
Signing time: Tue 01 Aug 2023 16:06:11 +0000
ROA not before: Tue 01 Aug 2023 16:06:11 +0000
ROA not after: Mon 30 Oct 2023 16:06:11 +0000
asID: 11798
IP address blocks: 166.1.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bd:ea:d2:e9:0a:75:c7:16:da:7c:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 1 16:06:11 2023 GMT
Not After : Oct 30 16:06:11 2023 GMT
Subject: CN=ddaf13d4-05f7-48dd-b19d-b6c90170942d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:db:1c:3d:04:7e:a1:54:84:78:2b:9f:df:
cd:64:9a:79:4f:4b:68:f8:a0:3a:b3:02:46:2d:be:
34:54:2f:db:18:45:1b:13:68:fb:56:48:b4:66:67:
fa:7a:e2:55:55:93:21:21:3f:04:32:75:44:d8:a0:
0d:69:dd:09:df:1d:11:ca:10:dd:80:6b:f9:e3:dc:
bd:a5:77:41:a1:18:3c:7b:19:4b:2b:5d:d3:67:02:
bb:ab:44:a1:43:29:4e:ee:53:d1:9a:96:b9:a5:52:
c8:39:fa:b7:16:ec:07:fa:53:b4:e5:72:38:e8:d5:
0e:ab:2a:ca:76:09:57:20:7b:3d:a8:02:d2:61:79:
c0:f2:2a:fa:ca:23:7f:bb:96:76:f7:0a:6e:82:d4:
88:27:55:e4:87:e6:89:25:88:0c:11:f4:dd:2b:75:
31:6e:22:12:e6:cc:f7:7a:cd:fa:6b:cc:dd:9f:a3:
87:0a:a3:71:cc:57:b8:ce:84:b3:05:da:f8:78:44:
14:f5:e6:ce:67:94:a6:d2:45:d8:95:c3:51:df:79:
ae:25:04:b6:fe:fe:81:cc:be:d3:00:5c:33:2c:56:
5d:fd:df:4f:50:67:1b:31:5d:62:1b:f5:74:6c:47:
49:f1:f7:d0:ea:f0:60:c1:bd:f2:87:d4:a9:dc:d4:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:F6:70:BF:74:69:8E:BA:D1:A1:37:88:99:7D:13:FE:DA:26:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1dcdfdf0-52b0-3020-a881-09e5d0a43524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:cf:fd:47:37:f7:aa:3a:a2:82:eb:1d:68:01:91:61:0f:aa:
4f:8a:db:ac:bb:1c:09:82:ac:0e:9c:41:fd:b6:61:f5:39:aa:
2e:65:73:d9:37:a9:5c:1a:9f:bb:df:e3:ae:35:cd:2c:91:73:
a6:4e:e0:1e:a2:96:05:c4:17:d0:a2:00:57:87:b9:04:16:f6:
f2:62:ec:5a:59:d2:1e:9c:23:91:71:8a:e2:fc:d4:c1:80:4f:
53:c9:36:2d:7c:be:15:68:61:ca:96:1e:39:45:39:8f:a9:51:
4e:b1:52:c7:4f:09:22:34:1c:e2:6e:b7:a4:02:69:ca:c0:d7:
e3:74:43:65:b1:b0:b1:3c:03:c9:f7:9b:23:b9:8e:a7:aa:c1:
de:14:63:87:dc:28:4d:25:22:e1:07:d3:d5:f7:fa:67:ab:d3:
c6:14:18:d1:b3:da:28:df:3e:c4:9a:32:f6:d6:3c:69:d6:af:
2a:69:d9:02:e2:48:85:51:9a:51:3a:04:40:84:fb:0d:03:99:
40:e1:f6:ba:c0:9c:f8:05:c4:08:46:99:33:a1:6a:71:fb:32:
fe:bb:63:bd:dc:a4:90:78:76:60:aa:62:8c:73:29:d3:9f:9e:
e5:98:dc:12:e4:7e:dd:48:72:36:0b:fe:76:c1:7d:46:e4:4b:
6d:aa:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 19:09:25 2023 by rpki-client on console-fra.rpki-client.org