Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1eb29981-e865-3fc9-bdc5-13c65f479008.roa
File: 1eb29981-e865-3fc9-bdc5-13c65f479008.roa (raw, json)
Hash identifier: pYFM2mVdUUmASIT0zjD7rI0hpCHdi2ZLU1JAH2nQ+r8=
Subject key identifier: 57:B6:3A:06:5F:D6:94:3B:DE:22:F0:2C:43:20:33:84:AE:45:24:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845453D6C528A9A0D826CDC11C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1eb29981-e865-3fc9-bdc5-13c65f479008.roa
Signing time: Wed 20 Mar 2024 13:00:33 +0000
ROA not before: Wed 20 Mar 2024 13:00:33 +0000
ROA not after: Tue 18 Jun 2024 13:00:33 +0000
asID: 211178
IP address blocks: 166.1.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 17:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:45:3d:6c:52:8a:9a:0d:82:6c:dc:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 20 13:00:33 2024 GMT
Not After : Jun 18 13:00:33 2024 GMT
Subject: CN=3b0968b9-88b7-4194-88af-3376f6ade051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:2a:70:0b:6a:ba:eb:4c:7d:06:7d:3f:a5:
6d:0c:37:de:fb:08:27:fd:f3:2c:db:bc:e9:70:00:
24:06:83:c4:1c:73:4d:8b:98:70:9f:5f:65:6c:21:
1d:c9:cb:49:45:e7:15:fd:eb:70:c8:e9:cd:be:30:
b7:73:ab:a9:2c:6b:80:9d:ed:cc:00:7a:39:f3:b6:
c6:d3:0f:3e:41:03:78:ab:85:59:b6:c5:f6:d4:4c:
25:05:26:a0:bc:8d:e5:ad:14:3c:4b:8f:80:0b:a4:
56:ed:67:09:01:1d:64:30:04:a7:1b:83:eb:82:87:
da:e2:f4:8e:fc:fb:4d:0f:45:19:92:26:8b:71:ef:
24:4d:51:b0:31:9f:68:9f:92:fb:4e:f1:69:31:bf:
b7:76:9d:b5:f2:82:c3:f2:f9:24:30:bf:48:95:dd:
fb:52:32:6c:c4:97:7e:e2:d7:29:d3:c6:ec:3e:e7:
de:cc:7c:03:42:aa:23:02:8f:3b:72:90:40:77:a3:
a7:6c:7e:c3:10:e0:f6:18:e7:15:c5:27:f8:ed:89:
53:d8:78:c0:90:8a:cc:c5:44:a6:0f:5c:98:14:ac:
af:3a:b6:7e:28:75:32:45:ee:c5:e2:9a:52:52:69:
c8:ce:71:41:9d:df:2d:4c:ff:39:e3:0c:a1:aa:5f:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:3A:06:5F:D6:94:3B:DE:22:F0:2C:43:20:33:84:AE:45:24:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1eb29981-e865-3fc9-bdc5-13c65f479008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:19:b6:ab:b1:6d:b0:3c:ac:38:2f:2b:b1:be:d5:30:34:78:
b4:f8:44:4f:9f:91:98:c4:54:dc:e7:17:00:83:78:95:05:77:
99:af:77:8c:6c:26:1b:f3:10:10:d4:8c:00:e2:65:6d:42:3d:
4f:a6:80:a7:51:52:a3:94:fc:c4:bf:dc:bd:52:e8:79:af:ed:
3c:5f:bb:53:26:1c:da:28:12:7c:ff:b6:5a:9b:4e:64:7b:9d:
c1:d7:9b:72:65:5c:64:ab:fc:c3:1b:05:6c:77:d6:59:4a:81:
6f:79:cb:29:f5:3f:2b:bd:d7:e1:08:c5:d3:60:c3:6a:6c:d1:
6d:2b:d1:0b:f1:18:9c:79:94:69:b2:4e:d1:42:72:0a:1a:89:
54:e5:95:8f:7b:6d:fe:04:14:18:b7:bd:78:37:22:df:9f:85:
9d:7b:e4:0c:50:80:bc:ff:46:66:da:8d:5e:37:f9:de:1a:7b:
ad:64:5d:bf:00:ca:45:f5:e1:e4:6e:76:ba:17:75:82:cf:f4:
22:f5:df:c4:d3:2e:61:d9:e8:51:61:99:bf:7b:11:0d:05:df:
d0:c8:e1:46:50:9c:f1:9d:81:84:6a:97:5e:04:01:b4:63:bd:
1a:61:1b:da:06:cf:7c:87:af:ae:1c:33:11:f9:54:04:1c:08:
85:b4:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 19:48:47 2024 by rpki-client on console-fra.rpki-client.org