Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/215182d4-710c-3123-bc4b-510860fb46c2.roa
File: 215182d4-710c-3123-bc4b-510860fb46c2.roa (raw, json)
Hash identifier: SpoMrh55W2ChXSfArgb1Z7CGMPzPB3wOfaeIHdsxtKU=
Subject key identifier: A5:34:94:2B:2A:2D:A3:A9:DE:DE:44:CA:83:8C:F5:1D:6C:2B:DD:0F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843A59EA2F077C534215B9200C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/215182d4-710c-3123-bc4b-510860fb46c2.roa
Signing time: Mon 23 Oct 2023 16:00:13 +0000
ROA not before: Mon 23 Oct 2023 16:00:13 +0000
ROA not after: Sun 21 Jan 2024 17:00:13 +0000
asID: 834
IP address blocks: 108.165.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a5:9e:a2:f0:77:c5:34:21:5b:92:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 23 16:00:13 2023 GMT
Not After : Jan 21 17:00:13 2024 GMT
Subject: CN=af11eb8e-9517-4653-9e2f-e1cc136bbca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:f0:7c:63:51:b1:bf:c7:d2:6f:6d:27:4a:
a3:65:2d:e2:71:66:39:e6:bb:bb:ec:c0:57:13:96:
e9:60:36:2c:90:40:a9:a5:4e:5f:59:1d:d3:2e:fe:
e2:f6:10:77:e8:52:f7:b0:38:a8:ae:4b:60:92:cb:
df:22:ed:e1:9c:1b:57:36:5c:46:9b:e9:91:5c:1e:
41:bf:c7:f3:fe:90:e7:b3:0e:60:42:31:f3:ca:cb:
ee:a6:d7:33:0b:98:65:af:5c:de:7b:c2:a5:a5:93:
16:cd:d1:d1:86:f3:80:c4:5b:5b:c2:4e:38:0b:bc:
57:d4:eb:46:09:af:10:07:aa:d8:0a:61:41:0f:6e:
cc:63:ba:38:4d:60:45:7f:8d:35:e5:ae:6a:10:f6:
39:2c:61:d2:a6:5e:ba:de:2b:71:a0:81:d0:b2:d6:
cc:94:4c:5e:ce:27:f1:9b:25:42:0a:14:51:16:1a:
de:0e:2b:6f:de:17:4a:40:7f:76:11:11:2c:64:8c:
db:d5:67:db:dd:16:5e:90:14:99:b5:87:dc:12:00:
fd:35:32:37:3f:03:57:38:50:01:b0:fb:73:54:4f:
b1:d0:a4:19:48:10:bf:01:a0:51:c9:b2:8b:e0:73:
f7:ae:45:1c:5a:8c:45:3d:4d:39:0a:a8:fa:e8:ad:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:94:2B:2A:2D:A3:A9:DE:DE:44:CA:83:8C:F5:1D:6C:2B:DD:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/215182d4-710c-3123-bc4b-510860fb46c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:87:75:c2:6b:08:a5:da:a3:51:b1:4c:97:17:7e:f5:59:c2:
7c:13:c4:64:81:22:ed:d3:1b:bb:f8:0e:14:f0:b1:b0:47:83:
53:21:9e:fd:4f:4c:22:b3:5a:02:88:fd:7e:9b:0a:5e:1b:08:
5f:e2:e8:14:5b:d5:e0:2b:f5:45:8b:c7:8c:0b:3e:52:f3:05:
35:40:8b:a3:cf:9f:55:54:1d:93:4b:39:c1:d8:aa:22:af:ee:
5f:50:f4:9d:56:b0:89:f8:10:38:49:49:1f:e7:7a:a2:27:b5:
cb:26:2a:62:48:b9:a6:88:85:43:d8:4d:43:92:ee:85:f6:2c:
80:f4:12:b1:e0:48:77:6a:e6:fa:6b:04:cb:b6:bb:34:da:c3:
05:86:4d:4b:14:47:d4:09:90:9e:da:26:70:aa:e5:68:1a:9e:
b4:11:8e:8f:ce:a6:8c:e6:36:f7:29:f3:41:a8:58:b6:8c:b7:
77:db:f4:f5:23:a2:4a:04:d3:ed:9b:37:3c:ed:62:fe:a5:91:
b8:0f:9f:cf:6a:ab:7b:1f:0a:77:db:7b:9b:3e:6a:de:e0:00:
d9:a5:1e:01:c5:de:32:55:4a:ec:f3:f7:ff:3f:79:7a:73:a8:
9b:1c:cc:7a:51:f8:03:ac:9c:f8:a3:9e:2e:d5:c4:99:97:2c:
51:f6:b9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 29 16:49:57 2023 by rpki-client on console-ams.rpki-client.org