Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/221ed26f-9aa7-3a92-ac8c-1cb85ec8d32e.roa
File: 221ed26f-9aa7-3a92-ac8c-1cb85ec8d32e.roa (raw, json)
Hash identifier: A+Nlz+U8Gmx5tipRlWo6ISIkt6Otmga9LWCFd7P+bxM=
Subject key identifier: 17:AA:B3:E7:A9:D5:94:AC:77:9C:0A:14:45:0C:CD:CA:1A:95:96:E5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858424E432B3AE17EA029360C8D80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/221ed26f-9aa7-3a92-ac8c-1cb85ec8d32e.roa
Signing time: Thu 22 Jun 2023 16:13:39 +0000
ROA not before: Thu 22 Jun 2023 16:13:39 +0000
ROA not after: Wed 20 Sep 2023 16:13:39 +0000
asID: 11798
IP address blocks: 166.1.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:43:2b:3a:e1:7e:a0:29:36:0c:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 22 16:13:39 2023 GMT
Not After : Sep 20 16:13:39 2023 GMT
Subject: CN=c0150099-8d30-44ec-bd79-61e62e0d1d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:a9:6b:50:30:5f:2d:79:20:58:a8:b1:ca:
ab:1a:cf:a2:81:78:89:9d:d7:18:8b:05:eb:46:f4:
87:b2:3f:51:cc:f8:48:a1:91:96:97:95:82:91:d0:
8f:9b:fd:2b:5c:99:9e:0a:76:4e:4f:34:a3:f3:ee:
16:eb:92:25:68:f4:b5:cb:e4:d0:3b:19:b3:ba:7f:
ce:c8:2e:66:4e:f1:c2:a3:3b:33:c4:3f:e1:1a:8f:
3a:74:3d:e3:4c:db:3b:c4:86:e4:d8:b9:f8:97:13:
2c:7c:2d:7e:69:2e:ec:c7:ac:06:cb:af:11:2d:07:
33:e0:38:2a:04:c9:08:4a:de:77:df:ae:cc:66:e6:
6a:93:03:4e:dc:9b:54:f3:cf:ed:10:04:7a:60:4c:
01:f4:76:7f:d9:0b:68:33:63:90:3b:e2:23:31:02:
20:81:b0:64:72:49:2b:90:42:62:ac:04:c4:b1:a0:
5b:09:5e:a9:3d:d4:f2:7c:93:13:8f:73:97:40:78:
75:cc:97:37:df:d1:89:09:95:6d:74:f2:60:f7:d0:
9f:11:e6:a8:84:fc:8a:fc:0f:98:0d:6a:54:3e:64:
48:35:8f:61:16:fd:4e:d9:8e:f1:bf:a1:19:a1:ce:
fd:24:fb:2c:bd:1b:77:19:28:2b:30:20:ea:8d:04:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:B3:E7:A9:D5:94:AC:77:9C:0A:14:45:0C:CD:CA:1A:95:96:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/221ed26f-9aa7-3a92-ac8c-1cb85ec8d32e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:e2:e5:16:54:79:ba:c0:09:86:cf:7b:e6:0b:ef:d7:3b:cb:
db:9f:1b:6e:8e:54:a4:36:db:38:93:97:18:3f:fd:fa:f2:2d:
e4:26:5b:12:67:1f:19:92:41:16:67:fd:21:04:16:79:79:d6:
be:00:3f:1b:25:b5:33:15:2c:29:42:c0:ca:90:cd:c8:4e:fa:
8f:03:29:b0:90:cb:7c:c4:2f:f0:98:a5:38:a2:4e:36:03:eb:
c3:d0:78:55:6a:c7:93:f9:4e:dc:34:1e:39:5d:fd:b8:ea:a1:
df:7e:09:56:fb:3b:e8:34:52:c5:6b:bb:36:62:c5:1a:c4:1e:
c9:2f:f4:8b:47:39:4a:b7:47:d1:9a:e8:f7:6e:fa:e8:e5:51:
39:1c:17:dc:19:13:84:04:fe:1a:e8:c6:b4:2e:b9:d6:e5:b8:
7a:d1:ea:1f:5a:8d:00:0e:3a:55:5f:75:0b:a7:bd:1c:fd:29:
62:58:ad:a9:d2:23:de:87:4d:c8:23:ca:a9:c3:73:5d:ff:d9:
f4:10:51:a8:c6:be:30:7b:9d:ce:77:84:7d:c4:ca:9b:0a:0b:
7a:04:90:b2:94:89:ed:50:08:7d:a2:95:57:bc:ae:79:f6:9b:
9f:3f:63:aa:a0:97:e1:cb:08:cf:e9:be:75:b6:a3:10:d6:7c:
90:37:8a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 19:19:41 2023 by rpki-client on console-fra.rpki-client.org