Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24d91fdb-035d-34aa-861b-c28d2526aaa0.roa
File: 24d91fdb-035d-34aa-861b-c28d2526aaa0.roa (raw, json)
Hash identifier: 2yKywLDhVTOseD98ub4QNm0k1lgBwJGLtxL33TOgRfI=
Subject key identifier: 84:4C:5D:E5:52:79:77:C8:C6:3B:76:A0:4F:85:4A:D0:6B:89:3D:8B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D186B5FCC50EFFF078566200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24d91fdb-035d-34aa-861b-c28d2526aaa0.roa
Signing time: Tue 08 Aug 2023 16:40:38 +0000
ROA not before: Tue 08 Aug 2023 16:40:38 +0000
ROA not after: Mon 06 Nov 2023 17:40:38 +0000
asID: 201106
IP address blocks: 166.1.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:86:b5:fc:c5:0e:ff:f0:78:56:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 8 16:40:38 2023 GMT
Not After : Nov 6 17:40:38 2023 GMT
Subject: CN=78029804-15cc-49ef-90bd-875e69632fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:7a:58:8d:c4:34:97:ba:9c:12:63:46:14:
aa:75:84:5f:44:cb:37:6d:e3:51:ae:14:db:34:92:
7c:3c:5c:84:42:4b:cc:a6:69:6e:a8:7a:a5:94:3c:
9c:dd:23:30:74:7c:28:c3:38:85:ac:42:eb:7e:5b:
40:9c:09:ac:55:b4:c1:47:e2:c4:58:c4:57:11:49:
0d:d4:77:ca:80:9d:2a:6d:ee:80:a9:3c:f3:6c:7b:
4c:6b:85:00:53:63:16:42:1d:ba:48:1e:0d:60:09:
39:4d:07:6d:3d:13:f1:57:5f:a4:7e:fa:16:2c:a3:
79:f3:cf:03:3e:50:87:20:59:94:5e:ad:b7:5e:fd:
3f:fc:90:3b:64:a5:79:32:63:59:0b:b9:3d:44:fb:
19:d5:8a:57:79:d4:cb:b9:e4:76:fc:22:e4:8c:10:
19:08:12:28:43:6f:fd:0a:d4:57:d4:04:d2:2e:1b:
32:49:39:e7:03:63:33:c9:54:50:53:47:bf:d9:4b:
45:cf:41:45:8f:10:82:85:26:da:30:e1:37:c7:43:
46:1f:65:bf:25:b6:06:41:43:68:ca:45:a4:0b:01:
72:0f:24:aa:7c:8e:de:a9:af:24:8a:40:e9:51:ac:
71:85:db:72:94:f2:51:4f:68:03:e2:2e:48:3c:d5:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4C:5D:E5:52:79:77:C8:C6:3B:76:A0:4F:85:4A:D0:6B:89:3D:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/24d91fdb-035d-34aa-861b-c28d2526aaa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:f9:bc:3c:6b:79:6a:e0:20:e7:85:6a:89:ee:0e:c1:e9:3a:
2f:c6:8a:88:52:e3:32:9b:02:9f:24:22:12:2e:86:ea:d9:a0:
d1:cf:88:0d:e0:58:fa:47:79:00:c4:86:99:a5:9a:87:98:42:
6e:2e:89:8a:b6:6c:33:2c:28:5a:92:97:84:db:f1:12:cd:1f:
30:a4:58:3c:5b:98:2e:95:29:18:c4:da:40:d8:88:29:6c:31:
f7:d2:ee:3f:b3:31:6d:aa:84:87:43:7f:05:96:a8:24:24:4f:
fb:21:1b:f2:5d:3d:c4:d1:62:96:c3:1a:54:e9:99:51:52:48:
81:59:96:10:55:59:54:c0:b9:eb:13:fb:c0:ea:e1:49:b2:75:
f9:b4:87:1d:55:ac:07:66:90:59:7d:20:73:81:fd:9e:b8:3e:
66:4e:7e:f5:a1:b9:5c:32:82:2c:c6:85:a4:1e:a8:49:30:0f:
e1:f5:38:82:c5:15:96:36:52:f3:a8:1d:a6:f5:cd:e4:6d:4e:
24:08:42:ce:a7:75:44:e3:ba:f4:51:e4:55:c1:cc:4c:b1:d9:
25:e9:b7:8e:40:e3:08:25:be:20:0a:22:3f:c9:47:af:24:58:
77:ab:73:e4:c0:d8:3a:37:18:02:04:12:51:d6:08:6c:7d:7b:
8d:1f:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 19:09:55 2023 by rpki-client on console-ams.rpki-client.org