Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2914204b-7e5c-3655-b618-e251f29ae0d9.roa
File: 2914204b-7e5c-3655-b618-e251f29ae0d9.roa (raw, json)
Hash identifier: s+XWBzaSIJmZAoUGkRZj9jybyGbfzomNzwhy9sEanrw=
Subject key identifier: 46:9F:0B:37:1B:AB:43:09:11:1F:7D:9B:43:FA:0A:40:A7:04:21:A1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D82E78645125D62A4542A640
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2914204b-7e5c-3655-b618-e251f29ae0d9.roa
Signing time: Fri 11 Aug 2023 01:53:30 +0000
ROA not before: Fri 11 Aug 2023 01:53:30 +0000
ROA not after: Thu 09 Nov 2023 02:53:30 +0000
asID: 11798
IP address blocks: 166.1.48.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d8:2e:78:64:51:25:d6:2a:45:42:a6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 11 01:53:30 2023 GMT
Not After : Nov 9 02:53:30 2023 GMT
Subject: CN=b5432f2d-ad70-478e-9c8a-8765b0da5226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:e5:4d:2a:4d:1f:5c:5b:31:50:95:2e:ce:
ba:8f:77:ee:74:98:16:6e:0d:a5:d5:fe:65:9d:de:
70:dc:9f:cd:c4:50:1f:d0:ce:91:20:9f:01:ef:29:
ff:08:ec:ad:a9:18:ca:e5:a1:fa:11:b5:b4:d7:07:
c8:9b:76:84:bb:e9:44:99:e6:cc:fa:2d:c0:48:bf:
07:64:80:7f:0c:9f:97:30:a0:dc:ab:33:78:8a:cd:
99:22:be:04:60:82:38:cd:28:bb:f6:b8:ce:2a:40:
0d:42:97:c3:de:1e:6b:fc:7d:75:44:a0:8f:16:bb:
95:26:ab:c8:c6:5e:52:e6:50:6e:46:d1:81:24:c3:
4f:b8:3e:49:6e:3d:b0:f6:6e:23:e3:23:c5:61:06:
74:9f:c7:8e:aa:e2:69:9c:79:3a:92:59:ef:92:55:
07:7b:01:be:7c:6e:2e:91:91:fa:82:e4:2c:75:2d:
26:c6:26:86:fa:d3:39:18:fc:9a:60:d0:8c:a0:59:
f3:fd:61:db:a1:ed:43:a0:29:6a:65:a7:48:14:30:
68:97:da:60:de:95:40:95:73:fe:cb:47:6c:0b:fb:
e9:50:e1:ea:1f:2f:15:fc:15:26:e8:4a:4f:66:e3:
6c:2b:83:41:67:8b:67:82:07:27:a0:3f:67:a3:cc:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9F:0B:37:1B:AB:43:09:11:1F:7D:9B:43:FA:0A:40:A7:04:21:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2914204b-7e5c-3655-b618-e251f29ae0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:92:65:43:63:08:da:56:2c:f0:30:b5:0d:39:6c:6f:56:6d:
15:f4:5a:f3:f5:13:5c:a3:37:f1:bb:f2:4d:44:c1:f2:43:bb:
cd:fe:03:24:e8:f0:05:e8:35:aa:8c:f1:6f:12:ce:f4:7c:b8:
2d:b5:5e:cd:28:0d:f5:c8:a4:d8:3e:53:fb:31:4f:ec:49:77:
ef:8f:5a:22:e2:b8:d9:aa:70:f4:ee:6b:68:b6:23:ac:29:47:
c3:1d:91:e9:3b:d5:2a:b2:a0:f6:08:2e:05:9a:a2:fc:c9:b1:
91:de:75:dd:9b:7e:80:ef:5e:87:6f:89:67:04:0f:6e:02:f4:
0e:2d:ec:97:70:c7:d8:8c:6f:dd:a9:eb:67:aa:36:03:e1:a6:
61:c3:d4:48:08:0a:3f:06:fd:fb:df:c6:45:3c:a6:45:fe:85:
65:71:6d:f9:8a:a9:f5:f7:65:81:47:2d:8e:39:f5:d0:4c:97:
1f:f8:0c:1e:bb:73:86:1e:af:ef:35:3d:73:34:07:45:23:98:
f0:6d:48:de:17:b4:a7:87:6e:9b:65:70:60:b4:23:c9:04:f4:
cd:99:87:11:db:29:c0:32:1b:de:95:f6:11:21:cf:f6:f4:76:
a5:57:a8:97:1e:25:c4:b1:c6:84:74:89:e7:15:a3:3f:8d:e2:
db:2b:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 15:10:44 2023 by rpki-client on console-fra.rpki-client.org