Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2abc967a-84b3-3418-b39d-3e3821f110c2.roa
File: 2abc967a-84b3-3418-b39d-3e3821f110c2.roa (raw, json)
Hash identifier: 4b2m/z4SLRD77O3K8n8CI3pHzTK9zGIJG0eJDle+d6k=
Subject key identifier: 72:FF:33:76:06:EC:3A:02:A7:A1:AC:27:DC:08:3C:55:FD:63:D5:C1
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843C7635F96E56C0583FCAAFD60
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2abc967a-84b3-3418-b39d-3e3821f110c2.roa
Signing time: Sat 04 Nov 2023 18:18:17 +0000
ROA not before: Sat 04 Nov 2023 18:18:17 +0000
ROA not after: Fri 02 Feb 2024 19:18:17 +0000
asID: 11798
IP address blocks: 166.1.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:c7:63:5f:96:e5:6c:05:83:fc:aa:fd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 4 18:18:17 2023 GMT
Not After : Feb 2 19:18:17 2024 GMT
Subject: CN=ae780ffc-e82b-41b6-9700-64adae6abd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:3a:ea:5e:c4:d7:84:3c:54:96:10:c7:a6:
f2:81:96:94:0b:d1:7d:e3:8a:6b:9e:b5:31:19:ff:
03:94:05:23:66:9d:7c:48:96:f2:16:e0:b6:93:64:
a2:a2:65:20:e3:94:32:6d:9c:dd:8a:22:9b:18:c3:
f5:5f:01:56:a6:a3:8f:7b:12:19:65:76:5e:e0:9b:
5e:af:ae:65:70:41:45:4c:ae:27:df:b3:14:99:c2:
c6:46:eb:d4:ee:55:78:a8:6b:55:f3:8b:53:86:41:
94:a7:65:79:1f:95:03:b2:54:d1:57:a0:04:c9:b5:
ff:ca:b3:7f:87:de:63:89:4e:74:50:eb:35:d6:dc:
ec:2f:56:f0:4b:dc:25:3b:65:df:88:54:80:97:62:
06:c9:45:91:6e:81:ac:7c:0f:fc:0b:a1:23:e1:bf:
e9:7c:1a:7c:d2:76:b4:1c:52:7d:c3:c5:13:1f:59:
6e:92:6c:7c:04:ac:b8:ac:0c:6d:65:e5:16:9b:8f:
c2:3f:68:4f:ff:96:65:ea:31:56:8d:6c:86:15:4f:
5a:f9:3f:ff:88:46:bb:d9:1c:d0:df:f4:8f:f5:06:
a0:7e:b7:17:73:ac:52:96:f2:a1:73:0d:5c:e2:7e:
dc:22:5d:a3:23:53:08:99:98:bf:c7:27:af:a9:be:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:33:76:06:EC:3A:02:A7:A1:AC:27:DC:08:3C:55:FD:63:D5:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2abc967a-84b3-3418-b39d-3e3821f110c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e1:c6:1b:4d:4d:b1:41:48:f0:ff:37:2f:88:be:7f:f8:29:
34:a5:ac:ae:8f:10:ed:ae:1a:5c:43:1e:e9:70:71:21:05:29:
27:9f:4a:7b:bc:48:fb:d6:38:0e:2b:5b:a0:91:4c:04:37:a4:
5d:ab:90:1b:3f:0a:f0:17:0e:ed:85:05:c6:15:71:65:25:e5:
48:2c:b9:a4:3d:b3:7c:93:f1:7b:c9:ae:27:f3:dc:3c:07:de:
d8:65:21:1c:96:94:35:f3:85:82:1c:fc:d1:35:8f:42:7e:99:
99:03:31:27:9f:95:cc:30:28:61:bc:2f:fb:53:81:8e:2d:0c:
ec:98:a4:76:b3:22:11:91:19:e3:cb:51:34:a5:3f:96:ae:b8:
ea:81:ff:39:7e:55:6c:08:c5:7f:4a:14:68:28:31:d4:81:f4:
92:16:25:24:ac:e9:18:5e:21:9c:90:42:38:0d:56:9a:e1:48:
e6:2b:a2:e9:a3:16:30:d7:4c:8d:37:1e:71:1c:65:2b:51:dc:
fd:01:aa:9b:87:1f:88:10:6b:9e:72:db:72:6d:d7:d9:a6:c1:
2d:44:7f:f2:37:fa:dd:08:06:57:af:3a:fc:35:66:2d:dc:74:
08:05:05:4a:ac:19:70:cf:53:84:77:d6:d3:2f:3e:15:80:b2:
95:8e:59:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 18:41:33 2023 by rpki-client on console-fra.rpki-client.org