Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e689375-de72-33d4-b385-a398d8a3721c.roa
File: 2e689375-de72-33d4-b385-a398d8a3721c.roa (raw, json)
Hash identifier: qEp6yhFrOGujCdo4rkm//Oxc0RHO/L3ZY/+7bll0ssk=
Subject key identifier: 68:02:FF:07:F1:B1:5B:14:BE:58:40:BC:57:04:E8:8E:7E:6D:57:75
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842F6005C2A46E3F0FF7D5AA980
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e689375-de72-33d4-b385-a398d8a3721c.roa
Signing time: Mon 21 Aug 2023 18:14:50 +0000
ROA not before: Mon 21 Aug 2023 18:14:50 +0000
ROA not after: Sun 19 Nov 2023 19:14:50 +0000
asID: 11798
IP address blocks: 166.1.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:f6:00:5c:2a:46:e3:f0:ff:7d:5a:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 21 18:14:50 2023 GMT
Not After : Nov 19 19:14:50 2023 GMT
Subject: CN=4fcb77c6-5adc-4eb5-b0ea-1dfdf36469ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:82:d3:27:a1:37:23:01:51:22:3f:0a:11:
a2:3e:ba:a4:fa:e8:71:e9:b4:29:09:e3:3a:4a:62:
1c:15:d8:00:43:ee:c2:c1:0b:ae:5c:bb:c1:30:75:
fd:20:5c:b9:33:ba:1c:8d:f0:f6:28:37:3c:3c:93:
28:8a:0c:b7:59:38:d1:86:29:54:f0:ed:d8:03:01:
aa:ff:3f:0b:be:ee:5b:06:74:97:3f:61:cf:33:b0:
30:7e:2b:62:ee:d2:3b:b2:89:6c:7f:8c:5d:49:b2:
02:b0:8b:ab:a1:34:ce:b3:b8:30:4b:f8:8b:04:b9:
9f:e6:23:5e:a9:61:c7:3e:19:00:22:2c:d1:99:9d:
51:bf:47:d2:85:cd:24:22:37:5d:f3:27:74:b6:e6:
44:c6:b6:33:c8:12:37:5b:bf:8d:9b:f1:ea:e6:ff:
38:7a:6a:34:95:e9:de:50:52:3f:61:34:3b:63:d7:
9f:d1:f8:90:7c:84:fd:f3:1d:f6:43:39:f2:36:5c:
cd:01:14:b8:1e:15:7e:83:0a:ee:3c:8e:70:54:84:
e0:d6:93:ad:e7:36:25:92:55:e2:a6:cd:c6:95:e7:
d2:55:a5:6e:07:d8:41:45:cb:78:04:1d:33:8f:a6:
ca:d8:9e:a8:fc:1a:8d:02:36:5a:90:7e:6e:2c:5e:
70:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:FF:07:F1:B1:5B:14:BE:58:40:BC:57:04:E8:8E:7E:6D:57:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2e689375-de72-33d4-b385-a398d8a3721c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:08:97:c1:a9:db:fd:aa:af:59:20:3a:18:32:60:ea:47:e9:
55:b4:75:de:6a:84:42:38:a5:c9:e8:99:3d:b4:57:0d:ad:7e:
1c:cb:0e:73:9a:df:4a:c1:54:b3:c1:62:80:cc:51:19:0e:4d:
c1:fb:63:1d:75:0b:f5:bf:ca:2a:64:9e:9e:1d:be:bd:14:a0:
b0:ad:94:7f:ef:63:d1:bb:24:c9:dd:53:3c:72:e8:71:10:b3:
9f:43:a3:5a:38:ad:60:f9:b7:03:45:1d:98:6b:52:1a:69:23:
47:38:5f:d5:05:3e:56:a0:e2:25:55:bd:ef:e6:0d:44:a3:0f:
27:29:29:af:dc:1c:8d:ed:f5:a8:47:27:2d:12:bc:43:3b:eb:
4e:06:e1:36:fa:c7:0b:64:eb:cb:8f:01:e8:f6:3c:3e:68:54:
03:bf:fe:03:19:f9:46:ea:32:cb:47:ba:c9:15:ae:5d:bb:05:
39:89:0f:22:76:26:28:0e:eb:6c:9b:08:c0:03:bb:46:b0:5a:
de:73:84:04:ed:b3:1d:73:14:0f:72:01:ca:56:33:cb:08:cd:
13:34:48:12:9a:f7:6d:26:6b:d1:9e:96:ec:2f:96:b8:f1:b2:
f8:9a:f5:1f:44:1c:1f:db:e1:2d:3d:a4:fd:0b:14:5a:be:19:
b5:eb:f7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 19:18:11 2023 by rpki-client on console-ams.rpki-client.org