Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48c92258-4bc0-3f21-8e93-e7341ba4abda.roa
File: 48c92258-4bc0-3f21-8e93-e7341ba4abda.roa (raw, json)
Hash identifier: U1hIm0PXEVuafQIU5RzDiRuwgtKbZO8AkcRLfYMOTr4=
Subject key identifier: 89:A3:29:58:12:00:CE:E0:12:63:C5:02:E6:8F:20:AF:89:C1:9F:83
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858425974877E073AACEC369B7AC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48c92258-4bc0-3f21-8e93-e7341ba4abda.roa
Signing time: Mon 26 Jun 2023 16:27:00 +0000
ROA not before: Mon 26 Jun 2023 16:27:00 +0000
ROA not after: Sun 24 Sep 2023 16:27:00 +0000
asID: 834
IP address blocks: 166.0.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:59:74:87:7e:07:3a:ac:ec:36:9b:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 26 16:27:00 2023 GMT
Not After : Sep 24 16:27:00 2023 GMT
Subject: CN=cba1c751-0cd6-490e-850a-b76a7e14adda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:c8:1f:68:50:0e:a8:4a:18:07:cc:43:7a:
e2:61:c4:29:1c:70:ac:4b:88:a1:3c:32:fd:dc:b6:
9e:ee:86:c9:17:ce:ea:5d:bf:ae:31:a1:d7:54:98:
71:fc:2e:f9:89:e7:f6:0e:e6:c1:15:c7:9e:67:66:
33:41:3c:65:27:85:e7:d8:96:b4:af:83:ff:e4:e8:
02:04:e4:d8:49:d5:43:66:3e:56:5f:fc:c2:71:67:
37:38:fa:82:0f:f6:54:45:3e:80:95:bb:72:64:36:
fb:22:95:1b:d0:1b:14:72:5b:ce:aa:a5:8e:2e:37:
91:ba:bc:a3:51:5c:24:68:1b:b8:58:03:cf:06:c3:
78:19:44:24:71:69:4f:cb:7b:c5:d6:bc:ef:15:15:
8e:a7:16:d0:dd:8c:08:75:a9:01:1c:d5:b7:4f:e1:
e0:bb:b2:0e:81:0d:91:a3:a5:4a:9e:93:2b:56:26:
fc:a8:a2:5c:fd:67:c4:d7:a8:f9:17:b0:bd:ae:7e:
d7:74:d6:35:81:55:a5:9c:72:cb:3f:4a:c8:6b:3e:
99:b8:82:e7:d1:f6:2c:ba:bd:bf:de:41:41:df:9a:
45:48:cf:34:ae:c4:da:fb:f8:ac:b5:9c:81:50:a1:
6f:6e:fc:78:2e:32:de:4d:5d:b2:c0:c5:35:9b:d1:
0e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:29:58:12:00:CE:E0:12:63:C5:02:E6:8F:20:AF:89:C1:9F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/48c92258-4bc0-3f21-8e93-e7341ba4abda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:82:25:33:9e:b0:99:9f:e6:c1:67:88:96:ec:21:8b:54:d5:
11:9d:b0:10:5a:0e:87:f1:90:b7:f3:35:a1:fa:1b:4e:37:10:
76:7f:9d:1f:e3:c0:dd:74:35:42:3e:ee:1a:57:0f:6f:dd:be:
73:6a:c7:59:68:6a:1d:4a:d6:67:b6:ad:bd:a5:48:96:e3:d0:
6a:81:7d:77:a2:5b:f3:8d:57:76:16:e6:fd:06:94:9a:fb:4e:
70:0e:51:e1:2c:40:ed:4b:3d:82:f2:9e:bf:cb:45:b4:7d:12:
df:53:58:e9:ea:12:27:b0:f5:00:d2:74:fe:a5:5d:a6:42:93:
04:54:e8:dd:2d:48:2d:d2:73:40:6f:79:b0:8c:20:19:96:6b:
36:72:7e:08:93:ef:5d:56:93:b4:97:3d:08:45:3a:b3:d3:02:
0e:08:3b:73:ea:b8:5d:4e:a6:22:5d:09:ae:11:b0:2b:f7:3a:
49:22:e5:3e:90:42:e5:68:76:fa:88:87:31:b8:5e:36:e1:68:
ac:f4:c7:f1:f6:be:27:6a:ab:86:b4:c3:25:64:cf:b1:03:d0:
bc:10:99:1b:1b:8c:28:85:99:11:70:2a:84:ef:da:86:4b:d1:
ff:9f:73:f2:95:00:8f:74:8d:be:2c:a5:76:2f:85:be:d2:12:
0b:fe:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 9 19:10:28 2023 by rpki-client on console-ams.rpki-client.org