Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6487aaba-cf00-3360-b632-ff207f78798a.roa
File: 6487aaba-cf00-3360-b632-ff207f78798a.roa (raw, json)
Hash identifier: xX2+edRnCNTh/4EASmxcCqpvYLOnGOJLEtoR9/pSlI0=
Subject key identifier: 46:A5:88:63:22:62:9A:95:F6:E9:01:48:A8:45:CB:B7:94:12:11:3A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845095575BA87E752B708BD76C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6487aaba-cf00-3360-b632-ff207f78798a.roa
Signing time: Wed 28 Feb 2024 02:00:26 +0000
ROA not before: Wed 28 Feb 2024 02:00:26 +0000
ROA not after: Tue 28 May 2024 01:00:26 +0000
asID: 11798
IP address blocks: 166.0.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 22:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:09:55:75:ba:87:e7:52:b7:08:bd:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 28 02:00:26 2024 GMT
Not After : May 28 01:00:26 2024 GMT
Subject: CN=88b256b5-1d69-410d-ac35-277bd7c1e156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:f3:38:78:b5:d2:7a:c4:2f:a2:5a:36:05:
59:7b:9d:63:9e:cd:07:a8:f0:a5:18:4e:0d:bc:ce:
89:5c:93:bb:27:ae:9c:6a:23:64:8d:13:be:db:10:
30:b8:cc:6b:43:b3:36:93:00:22:ef:2f:3f:c4:34:
a2:10:4f:2d:ce:d7:8f:c0:3f:6e:8e:3d:ce:f6:1f:
c0:3e:d5:de:f7:76:07:9d:c2:62:c7:a5:66:1e:cd:
18:d2:be:3e:bc:8b:d9:4b:dd:0e:1b:d0:f2:c6:27:
11:4d:7f:28:c5:89:a4:5c:bc:c0:25:48:53:ea:69:
d2:0b:09:20:b8:50:b3:8a:15:e3:7d:ed:39:ae:0c:
2f:e7:21:2b:ec:d2:83:91:6c:9d:34:55:06:52:fb:
70:6a:f9:14:cb:25:27:ee:80:3b:ec:a4:50:53:58:
26:d3:45:34:64:c8:9c:b0:03:32:3d:10:56:86:b5:
e0:a0:58:d4:d4:c4:93:2f:a4:c1:e1:6f:02:c9:1f:
62:63:56:a0:85:f1:be:41:90:b0:90:69:f9:d6:65:
75:21:17:8e:04:c9:fa:56:da:60:a5:ee:a4:b6:f4:
95:f5:61:24:1e:d9:32:63:fe:13:b2:67:44:1e:6a:
de:80:d6:f6:6f:ec:94:ff:1f:6f:23:6a:71:f0:b3:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A5:88:63:22:62:9A:95:F6:E9:01:48:A8:45:CB:B7:94:12:11:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6487aaba-cf00-3360-b632-ff207f78798a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:00:98:6f:e8:b4:f3:6a:89:b0:ff:79:c0:92:3e:12:bc:58:
d6:92:ad:c7:8c:16:16:9c:c0:ec:72:82:0d:4b:8d:d1:b5:86:
63:f5:a3:85:ae:28:8a:23:b4:e1:76:e7:19:19:80:f4:c4:1f:
20:06:9a:75:94:84:cc:88:21:19:a5:90:bb:02:bc:b9:0b:09:
3c:cd:06:63:f1:33:a9:a4:fa:13:ef:8e:df:8b:11:44:6f:0f:
e0:22:33:9c:ec:55:d2:d0:b7:07:e3:47:2f:d2:a0:bc:86:21:
6d:7a:f3:4b:df:ce:49:d6:92:21:05:08:08:ca:5f:5e:86:1e:
98:f1:c2:bd:83:9f:64:91:27:f8:3b:72:af:94:73:42:59:54:
21:02:36:37:bd:19:08:d1:11:99:05:96:d4:3b:f3:48:33:03:
4d:3d:bf:13:78:2f:f5:1d:6b:85:b8:d3:90:87:f0:72:2c:1c:
e1:af:ea:5b:77:ec:49:c3:91:2d:40:38:bd:cd:46:d2:dc:55:
a7:8a:29:73:bd:5b:37:93:64:5d:5a:f9:25:e8:ea:2d:41:ac:
68:e1:dd:a2:87:44:6b:8c:48:c6:48:da:6b:d2:2a:95:8f:11:
a8:5d:71:aa:62:74:9c:1a:28:c3:41:21:fd:5d:90:28:61:56:
1f:c0:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 00:05:42 2024 by rpki-client on console-ams.rpki-client.org