Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ea7996d-383c-3352-9ee3-9e0764e1a415.roa
File: 6ea7996d-383c-3352-9ee3-9e0764e1a415.roa (raw, json)
Hash identifier: CnXzw1DZ4+s/PEhmKsc53Bp3VVX+jJtSLSMmP6Od1vM=
Subject key identifier: 13:6D:BB:E3:A1:87:F1:9C:27:BC:01:E5:9E:E4:DB:B0:E9:C6:01:0D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858437389B4B4DFAB83DCEDFA3480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ea7996d-383c-3352-9ee3-9e0764e1a415.roa
Signing time: Thu 05 Oct 2023 17:27:37 +0000
ROA not before: Thu 05 Oct 2023 17:27:37 +0000
ROA not after: Wed 03 Jan 2024 18:27:37 +0000
asID: 212238
IP address blocks: 108.165.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:73:89:b4:b4:df:ab:83:dc:ed:fa:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 5 17:27:37 2023 GMT
Not After : Jan 3 18:27:37 2024 GMT
Subject: CN=ebb12986-d165-4457-93a7-26e0bb56dd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:b2:63:c8:8f:98:8d:56:94:d6:59:e3:b7:
89:64:0f:3d:70:0a:a2:ab:4d:20:14:cb:c3:63:ed:
39:69:cb:3d:1a:d3:09:5d:a7:7b:71:6e:f8:b7:bd:
e5:a6:99:5f:c4:de:e8:e7:ba:21:05:ad:48:c8:f7:
dd:72:25:03:a8:ea:b2:a7:c1:16:4f:25:35:94:c3:
91:98:88:30:a4:01:cc:b0:ce:45:a4:d2:db:bb:0f:
ee:41:34:b8:be:ab:09:86:9d:4a:d1:17:68:25:9f:
19:94:3e:d7:94:7a:de:93:c1:54:b9:98:e7:c5:e7:
5b:5e:4b:0a:8b:b0:f2:59:8a:00:c6:43:b3:10:0b:
45:85:9a:0c:15:4e:06:9a:d1:aa:f1:4b:23:97:87:
b3:58:e6:79:78:bc:f1:15:38:1e:0a:02:85:10:61:
47:5b:f7:a4:ed:9d:4c:e1:08:f6:48:1b:6f:24:71:
3e:d0:cd:c3:01:0a:ce:b5:43:62:1f:83:4a:53:73:
ee:8f:56:82:88:59:04:2b:ea:4a:78:6d:b5:0d:75:
60:f4:8e:4a:b8:45:61:24:b1:bd:83:a4:79:53:5c:
c4:63:8a:41:7c:e6:b3:dc:9f:5a:a8:34:e3:fe:9a:
9a:fe:c5:fe:86:90:51:0d:65:76:16:3f:ff:8a:93:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:BB:E3:A1:87:F1:9C:27:BC:01:E5:9E:E4:DB:B0:E9:C6:01:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6ea7996d-383c-3352-9ee3-9e0764e1a415.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:72:21:8d:16:2f:84:85:3a:3f:c4:92:27:10:7b:6e:a3:cf:
8d:60:0e:6e:95:70:d3:fd:97:52:df:2e:10:2a:05:d6:a2:fc:
f1:be:90:01:f0:df:b5:fc:da:e1:5c:4d:21:51:1a:c4:42:3e:
49:a0:50:54:e6:bf:5a:79:f1:b3:d5:86:26:99:93:49:e4:29:
b4:74:61:84:e1:bc:1d:3c:8c:93:d9:7b:18:fc:b0:1c:1c:66:
51:ef:26:3c:9b:e2:e9:6a:f7:f0:a7:bb:ad:65:c7:a2:fe:bd:
46:c9:9e:a4:7d:db:c2:4b:fd:73:81:5e:55:a3:f5:0d:68:72:
30:97:24:e3:d5:50:fe:73:76:42:4f:a5:e2:28:05:13:d7:8d:
37:1e:21:07:25:42:6b:ba:10:11:b9:f8:d5:9a:1d:d7:b8:b3:
0a:cf:c9:de:23:f4:89:1f:b5:7a:59:90:e4:ce:0e:55:61:d1:
36:1c:42:2a:e7:bb:73:90:92:9a:0c:4e:3d:9c:4e:b8:f4:25:
35:a7:78:b5:24:5b:e6:9d:3c:42:11:cb:b4:21:7b:d5:c4:a5:
61:51:7c:b9:05:44:2d:dc:a7:70:ee:25:23:c6:14:45:b9:b8:
49:6d:0e:db:0d:df:1a:ff:4a:52:47:5a:21:aa:56:bb:80:62:
97:ed:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 5 15:29:44 2023 by rpki-client on console-ams.rpki-client.org