Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749c3beb-145d-3e92-9a0e-e22bae8217ea.roa
File: 749c3beb-145d-3e92-9a0e-e22bae8217ea.roa (raw, json)
Hash identifier: cpC9XWghTx6ycOv+DzERizFQwIGSvM1fGDHdo6HWSgU=
Subject key identifier: 8C:6F:3E:F0:76:14:8C:E8:7F:01:B4:29:8A:66:C5:7C:4A:03:93:72
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842DC6D88D4DD2735DDAFBDC800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749c3beb-145d-3e92-9a0e-e22bae8217ea.roa
Signing time: Sat 12 Aug 2023 14:23:48 +0000
ROA not before: Sat 12 Aug 2023 14:23:48 +0000
ROA not after: Fri 10 Nov 2023 15:23:48 +0000
asID: 21082
IP address blocks: 166.1.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:dc:6d:88:d4:dd:27:35:dd:af:bd:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 12 14:23:48 2023 GMT
Not After : Nov 10 15:23:48 2023 GMT
Subject: CN=3a91495b-2c5d-41f7-aa77-08e2f5d063cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:b6:5c:2c:a4:a6:ed:ea:4e:b8:db:86:8a:
9b:54:73:3a:69:96:d1:8d:f4:58:0b:cf:33:6b:69:
88:a8:65:31:61:7c:69:c7:00:e7:60:a9:10:88:2c:
7e:4f:e3:9a:90:f4:f8:86:43:71:8d:19:90:fb:de:
55:c9:e2:0b:4b:91:62:b3:a0:bf:69:d3:25:34:c9:
1f:56:9a:19:8b:8f:55:77:a6:d6:b5:a1:65:6c:fb:
83:19:5a:b9:b5:19:6e:ab:c4:5c:1a:ac:09:e2:a3:
db:1d:f9:e8:46:4c:0b:ff:a9:2b:90:69:5c:d4:e6:
50:b4:b7:36:3d:cf:31:c5:4e:a4:7d:80:fe:4c:5a:
e6:a4:43:43:22:e0:c7:41:4e:57:f2:73:f3:c9:fe:
d6:dd:58:2e:f0:c7:71:f3:58:86:f9:bd:34:0c:38:
12:fe:a9:c7:0b:e1:11:68:be:e5:12:94:25:ea:8b:
1b:c3:c5:8f:63:6f:f1:75:37:68:1d:d3:c4:80:1f:
f2:6f:46:21:57:82:62:09:e5:3a:fa:ea:b4:62:d6:
b3:9e:c6:1d:4c:cd:6f:38:e9:28:7d:04:a2:72:5d:
d9:1f:ef:dd:d8:dd:0e:e4:61:83:ff:7a:0d:82:1c:
90:ba:63:64:35:6b:3b:fd:e0:e3:1d:a1:10:fb:a9:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6F:3E:F0:76:14:8C:E8:7F:01:B4:29:8A:66:C5:7C:4A:03:93:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/749c3beb-145d-3e92-9a0e-e22bae8217ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5d:98:b7:4a:33:17:bc:44:41:76:6b:03:a9:b0:94:99:d8:
99:90:e3:82:91:16:0e:61:a9:53:05:c8:84:26:23:66:d6:6b:
a3:cc:6f:4f:4c:4d:fc:88:43:ac:9e:bc:de:a6:0f:15:a8:9b:
2d:0a:f3:15:b4:fa:b6:c5:4e:07:38:0a:42:b9:ec:4d:e4:38:
43:be:05:9e:51:60:15:2b:49:7e:f8:0a:44:f7:84:7c:cf:b0:
fd:4a:6f:2a:69:a1:88:c9:03:b4:30:89:21:1a:3f:50:ad:a9:
fc:af:5d:9d:28:31:ef:09:d5:fc:e2:b4:00:82:10:4d:d0:11:
1b:83:e0:1f:5a:b9:1e:e4:8f:df:e3:95:e5:cd:0b:a0:99:35:
8b:9b:69:0b:0a:7b:b2:34:ce:b8:4d:c0:c4:db:53:75:60:56:
0c:05:b7:ad:ca:c8:00:f9:0b:62:14:87:ad:59:ac:e9:7f:3e:
86:ab:68:77:ca:c0:e7:2a:2e:dc:17:31:88:60:18:bc:43:b9:
1f:35:fa:2e:12:06:db:f9:a8:61:36:df:c2:5e:6c:0e:d5:1e:
03:15:f2:d8:ca:95:61:f9:70:64:4a:b7:de:83:0a:9a:0a:a3:
71:3a:ef:83:63:7c:9a:da:03:00:6e:e1:c7:d2:ce:3c:b9:ec:
6f:43:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 16:00:33 2023 by rpki-client on console-fra.rpki-client.org