Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7632e578-dffd-3edc-8782-d7bcdd02336c.roa
File: 7632e578-dffd-3edc-8782-d7bcdd02336c.roa (raw, json)
Hash identifier: gbd5d3gaSWKpuIoQqQLH+hY/VbDpoYQB7ktNtTZ/PqE=
Subject key identifier: 58:DB:AD:AE:93:58:92:A2:AA:09:67:8B:E0:AB:38:E5:E0:6D:AF:E5
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D185995E0FE2DFF4231FC080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7632e578-dffd-3edc-8782-d7bcdd02336c.roa
Signing time: Tue 08 Aug 2023 16:38:24 +0000
ROA not before: Tue 08 Aug 2023 16:38:24 +0000
ROA not after: Mon 06 Nov 2023 17:38:24 +0000
asID: 201106
IP address blocks: 166.1.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:85:99:5e:0f:e2:df:f4:23:1f:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 8 16:38:24 2023 GMT
Not After : Nov 6 17:38:24 2023 GMT
Subject: CN=018d36cc-ed8b-423a-9971-d21e65e07495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:a9:46:de:c0:5e:7e:97:9d:a4:0c:fe:c4:
fa:e2:c6:7c:5a:7b:2c:31:ea:6a:d0:b1:2b:e9:93:
43:4f:fd:46:39:8a:e2:97:c3:a0:ea:af:f8:bc:36:
2d:0d:25:de:5b:e5:69:95:2e:c1:c5:f8:63:d8:4a:
f2:a3:7a:d2:64:8b:5e:7f:34:1b:6e:78:0a:3d:9e:
fe:42:2d:ee:39:74:6d:cc:ea:41:76:39:29:ca:81:
64:a1:e7:24:5f:32:e1:8c:70:74:0c:31:51:2a:64:
fe:3f:be:09:7b:43:ac:79:ed:d8:0d:fa:77:7e:ce:
9b:dd:0b:40:10:71:e9:5d:f0:f0:ab:ba:de:84:aa:
41:d6:ef:94:44:41:80:eb:97:cb:3d:1d:9b:18:1f:
c0:b5:86:1b:f1:ed:bc:7f:c8:3d:9c:09:9f:72:18:
c0:7e:18:0e:19:64:4e:78:e9:20:81:ea:39:5b:f3:
44:a3:f0:c2:95:79:5f:26:1f:be:00:c2:e5:13:1a:
fc:ac:21:c2:f1:b7:b9:ff:91:4a:8b:f8:89:dc:6f:
7c:4f:b5:15:00:d2:02:ac:12:5c:87:e0:3f:f5:bf:
75:f4:57:7f:32:12:e0:63:7e:05:97:9d:18:42:3a:
b3:66:d7:33:66:74:b0:af:87:fb:09:ed:18:1f:e2:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DB:AD:AE:93:58:92:A2:AA:09:67:8B:E0:AB:38:E5:E0:6D:AF:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7632e578-dffd-3edc-8782-d7bcdd02336c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:ad:93:20:62:ac:78:17:4f:7d:b9:a6:82:cd:e4:9b:06:20:
64:1b:fc:c0:fb:5f:07:0e:72:1a:d9:86:fb:24:c9:f1:0f:69:
4d:b1:06:c7:45:9d:0f:38:ea:87:8e:d8:4d:ca:b5:c4:9c:0b:
a0:72:3e:37:bd:65:16:53:4c:14:40:b0:a9:6e:ed:6a:12:32:
49:8f:a7:f6:3c:d5:6d:b7:b1:98:54:a1:79:8e:da:e4:7c:98:
14:3d:4b:6b:d2:f8:a4:36:12:92:b1:97:ce:6f:bd:d2:ba:8b:
8c:a0:01:2c:f0:73:63:7c:5b:0d:b2:08:4f:13:3d:7c:7d:70:
39:50:db:fa:fc:fd:f6:e7:34:ca:4a:4a:5b:f2:31:08:e7:77:
38:bb:fc:b6:5a:e0:98:f0:6f:43:f4:43:c5:f1:ee:bb:f1:0e:
6d:68:0b:2e:ce:0e:a9:dc:eb:7b:d3:2a:49:88:68:fb:bb:07:
45:8f:f1:0c:8d:94:05:e9:57:79:ec:79:a7:f5:64:f6:b0:fe:
cf:6d:f1:33:ae:78:47:5a:f0:f8:16:a0:e3:67:44:ba:61:35:
37:01:05:55:ac:df:51:74:97:79:e6:c2:db:f5:59:44:e6:ef:
21:52:a4:ca:70:0a:a9:bc:0d:c3:ac:e1:89:cc:a3:a3:e4:44:
6b:a7:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 19:09:55 2023 by rpki-client on console-ams.rpki-client.org