Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/798faf8e-6911-3a3e-ae67-fed9f1b7554f.roa
File: 798faf8e-6911-3a3e-ae67-fed9f1b7554f.roa (raw, json)
Hash identifier: 0Aoy+NzJAAogboGOLH4j1efBcRYDoY16i7SifLt7MnE=
Subject key identifier: 2A:B7:21:90:BE:A4:27:95:01:D3:EB:F1:8F:B4:0F:B0:65:ED:26:D9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842C1BEA6A29E943251E7557600
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/798faf8e-6911-3a3e-ae67-fed9f1b7554f.roa
Signing time: Thu 03 Aug 2023 01:00:16 +0000
ROA not before: Thu 03 Aug 2023 01:00:16 +0000
ROA not after: Wed 01 Nov 2023 01:00:16 +0000
asID: 399471
IP address blocks: 166.1.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c1:be:a6:a2:9e:94:32:51:e7:55:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 3 01:00:16 2023 GMT
Not After : Nov 1 01:00:16 2023 GMT
Subject: CN=2767790f-6653-4270-bfcf-fcb0919ac9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:ff:4c:6b:c4:32:7e:77:e6:20:f5:96:49:
68:37:e3:4c:cf:ac:82:57:70:8b:ce:9e:68:9d:18:
bb:95:1e:36:32:65:fb:c3:30:27:66:20:39:86:ff:
09:57:fc:42:fa:35:f1:bb:0a:86:a2:ad:f9:a9:59:
ad:bb:bf:d5:2a:8e:d2:1b:c6:de:cb:fa:c1:d2:af:
ba:1f:66:d3:b7:ce:b9:2f:ad:49:9a:c9:3f:b2:fc:
15:71:66:8a:cf:20:b2:6f:b4:11:9a:7d:4d:6b:d9:
e6:b0:4a:a5:59:03:51:ad:cf:1c:1c:f4:ed:69:26:
04:cd:f0:87:e3:d2:db:50:05:11:5b:eb:20:4f:14:
7b:b3:65:c1:ec:15:95:aa:09:68:60:46:c7:9c:ed:
b3:1f:7d:94:65:0f:23:bd:cb:ac:cd:7d:b6:4c:6e:
af:a9:18:85:8e:5c:d0:f0:90:df:6d:fd:76:5f:84:
5b:52:1c:09:87:96:57:ea:6a:be:5f:56:46:78:c7:
3c:e8:f1:2b:a1:45:36:bf:e6:e3:4c:11:1f:1c:16:
bf:4d:36:8d:36:72:83:4f:57:3f:e5:88:59:8e:c4:
3b:75:f0:83:59:15:22:be:20:05:1c:a8:e6:1c:b6:
e4:c6:fa:5f:ce:35:ca:ad:f8:84:a1:64:55:74:cd:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:21:90:BE:A4:27:95:01:D3:EB:F1:8F:B4:0F:B0:65:ED:26:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/798faf8e-6911-3a3e-ae67-fed9f1b7554f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:aa:3e:8a:85:92:b4:73:7a:ce:61:5b:08:b0:c1:39:46:b5:
64:be:61:7f:75:83:5e:bb:be:12:51:5c:18:54:0e:fb:5b:e8:
1a:6e:f0:77:54:ea:af:79:26:42:9a:46:d4:be:57:0e:d5:98:
82:f2:af:1f:41:d6:f2:a0:cd:2b:1b:22:10:e2:51:21:51:f1:
72:a2:78:29:3c:d5:08:1b:fd:1c:6a:8a:3f:3f:a4:de:84:27:
8d:ee:cf:8a:e5:65:ce:bf:38:04:ed:23:47:c6:98:24:b3:96:
e2:00:2a:8c:20:30:a4:67:a0:69:ff:30:2d:10:43:98:e7:ea:
9a:d3:96:27:65:de:01:d0:ca:9e:fc:f7:d4:3f:a8:3d:80:ec:
cb:11:7b:72:f5:66:82:61:20:d1:7c:00:d9:61:2b:f0:76:a8:
7d:3e:21:af:8c:24:bb:fd:1f:fa:3a:16:06:e6:61:cc:7a:24:
fa:98:6a:13:1e:ae:04:4c:45:af:5f:5c:79:de:80:83:18:63:
bd:53:8d:45:25:08:e3:67:e9:10:92:c0:39:3d:47:ab:c8:7a:
b1:5a:d3:09:bb:f0:7b:61:31:92:32:a0:c7:43:60:1a:c2:00:
c1:38:57:47:92:ea:80:eb:55:e8:0f:d9:0c:03:72:05:cd:98:
a5:eb:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 16:55:55 2023 by rpki-client on console-ams.rpki-client.org