Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dcef397-00f5-37c9-a401-f42cae196304.roa
File: 7dcef397-00f5-37c9-a401-f42cae196304.roa (raw, json)
Hash identifier: 4KjuJ+hKNY16lFBASJjlPjvuRHKdDatTdAegvFbYKVw=
Subject key identifier: 70:42:93:55:06:79:9D:E4:5A:0E:4E:F4:8D:10:98:37:94:FB:83:C2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285845278F0EA1B365196007B22180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dcef397-00f5-37c9-a401-f42cae196304.roa
Signing time: Sat 09 Mar 2024 21:50:51 +0000
ROA not before: Sat 09 Mar 2024 21:50:51 +0000
ROA not after: Fri 07 Jun 2024 20:50:51 +0000
asID: 11798
IP address blocks: 166.1.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 22:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:27:8f:0e:a1:b3:65:19:60:07:b2:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 9 21:50:51 2024 GMT
Not After : Jun 7 20:50:51 2024 GMT
Subject: CN=b461a1b1-69fb-422b-9c14-b48fea1344f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:df:67:f2:b9:b7:88:a8:0a:80:9f:81:56:
1e:52:97:8f:42:d3:69:3e:96:3d:3e:61:5f:4f:94:
7f:55:9c:3e:65:27:15:82:d7:06:79:1d:e8:79:24:
bc:95:35:0b:d0:42:a3:90:c8:a2:58:60:bb:ff:e4:
87:d2:92:23:61:59:21:c9:ab:7f:c2:38:80:07:9b:
71:38:ff:84:f4:22:b9:98:99:91:14:64:63:4a:be:
1e:62:e9:8e:e3:e3:a3:8d:25:e6:1c:81:e2:38:c1:
71:33:6f:e7:24:d0:65:17:ee:6f:e6:bf:3c:e6:37:
02:63:1e:97:20:51:dd:18:45:f5:4c:38:d8:a4:91:
22:42:37:84:73:1a:8c:01:75:9b:c5:3c:f1:62:75:
3d:47:27:60:e0:2c:23:dd:78:f5:f6:bd:3d:c8:f0:
c9:fd:cb:62:50:4f:d0:66:83:52:2a:c9:e5:51:06:
69:16:c5:dd:ff:2a:3a:8e:a0:b8:14:c1:d9:00:fd:
89:09:d8:83:eb:ac:67:8e:aa:3c:64:bc:68:a6:6e:
27:09:38:61:c0:01:51:58:9d:45:5b:83:b9:ba:54:
52:92:d1:83:bc:42:0b:58:15:d2:cf:f1:d9:7b:fa:
58:b8:72:4a:e8:f3:fb:91:87:72:d4:f3:08:0b:e9:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:42:93:55:06:79:9D:E4:5A:0E:4E:F4:8D:10:98:37:94:FB:83:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7dcef397-00f5-37c9-a401-f42cae196304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:d9:d1:87:52:2b:92:ed:6a:af:c2:72:d3:8f:3b:ce:c6:cf:
95:ee:0c:e7:c0:ca:50:e4:b8:8e:65:8e:6f:44:d4:60:30:51:
7c:2b:31:66:6f:41:d7:88:6e:0d:dc:f8:68:86:38:c4:03:84:
ac:e0:f9:31:c4:de:62:f4:39:14:13:44:76:58:2c:24:ca:75:
bf:9e:e1:25:b6:7d:09:5e:ed:88:94:cb:74:ac:1d:18:b4:d2:
8b:3a:8a:b2:d3:5c:a7:f0:ed:ad:10:16:b9:e6:52:44:70:f1:
55:d1:b4:fb:d3:2e:cb:43:1b:19:67:d3:dc:ec:f5:e0:56:a0:
23:c6:7c:68:2f:f7:1c:bf:48:a6:42:fb:ca:5a:91:5e:dd:63:
03:d2:cf:a0:8b:5b:a7:ce:3f:f1:2b:d0:1e:84:2f:9e:58:4b:
35:f0:61:b5:85:1c:2c:36:06:c0:92:5b:ef:8c:a7:70:3b:32:
3f:95:51:25:90:b8:10:bb:24:a0:4a:55:94:b2:ca:e3:0e:6f:
3b:8b:6e:81:2a:b2:bf:c5:2a:c1:09:83:80:22:17:95:3e:dd:
8d:29:f3:65:e8:51:a7:95:4c:2a:31:3e:fa:12:c0:e4:7f:26:
e0:3e:a5:e1:d3:ec:ff:02:f6:ba:92:36:3b:49:4d:dc:e2:cb:
cf:a1:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 23:37:46 2024 by rpki-client on console-fra.rpki-client.org