Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9196673e-6c59-37ca-a240-57afc1bbb058.roa
File: 9196673e-6c59-37ca-a240-57afc1bbb058.roa (raw, json)
Hash identifier: hY6hsjhcJDncd4nzGoRMA6IP8VoxP8oZLLNsVQ7SN+g=
Subject key identifier: DE:50:B1:6C:76:6A:01:48:4E:F5:F6:8B:D3:29:BB:E0:72:7B:FA:6B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842D1822FB284D4045E320A8200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9196673e-6c59-37ca-a240-57afc1bbb058.roa
Signing time: Tue 08 Aug 2023 16:31:31 +0000
ROA not before: Tue 08 Aug 2023 16:31:31 +0000
ROA not after: Mon 06 Nov 2023 17:31:31 +0000
asID: 201106
IP address blocks: 166.1.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:d1:82:2f:b2:84:d4:04:5e:32:0a:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 8 16:31:31 2023 GMT
Not After : Nov 6 17:31:31 2023 GMT
Subject: CN=5da8a434-2d28-44c8-b21f-f94b9130c72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5f:ff:42:51:20:a8:d6:50:0d:33:c6:98:5e:
d8:3c:4c:53:52:0b:34:e4:73:5a:8f:8f:1a:ad:e3:
4f:75:d8:88:da:b7:5c:01:0f:d5:65:3e:13:26:f8:
d3:a1:2e:17:e3:d8:43:c9:41:27:42:a2:dc:bd:3f:
36:b9:90:20:96:19:c4:71:a9:a0:85:75:a4:07:37:
5f:b4:13:43:dd:c6:d4:f6:8f:f7:18:49:94:52:2a:
cf:89:c4:e4:01:34:94:c6:00:96:aa:de:2c:12:52:
0a:01:ee:cc:b3:32:88:30:90:20:87:cd:5e:0d:cf:
ae:16:58:97:35:27:65:cf:74:da:16:e2:c5:cc:0d:
4b:ac:a9:d4:8c:6d:22:d5:8f:01:f8:3e:26:64:2b:
c7:e8:c0:3e:16:a7:27:01:b2:57:d4:37:cc:6b:19:
ad:8f:68:82:fc:02:19:74:98:f5:91:d9:0f:8a:c7:
0b:86:67:8c:6d:ad:6a:2d:03:7e:5a:c4:5f:12:23:
24:f3:5c:50:7b:37:41:f7:00:0a:66:c1:72:82:57:
e1:5b:95:c1:48:ea:cf:0b:b1:15:17:69:8a:2d:a8:
82:01:f2:2f:7f:8a:14:65:ca:8a:ea:f6:ff:9a:25:
9a:0a:25:87:52:78:97:fe:46:6b:f2:20:be:cb:a8:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:50:B1:6C:76:6A:01:48:4E:F5:F6:8B:D3:29:BB:E0:72:7B:FA:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9196673e-6c59-37ca-a240-57afc1bbb058.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:58:c1:f4:55:4b:30:dc:cc:7c:0b:55:6c:3c:84:7b:06:db:
94:0a:64:bc:16:8a:26:86:a5:4f:61:c0:8e:3f:61:0e:eb:bf:
23:a2:fa:bf:68:dc:bb:68:8f:e0:5c:ac:48:69:b6:84:a4:1c:
4f:93:2b:bd:af:c2:3c:be:49:e8:9e:61:dc:b8:f5:64:ec:6a:
3d:d4:37:42:0b:70:17:fa:73:24:02:2e:dc:85:46:5a:59:f1:
bb:ae:67:34:3f:79:04:a0:ea:59:ff:f1:c4:b3:54:27:2e:a8:
b8:24:a2:b1:fe:5b:33:d0:c4:a2:0a:23:59:2f:51:80:00:6e:
21:18:fe:a3:f1:a3:0b:ee:10:83:87:1f:fd:ca:e0:6f:13:0c:
b1:91:87:1f:25:5c:96:c0:b8:5a:40:98:65:87:c0:1d:5e:eb:
34:55:c4:48:36:8e:fb:07:31:84:6e:9e:1f:51:f3:b7:71:b8:
c6:c6:e5:18:6f:e0:db:a2:5e:75:15:27:b3:73:59:bf:c9:18:
f3:1a:a2:17:48:b8:43:07:ef:67:41:49:8a:1c:c6:43:34:3b:
4d:f1:86:ab:42:8d:bc:77:df:2d:57:74:4d:6e:8b:f0:34:31:
79:1b:a9:35:e9:46:9b:ec:56:51:50:c5:97:e0:18:8d:c1:84:
de:38:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 19:43:07 2023 by rpki-client on console-ams.rpki-client.org