Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9838f33e-c7fb-3696-83da-efb1290e92dc.roa
File: 9838f33e-c7fb-3696-83da-efb1290e92dc.roa (raw, json)
Hash identifier: okVBoaevZ0yagxnqeI5gALBgMVSkhRRQqeK/r46JLAU=
Subject key identifier: 4A:CD:40:05:6C:DC:36:3A:D3:C3:34:FA:C5:81:3D:A8:62:FF:6D:80
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446FEDECF2C1B265D591200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9838f33e-c7fb-3696-83da-efb1290e92dc.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Tue 08 Aug 2023 11:55:41 +0000
asID: 207279
IP address blocks: 166.1.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:fe:de:cf:2c:1b:26:5d:59:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 8 11:55:41 2023 GMT
Subject: CN=dedc6a5e-eb75-47fa-9b2d-30f8a48e293f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:c3:22:f7:6e:4b:96:f7:09:34:d8:09:7c:
b8:79:72:21:35:bc:fa:7c:f5:3b:82:6d:34:80:6a:
d3:61:13:6e:0f:d1:aa:2e:7d:0a:bd:22:30:be:75:
c6:b5:c4:77:33:2b:ef:79:28:e0:7b:10:28:bf:90:
bb:83:a5:7c:2b:d6:9b:ab:73:5e:6f:a2:ce:3f:ab:
21:02:42:45:f4:b5:b2:da:26:40:35:71:89:4c:e0:
c5:f5:73:17:e0:af:78:83:4c:1d:55:90:78:10:5e:
cf:5f:c9:cb:2e:b8:4b:b1:da:d5:71:5f:11:4b:ef:
ce:a6:12:3e:96:a2:66:05:57:c5:dc:1c:5f:8a:52:
49:bf:40:d6:4d:37:96:eb:18:d6:cc:13:39:7e:69:
ae:b6:4e:72:33:47:17:63:9c:fa:65:5c:89:b6:14:
cf:b8:0b:65:5e:65:0f:1a:37:08:0f:87:8f:fb:7e:
22:a0:85:47:03:4f:df:30:27:35:55:60:4b:3e:71:
1f:1b:ee:63:d7:f9:40:d4:20:f1:22:01:30:53:f4:
03:d9:94:3d:d0:6e:8d:f5:45:3d:c7:27:3e:f8:4e:
89:90:d7:00:c5:eb:37:c9:1c:e7:e5:52:82:d4:ff:
00:08:af:19:ef:94:02:ae:09:3f:01:95:d4:b2:7a:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:40:05:6C:DC:36:3A:D3:C3:34:FA:C5:81:3D:A8:62:FF:6D:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9838f33e-c7fb-3696-83da-efb1290e92dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:70:c3:93:bf:59:73:77:73:c0:28:c0:ab:dc:55:d0:c5:54:
3f:7e:0f:46:e0:5c:d3:a2:fb:fe:33:fe:87:bf:c2:74:2e:fa:
00:49:59:63:a9:d0:02:66:cd:b2:00:08:f7:b3:f8:e5:02:33:
ab:23:41:98:ea:fa:08:4f:20:42:62:60:ac:7f:db:9f:d4:2c:
0f:bf:57:02:a0:3e:7a:18:b5:cb:58:41:36:b9:d0:a5:26:53:
1b:e4:61:76:37:3a:bc:a8:53:80:25:0c:c0:2a:58:b2:87:57:
f4:ec:c3:4b:cd:59:db:72:80:22:73:86:66:1c:7f:f0:d4:af:
27:11:8d:cc:d5:87:ea:60:4e:c0:d4:79:72:be:42:a6:92:86:
1b:7d:18:2d:f6:fd:f5:61:4e:cb:71:bd:aa:c6:70:0b:be:e8:
1c:3b:54:41:da:4b:7f:b4:04:c1:f9:4f:79:bf:d3:00:3b:6a:
9a:0e:03:47:1e:92:af:a8:93:d2:4e:7a:ba:08:e0:7d:48:9f:
d6:82:04:5a:02:08:c3:30:a0:03:4a:8a:d4:08:34:cb:d5:5d:
e0:4b:72:ba:65:af:6e:8f:84:44:aa:70:a9:2a:f8:a5:b0:57:
be:21:10:dc:2b:c7:54:63:91:f0:75:d6:dd:a1:26:aa:b1:50:
39:15:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:56 2023 by rpki-client on console-fra.rpki-client.org