Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cbeae77-044d-3dcc-a0cf-09f5a7e5ca2e.roa
File: 9cbeae77-044d-3dcc-a0cf-09f5a7e5ca2e.roa (raw, json)
Hash identifier: IBsSuoVIRKkptySz79Jezid7kWgMHf13SpRiT3+2ZCs=
Subject key identifier: 07:C0:F2:51:A1:34:EF:A3:8C:65:28:D8:C4:CE:7B:4B:B0:E9:F1:26
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285843E600889503877D7242ABEC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cbeae77-044d-3dcc-a0cf-09f5a7e5ca2e.roa
Signing time: Wed 15 Nov 2023 17:29:12 +0000
ROA not before: Wed 15 Nov 2023 17:29:12 +0000
ROA not after: Tue 13 Feb 2024 17:29:12 +0000
asID: 834
IP address blocks: 166.0.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:e6:00:88:95:03:87:7d:72:42:ab:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 15 17:29:12 2023 GMT
Not After : Feb 13 17:29:12 2024 GMT
Subject: CN=6dae46b2-9156-4b86-ae29-4c080abf92c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:c8:0c:28:16:49:14:3a:9c:d9:d8:f1:ac:
99:c7:03:df:af:cc:2e:09:fa:6b:7c:f7:8a:b2:86:
02:49:a4:d2:77:bb:29:41:11:99:00:aa:22:41:e6:
00:2b:f9:64:17:bd:f9:da:13:b8:5b:cc:e8:76:a3:
8c:d7:ed:fc:36:a8:da:5a:e9:51:3f:32:65:93:67:
c5:75:38:29:3b:0c:d0:bf:fc:92:11:9b:76:29:2d:
9b:56:85:32:79:7a:23:df:92:1e:55:14:5d:6a:d2:
ac:40:28:7f:1b:d0:a0:9c:96:15:d6:3c:bd:e1:af:
22:dc:ea:3b:1e:b0:5f:72:fa:0d:43:5b:81:28:ec:
72:35:ec:7a:97:f7:fa:6b:50:1a:87:0d:e5:fa:64:
7a:88:a3:a6:59:cd:05:07:25:e2:c9:c6:8a:78:33:
34:5b:ff:9a:2f:45:db:d8:4b:3a:68:80:14:5a:c2:
f6:10:fd:ec:84:2a:9b:c9:0f:42:29:be:3d:c6:71:
6d:7e:f3:b9:3f:1e:08:5d:fc:ab:41:8f:85:04:b0:
9f:59:0f:d1:94:8d:31:4a:cf:85:9f:03:28:17:47:
e6:b8:8b:06:dc:6b:93:b4:50:b1:12:3e:f4:2c:ff:
86:c1:75:ed:e0:a5:df:36:89:9b:32:31:90:ed:4e:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C0:F2:51:A1:34:EF:A3:8C:65:28:D8:C4:CE:7B:4B:B0:E9:F1:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9cbeae77-044d-3dcc-a0cf-09f5a7e5ca2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:fa:51:a3:ca:02:62:c5:70:50:68:77:c0:fc:66:0e:bd:1e:
4d:d8:ff:94:26:ee:93:bc:71:4a:1b:79:b3:46:67:3a:dd:a8:
45:5e:31:32:00:46:88:20:bf:3e:2e:fe:f3:01:1d:a1:3a:be:
cd:72:a5:a4:5c:cd:7b:05:86:28:18:cd:6e:22:2a:93:b4:c6:
73:bf:07:d0:fe:41:d0:61:ac:db:e4:a9:aa:5a:db:c9:72:ea:
21:8a:13:7b:e1:f8:7d:a9:ee:e4:b2:3f:d3:58:b2:78:92:f0:
57:4b:12:4f:c0:2c:d3:12:d4:4c:5e:d5:e7:c0:38:b3:2b:7d:
97:87:d6:c0:da:cc:f8:3c:af:44:74:54:f0:b4:56:ef:44:cf:
7b:8a:75:46:5c:7c:c3:cb:83:66:12:09:d4:61:a1:11:e2:e9:
43:b2:d7:96:2a:07:3c:14:cc:b9:83:b1:8d:46:34:4c:14:24:
34:ad:98:34:bd:2b:4f:93:85:e0:cb:46:ea:66:c3:34:7d:31:
ae:94:5e:43:e7:73:d2:f6:d6:32:46:2f:86:da:0a:6d:47:0f:
e3:32:20:35:a9:e2:0f:da:18:e0:45:45:11:bf:7c:e4:96:b4:
fb:c2:08:01:f4:a7:e0:5b:af:4f:43:07:a7:1c:ee:3e:69:69:
4c:3a:79:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 20:46:25 2023 by rpki-client on console-fra.rpki-client.org