Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e30b8fc-a324-3759-872e-01255c0da830.roa
File: 9e30b8fc-a324-3759-872e-01255c0da830.roa (raw, json)
Hash identifier: huuqhQryUZlkx/kg9QOBP39LBnWCtNRdugPyryQGbPA=
Subject key identifier: 67:D4:B4:AD:D9:0B:25:DC:CF:AE:43:03:E9:43:7C:67:E9:92:91:61
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E447068BEBD6426DAE23E3C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e30b8fc-a324-3759-872e-01255c0da830.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Sat 12 Aug 2023 01:05:01 +0000
asID: 211585
IP address blocks: 166.0.88.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:47:06:8b:eb:d6:42:6d:ae:23:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 12 01:05:01 2023 GMT
Subject: CN=853e8bcc-060d-4b25-9249-0e4b11c00090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:37:d2:80:b8:96:99:8b:60:c9:82:5d:83:
8b:db:7f:c2:6c:57:ac:67:ae:54:88:cf:d4:91:f0:
9e:28:34:95:2e:e4:ba:85:1d:15:85:6d:fd:34:21:
34:a2:ab:f1:bc:01:3a:5b:83:91:29:5c:df:02:a6:
4f:ca:3b:7a:a5:6b:ca:e3:a2:d7:ee:34:07:45:18:
73:b0:62:ee:e0:05:58:51:38:5e:58:7c:01:cf:af:
66:7c:d4:0d:fc:eb:b6:af:8a:9e:c8:24:1e:a1:11:
11:80:31:1c:34:82:3c:69:0a:e8:18:16:3c:30:ca:
9a:6d:8f:d3:5d:3a:b7:54:5c:ee:1a:83:c6:6b:85:
c8:48:c3:32:80:ab:14:a0:ac:4b:20:b8:5c:0b:c4:
b3:b0:19:30:db:02:a3:85:f0:6f:57:68:df:21:3b:
1b:69:92:de:e8:85:41:eb:0e:ba:57:74:1c:cc:81:
eb:b5:8b:a0:72:ab:a7:e6:77:89:be:ee:f1:3e:0b:
1a:ef:fd:ad:50:9d:57:87:16:d1:91:ef:f3:c9:b2:
ce:62:ee:8e:b4:ab:d9:eb:35:1d:e3:79:02:04:e2:
f8:8d:6b:6d:d5:c3:fb:88:57:af:73:a3:5f:34:9c:
43:db:3f:d7:a0:05:3a:5b:3f:37:b1:7f:1b:52:fd:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:B4:AD:D9:0B:25:DC:CF:AE:43:03:E9:43:7C:67:E9:92:91:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9e30b8fc-a324-3759-872e-01255c0da830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:61:3b:d2:4b:ac:2a:2a:92:4d:fb:43:2b:c2:26:45:2b:c9:
92:f7:f0:b5:6c:38:a1:d0:d4:90:fd:ca:c4:f6:4d:e2:4e:4b:
f0:1a:10:df:c7:d3:55:a9:fa:c9:48:b6:e4:62:25:ff:db:9d:
7e:61:cd:f2:0f:e1:88:15:d0:bc:bd:5f:55:58:35:40:d8:dd:
e9:36:b0:64:db:a4:6a:80:3e:ad:17:7a:27:cd:9c:bc:85:57:
a8:6d:2e:6c:ca:57:e5:87:d7:7e:c8:60:96:92:7d:94:2e:26:
43:09:cc:77:e7:7c:54:04:81:c2:32:d6:7a:af:08:96:e7:5a:
68:fb:e8:c1:98:31:10:f5:08:9b:f0:1b:6a:f6:a0:5c:91:81:
61:63:76:6d:eb:34:cf:e2:87:e9:31:8d:26:8d:c9:58:68:90:
5a:fd:ae:90:89:d1:64:0b:70:4e:12:d8:f9:7a:8d:a7:3e:22:
8e:7b:a4:0a:43:b3:1e:98:e4:59:95:a0:ce:6f:a4:84:b0:2d:
19:03:dc:2b:a1:07:8d:2d:22:7a:ea:7c:0d:c7:30:43:1f:ec:
19:06:f6:29:39:5a:6e:25:5c:73:c5:a2:7a:d5:9f:12:2a:87:
61:3a:31:70:6d:97:aa:84:f6:dc:d7:a3:16:c0:c6:ef:e8:c3:
2a:c2:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:58 2023 by rpki-client on console-fra.rpki-client.org