Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3662071-cc37-3a4f-b212-c08f6f8f3dd4.roa
File: a3662071-cc37-3a4f-b212-c08f6f8f3dd4.roa (raw, json)
Hash identifier: kwzZWs3LMEQB/S7uiD7MokWsylkClcdSEMvXYV2Grp0=
Subject key identifier: F7:30:ED:52:1E:40:A4:6C:6C:ED:4B:5E:15:2C:44:47:83:50:A6:94
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842C66574B67C1406C6D070E065
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3662071-cc37-3a4f-b212-c08f6f8f3dd4.roa
Signing time: Fri 04 Aug 2023 16:59:44 +0000
ROA not before: Fri 04 Aug 2023 16:59:44 +0000
ROA not after: Thu 02 Nov 2023 16:59:44 +0000
asID: 35913
IP address blocks: 166.0.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c6:65:74:b6:7c:14:06:c6:d0:70:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 4 16:59:44 2023 GMT
Not After : Nov 2 16:59:44 2023 GMT
Subject: CN=c00c531b-133f-4703-ab6b-39cccefead2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:66:a1:d1:51:bb:83:ec:75:d9:52:0a:84:
5d:bd:3f:72:6e:27:cc:6c:b4:0e:12:98:53:d9:aa:
6e:39:ad:13:c7:ec:c1:e0:07:21:27:f6:e6:50:52:
93:83:ac:ac:2d:7c:6d:58:2c:b1:0c:18:fe:f1:d6:
10:28:cd:7a:26:29:c0:4a:44:a5:42:89:af:82:fe:
16:2e:27:c3:ea:72:a3:8c:25:8f:f9:9f:5d:cc:e8:
10:9d:11:4a:03:dd:7e:95:84:32:0a:a4:9d:c0:c4:
17:65:9e:f7:5b:66:ee:92:1f:13:3b:70:5f:51:1b:
81:9c:44:27:e4:ea:6c:37:ef:f8:63:64:47:e5:a5:
43:92:b1:92:bc:03:b6:d9:f5:fa:cf:0a:e3:27:d4:
1b:82:6f:1f:dc:9b:67:27:02:bf:4e:a6:71:a4:42:
00:5d:c4:7a:14:9c:46:4c:ee:a1:c9:60:d3:6b:a6:
65:db:bb:f5:23:2d:ad:8b:8b:67:1a:58:dc:e4:51:
2b:c5:a2:f0:e7:ed:44:2a:f8:59:71:72:02:0f:24:
27:6b:22:8d:1c:7d:5c:d1:d6:d1:0e:97:0d:10:99:
7e:d5:f8:90:48:e4:71:65:7f:7c:62:91:a4:40:00:
bf:0c:e9:10:7d:9b:92:04:18:be:bf:97:02:22:6a:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:30:ED:52:1E:40:A4:6C:6C:ED:4B:5E:15:2C:44:47:83:50:A6:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/a3662071-cc37-3a4f-b212-c08f6f8f3dd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:62:e8:42:b3:a2:2b:42:68:5b:5a:4e:80:18:b9:eb:c6:bd:
9a:ab:c2:c4:06:74:31:d3:78:28:cb:03:bb:f3:a6:e3:cd:fb:
d7:e4:32:1d:5d:9f:00:f7:15:85:40:44:1d:14:79:fe:14:cd:
a8:6a:a6:20:f7:0b:02:8d:e2:ad:24:55:8d:cc:d5:47:4c:05:
37:7a:b7:2c:ab:16:e8:f2:f7:ed:22:e9:93:f3:c1:df:a1:44:
7e:09:22:f5:5d:29:56:ae:ca:f9:90:72:ae:61:66:66:c0:a6:
87:0b:d1:6e:d1:35:58:b6:9a:11:0c:13:57:9f:0a:3e:6c:6d:
76:57:88:0a:36:b9:d8:b2:77:cd:bd:ba:75:f7:de:b7:1b:d8:
cf:8f:28:56:00:cd:d5:47:4a:42:87:61:83:7e:a5:4a:0a:2e:
67:77:00:63:2e:6b:a6:2c:ed:6f:47:92:19:c9:04:60:34:b5:
12:b4:2a:41:0b:33:39:35:7a:3d:4e:aa:97:b6:69:68:ff:05:
4e:3b:37:c7:b0:82:81:d8:e5:4e:3b:58:ff:0a:b7:ed:74:7e:
2f:80:d3:e3:ff:01:67:2d:83:45:e5:0a:a2:8d:5e:e4:f8:59:
5e:6a:a7:90:17:49:8b:8a:f8:ae:70:ad:a8:ce:05:2b:3e:ac:
c7:9b:f5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:18:24 2023 by rpki-client on console-ams.rpki-client.org