Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/acf8f283-448d-341a-95f1-4cf261f180bd.roa
File: acf8f283-448d-341a-95f1-4cf261f180bd.roa (raw, json)
Hash identifier: EKprsI43/i/+xlCobLptcV5hWp7lA9ybjRPY0H/yNV8=
Subject key identifier: 53:80:A1:05:D8:06:93:EF:A7:40:E5:04:AF:99:31:CE:71:83:D6:37
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584429FEA7F1B7BCDE3D7EEA4E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/acf8f283-448d-341a-95f1-4cf261f180bd.roa
Signing time: Sun 10 Dec 2023 02:00:16 +0000
ROA not before: Sun 10 Dec 2023 02:00:16 +0000
ROA not after: Sat 09 Mar 2024 02:00:16 +0000
asID: 11798
IP address blocks: 166.0.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 17:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:29:fe:a7:f1:b7:bc:de:3d:7e:ea:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 10 02:00:16 2023 GMT
Not After : Mar 9 02:00:16 2024 GMT
Subject: CN=43c7fd2a-6d0b-4491-83d3-295bf9e6f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:c7:3e:1c:0d:f3:59:83:d6:fe:21:a6:bc:
84:fc:86:c5:f3:15:7b:70:d2:fe:13:03:94:00:82:
0c:14:4e:3a:c2:e0:7e:87:3c:02:2e:63:ab:e4:2d:
76:e3:02:83:fb:fa:c8:f9:94:63:b7:56:f3:18:13:
d2:37:9a:cc:98:64:d5:8c:f0:67:35:04:b6:d6:b3:
ab:37:b1:8f:45:40:45:41:6f:d2:5f:8d:f2:7d:82:
6b:12:27:8c:aa:59:5b:5e:ba:8a:97:47:c3:33:0b:
d0:08:7f:d2:24:0a:ee:60:8e:00:4e:0e:9c:30:2a:
6e:2d:73:53:b3:dd:30:75:e1:41:16:9c:86:c1:be:
0f:4a:86:1e:dc:69:e5:c4:3e:35:94:1b:02:5b:19:
6d:47:ba:4d:0e:75:c3:48:f0:ba:21:d8:db:fb:da:
3e:1b:a2:db:09:99:f6:39:7c:2e:41:5d:ed:70:a0:
fb:00:2a:0a:92:ef:d5:3f:ef:54:79:a8:d9:a3:2b:
3e:67:b3:2f:52:ab:dd:a4:42:ab:6a:d4:16:d2:6b:
b6:a5:4a:93:b4:5e:33:5b:b3:e7:2d:52:3d:c1:13:
7a:36:82:45:e7:f2:56:08:05:06:ba:6a:b9:7c:30:
ff:69:b2:36:f1:1c:dc:4b:20:16:1d:89:8d:13:48:
b6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:A1:05:D8:06:93:EF:A7:40:E5:04:AF:99:31:CE:71:83:D6:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/acf8f283-448d-341a-95f1-4cf261f180bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0d:a6:d0:77:8c:a4:07:eb:9e:90:ca:f0:13:7f:83:72:89:
2e:c0:31:1f:7a:7a:d9:28:8a:d4:8d:b2:89:18:1f:a4:05:2d:
a0:c7:30:77:d2:54:50:8c:45:7f:1c:54:2e:cf:11:a9:58:ce:
bd:fe:a0:8b:cc:68:8b:04:0d:20:d7:ab:d7:0b:f4:48:53:a1:
02:83:d8:de:56:d1:df:fb:57:93:58:31:6d:87:47:21:d1:ff:
95:44:46:96:6a:23:b5:d0:f4:7f:f5:d2:81:3d:db:f2:e7:0d:
77:83:5f:56:a5:3c:7f:3e:ba:98:ea:ed:78:da:95:69:e4:c0:
f6:9c:bb:27:96:74:3b:9d:b3:12:5a:d7:01:86:8b:0c:4a:13:
fe:49:11:83:44:a3:9b:fe:44:cd:b7:e1:7e:0d:6c:be:eb:ce:
dd:fd:26:15:b0:95:4f:7d:9c:81:39:f4:d6:a4:b3:c7:56:03:
4e:e4:3e:4b:f5:c9:db:33:63:7f:41:cd:3f:af:9b:0b:a0:7e:
d9:c0:95:62:fb:b6:8b:73:59:66:d0:ad:9c:67:24:d5:b7:0e:
15:9c:1b:a6:6f:4e:13:52:2d:ac:db:e8:cf:15:14:94:4c:88:
2c:53:ed:bc:9c:2d:9a:c3:f8:11:e0:cb:c6:3e:ec:b3:ce:04:
12:d4:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 21:17:44 2024 by rpki-client on console-ams.rpki-client.org