Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba70e74f-5200-3666-9232-73a3a39ef1a6.roa
File: ba70e74f-5200-3666-9232-73a3a39ef1a6.roa (raw, json)
Hash identifier: UCPfOocWDVQZmOkDD4+qV3vLbFZLFcv5i2Gx0QgjMkM=
Subject key identifier: FB:A9:8D:E3:0E:81:DE:95:B2:68:33:F0:F6:71:70:03:82:39:CC:BB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584384213D371F2013292E620A00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba70e74f-5200-3666-9232-73a3a39ef1a6.roa
Signing time: Wed 11 Oct 2023 16:05:52 +0000
ROA not before: Wed 11 Oct 2023 16:05:52 +0000
ROA not after: Tue 09 Jan 2024 17:05:52 +0000
asID: 39600
IP address blocks: 166.0.96.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:84:21:3d:37:1f:20:13:29:2e:62:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Oct 11 16:05:52 2023 GMT
Not After : Jan 9 17:05:52 2024 GMT
Subject: CN=a6cd905e-b196-48c5-bfdc-910930e0f460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:3e:90:f8:e3:71:12:33:11:01:a7:df:4e:
8c:22:37:c1:a4:cc:50:99:a3:2a:0a:8c:35:b7:5f:
27:24:0f:b9:43:1a:63:6b:e8:37:65:3a:28:b2:40:
9a:3c:cd:ee:e3:3a:03:01:cb:eb:35:86:b3:c0:63:
39:db:2d:09:69:c4:d6:4e:44:29:3a:b2:a5:e5:dd:
61:67:d8:52:55:3b:d7:00:8a:f1:71:af:fa:49:d2:
03:bc:18:27:fc:72:c7:03:e2:2b:ee:fd:3a:14:44:
47:b3:e5:2c:d9:48:c4:af:bf:e3:e5:1b:23:f9:43:
2c:57:a3:b6:28:42:a3:32:c9:71:03:21:78:4f:51:
f6:06:60:0a:6a:1d:24:0f:55:d5:fa:4d:b5:a3:23:
c7:a7:e4:b7:fd:42:69:54:71:84:fa:62:04:a6:98:
16:72:f3:56:41:76:34:b0:b4:42:91:d5:59:19:58:
c2:18:89:82:8b:e6:ef:11:f8:0e:ed:2e:57:09:ea:
cf:22:36:7d:77:0e:21:dc:cc:01:78:46:fe:bc:74:
cc:b1:ea:97:ad:2c:2d:15:4e:cc:f4:d9:87:73:12:
b6:d8:b7:4a:5f:d9:ba:73:f6:97:8d:88:0f:68:18:
e3:24:70:9c:36:e4:dd:b4:92:b8:0d:fe:26:6f:80:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:8D:E3:0E:81:DE:95:B2:68:33:F0:F6:71:70:03:82:39:CC:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ba70e74f-5200-3666-9232-73a3a39ef1a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:3b:ef:6f:45:5d:0a:c5:07:58:e2:79:d8:66:50:a6:7f:d4:
2f:70:53:52:30:70:d5:31:83:c3:6b:58:7e:5d:ef:84:61:9f:
47:15:2f:bc:07:65:c8:3c:6b:0d:11:e0:91:ff:84:94:16:c4:
7d:b1:66:28:92:c1:84:11:94:9d:88:65:4d:20:92:ff:cf:ae:
f3:48:c7:cb:ae:39:99:25:63:5d:d2:18:3a:41:e0:63:29:ff:
e1:3d:e9:d3:2b:e1:24:ee:a8:d2:07:b1:10:fd:3f:94:b1:4f:
e5:5a:cf:7a:9d:e5:b6:30:1c:43:b0:f8:2f:4c:c9:92:54:62:
70:d6:b0:52:55:c8:f0:bd:3d:8b:63:56:6c:93:c3:14:29:42:
54:ef:92:b0:57:9a:89:bb:cc:94:95:b2:e8:13:77:84:cf:76:
e4:61:c1:5d:1a:b5:05:84:ed:d4:0b:9f:b6:18:a4:31:af:bd:
39:e9:65:82:7d:c3:49:3f:47:d6:4b:80:fe:cd:70:9e:97:44:
09:b7:bb:03:00:99:56:8e:9a:02:db:9f:27:5b:8d:10:ea:3f:
48:e9:df:f2:5c:c6:da:ab:9c:70:76:b7:27:13:e9:1c:a8:54:
c5:c7:f9:71:23:8c:85:31:2c:20:b1:6f:aa:c1:fb:8c:b5:b0:
4c:62:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 11 19:16:39 2023 by rpki-client on console-fra.rpki-client.org