Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22768d8-0a30-30bd-b585-06eaa75950c6.roa
File: c22768d8-0a30-30bd-b585-06eaa75950c6.roa (raw, json)
Hash identifier: pf4zZyoq2UEpo+qMFgG4FHJ9rqugUOB8oKRXNLVdOEU=
Subject key identifier: 0D:68:71:EE:84:9D:EB:04:48:1B:65:BC:E1:74:4F:AD:0E:DA:4D:EB
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584417D93CE84722F8D76A389900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22768d8-0a30-30bd-b585-06eaa75950c6.roa
Signing time: Sun 03 Dec 2023 14:00:21 +0000
ROA not before: Sun 03 Dec 2023 14:00:21 +0000
ROA not after: Sat 02 Mar 2024 14:00:21 +0000
asID: 834
IP address blocks: 166.0.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:17:d9:3c:e8:47:22:f8:d7:6a:38:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 3 14:00:21 2023 GMT
Not After : Mar 2 14:00:21 2024 GMT
Subject: CN=54e71297-b53b-4a34-9d8e-bc07f74362df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:dd:02:e6:30:9c:18:a3:81:fe:1d:65:60:
b4:e9:78:ce:91:90:fc:30:92:06:eb:19:b7:e2:1f:
d8:fc:2c:6e:a2:b5:95:1a:0e:1a:20:f4:ea:ca:6d:
63:d0:58:10:da:21:b7:ae:16:9a:2f:5a:80:f6:fa:
18:b7:85:6d:da:00:de:75:47:69:96:eb:04:96:a2:
bc:d4:03:c9:f9:80:c9:f0:be:23:07:f3:05:16:a5:
b7:38:c2:0a:9d:44:7e:51:b0:c0:3d:e4:9c:e4:93:
55:63:76:d5:51:51:27:5f:65:4a:a1:d2:51:fe:a2:
36:95:de:75:80:dd:ce:d7:b3:f7:7b:8b:e1:95:c4:
08:55:3e:7c:3a:77:b9:5e:b5:c8:8d:e8:85:c8:f5:
01:af:af:32:f1:97:d8:50:de:7d:03:f4:55:0d:a4:
b0:c6:c3:11:9f:ab:93:02:72:bf:59:ed:af:86:82:
a7:df:1c:77:60:bb:a2:48:be:c1:b5:ab:23:11:b1:
1b:7f:4d:5b:40:06:11:47:98:87:2d:56:f7:c3:aa:
69:8c:e5:15:c0:23:bd:e3:df:05:33:4e:26:15:4a:
cf:84:f8:00:10:12:0c:55:86:f3:43:11:80:9b:db:
d1:17:31:f2:86:4a:b2:3d:28:17:d2:65:a1:79:3f:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:68:71:EE:84:9D:EB:04:48:1B:65:BC:E1:74:4F:AD:0E:DA:4D:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c22768d8-0a30-30bd-b585-06eaa75950c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:dd:7d:99:27:07:26:ed:1c:2f:cf:c6:4d:06:30:b9:19:09:
e8:43:05:90:c1:56:ce:94:29:28:ee:f4:70:8a:24:cb:b0:9f:
2e:f0:0c:cf:ef:3d:3e:ab:a8:2d:70:9f:f0:df:ef:b6:b5:85:
d6:0a:c4:13:3d:b4:73:c3:0c:2d:2d:cc:4a:a6:eb:65:cc:1b:
e5:2c:70:d5:00:b2:bc:a3:09:cc:f6:e7:52:6c:66:8f:e7:fa:
12:7d:fd:b4:95:d3:62:ae:8f:42:d2:ff:18:3e:c8:25:95:ed:
0a:de:78:cd:92:8f:ee:aa:4d:11:ee:5d:32:ed:8c:3b:6f:95:
64:40:2e:6f:ad:70:c0:74:0b:78:f9:de:98:6a:28:77:f4:cd:
ef:6f:e2:37:7d:a4:c8:d9:f1:40:6c:88:18:d2:f1:e4:63:3f:
02:94:52:0e:e7:24:a8:e8:65:15:1b:4f:97:78:80:d6:63:76:
cd:7e:21:33:39:32:9a:1a:7e:4a:b1:1a:4a:8a:56:14:ca:2e:
da:2d:a3:3e:d0:0a:21:bc:b8:06:87:96:22:e3:a4:1d:92:8e:
71:ea:94:c8:7a:a1:30:c3:46:03:95:e2:13:73:ca:2a:44:4d:
0e:9b:f9:c9:7e:07:06:32:42:56:4f:c9:81:53:46:ac:e7:7d:
a4:11:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 19:25:45 2023 by rpki-client on console-fra.rpki-client.org