Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0238b9a-078c-3f27-9ace-1d3d8c210ab9.roa
File: d0238b9a-078c-3f27-9ace-1d3d8c210ab9.roa (raw, json)
Hash identifier: RxgNakrrHJ2LsyixWikGZK3xoPiOuNGNjXUYBIGGV8k=
Subject key identifier: 3D:58:9E:E6:1E:2E:C1:20:19:B5:79:25:62:71:E3:75:96:29:80:05
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858425A1C6B566105BB574B8C6880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0238b9a-078c-3f27-9ace-1d3d8c210ab9.roa
Signing time: Mon 26 Jun 2023 22:05:16 +0000
ROA not before: Mon 26 Jun 2023 22:05:16 +0000
ROA not after: Sun 24 Sep 2023 22:05:16 +0000
asID: 834
IP address blocks: 166.0.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:5a:1c:6b:56:61:05:bb:57:4b:8c:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jun 26 22:05:16 2023 GMT
Not After : Sep 24 22:05:16 2023 GMT
Subject: CN=6b7c8573-b460-471e-80c8-5520d81bdef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:77:5a:65:cc:28:a0:ad:76:a5:01:b2:6d:
78:50:f3:ab:77:77:6c:18:da:ed:e7:6d:a0:01:cd:
72:2c:7c:da:1b:0f:1c:72:b2:d5:83:e7:e5:c0:4c:
22:c0:aa:6a:19:6f:f5:a3:c4:66:c1:36:1c:83:93:
be:61:26:78:b6:c2:cd:b2:81:c4:3f:c2:8f:b5:bc:
cf:db:21:1a:a0:3a:eb:64:21:94:e4:68:73:9f:14:
62:4f:db:e4:66:3c:d8:22:e1:56:e3:0b:4f:69:9e:
f4:fa:bc:ec:8e:f9:a1:60:ab:91:ba:52:ff:12:01:
d2:d2:3d:fb:f5:89:b4:f4:86:a1:33:a3:33:2c:ea:
60:42:3a:7f:7d:38:71:96:33:e0:97:ab:af:30:f8:
99:1f:53:d9:6f:27:57:1e:94:85:0a:dc:1d:e5:48:
e2:ac:38:3e:39:33:51:36:a1:4f:7b:06:e8:9f:94:
d7:ef:17:28:6b:a8:8c:e1:26:73:ba:81:61:77:ac:
5c:fd:d0:7b:e1:8a:45:8d:7f:1b:62:80:0a:67:a7:
c1:2f:4f:f9:11:2b:23:6b:63:1d:88:cd:ef:57:60:
df:19:dc:f6:16:7e:ef:e6:00:41:8d:08:00:72:a7:
d6:09:b2:44:cd:6a:2f:e8:90:84:19:a6:7b:55:09:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:58:9E:E6:1E:2E:C1:20:19:B5:79:25:62:71:E3:75:96:29:80:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d0238b9a-078c-3f27-9ace-1d3d8c210ab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:82:cf:45:13:ce:d9:35:2a:23:39:62:05:c4:f7:8c:01:f7:
fb:65:02:47:e2:ad:9b:0f:ef:82:bd:a4:3e:ae:35:f4:a6:fc:
11:84:cd:e9:d8:2e:bb:10:1e:5b:6c:ce:4e:11:91:bb:54:ec:
dc:91:cf:15:5b:ab:48:2e:7b:4d:1b:36:38:90:75:90:d8:d4:
fb:5f:a5:a2:c8:4f:40:9b:5c:08:36:88:6f:a6:fa:70:6e:38:
0e:c2:cd:7c:98:be:d2:22:12:13:d9:12:cd:03:be:fe:91:c7:
09:f2:f7:0a:a0:03:97:1c:32:a9:3e:5e:56:fa:57:31:6a:29:
12:1a:77:be:d0:a8:d0:b4:0e:5f:cf:84:d6:02:a8:52:9e:b2:
b1:52:2a:f2:2b:40:29:17:9e:56:9f:f1:4e:ff:6e:15:55:5d:
6e:64:fc:db:44:f0:ec:43:a3:22:99:64:22:47:87:97:ed:59:
ce:84:fc:a6:1f:3f:6c:24:9a:a2:c2:96:34:1b:c8:f8:7a:29:
49:c1:26:55:02:cc:b1:92:04:27:72:58:72:51:e0:0d:95:26:
23:50:0d:d9:e9:68:fe:19:4e:95:e4:25:00:55:b3:41:f8:5f:
3e:68:16:19:56:df:b7:d1:f7:0e:c5:b0:5b:79:d4:6a:c8:7c:
75:be:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 19:29:24 2023 by rpki-client on console-fra.rpki-client.org