Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5ddb3fb-6b1b-3f71-ac87-0396fe8a3728.roa
File: d5ddb3fb-6b1b-3f71-ac87-0396fe8a3728.roa (raw, json)
Hash identifier: Ju+ZNlzTEO+Qq0jRKHjKAG/mwFqmbhacNQ6xQHtk+xE=
Subject key identifier: A6:E6:E0:1B:65:38:CC:3B:6A:EB:B8:B3:09:E6:AD:C8:CB:DB:C0:65
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858426B96A109AEB5F6C16740FBE0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5ddb3fb-6b1b-3f71-ac87-0396fe8a3728.roa
Signing time: Mon 03 Jul 2023 04:20:15 +0000
ROA not before: Mon 03 Jul 2023 04:20:15 +0000
ROA not after: Sun 01 Oct 2023 04:20:15 +0000
asID: 11798
IP address blocks: 166.1.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:6b:96:a1:09:ae:b5:f6:c1:67:40:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 3 04:20:15 2023 GMT
Not After : Oct 1 04:20:15 2023 GMT
Subject: CN=fcbba70f-b610-46b8-87c7-d51edb900bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:8a:3f:6d:e6:56:73:31:66:40:47:e6:6e:
c8:80:4b:52:86:cf:bd:08:09:90:f3:01:6d:0a:c6:
dd:94:fd:17:f6:9d:aa:bb:41:f9:94:0e:10:e7:b6:
87:32:81:08:4d:74:c6:62:ba:45:74:90:b8:ac:59:
1b:02:e5:87:bc:32:d9:cd:8b:10:37:9c:01:d5:1a:
fb:64:e7:82:5f:72:12:d0:f5:6c:16:d5:1e:75:bd:
da:e9:43:5f:06:ee:5b:23:9e:8d:d3:cc:ac:ba:4b:
31:13:3b:90:e5:2a:4a:36:52:1d:05:6d:0c:44:ce:
77:50:63:4a:9c:4e:43:ed:fd:3a:c9:d0:6b:d4:b9:
8e:26:bb:49:1d:15:1e:94:d3:37:5e:f9:1d:34:ce:
e2:cd:ad:51:6b:33:aa:17:2f:be:de:a1:88:39:50:
98:0b:5b:ed:aa:c6:d3:15:57:a6:a1:19:f3:86:00:
56:f4:67:85:8c:f6:8c:f9:b0:db:d6:ce:57:00:e4:
06:65:46:d2:80:29:49:65:7d:23:e0:f5:20:3e:9e:
6d:41:95:ce:1b:80:6e:b8:5a:9e:89:5e:f6:b2:a1:
c0:5a:74:84:20:69:f1:a0:bd:81:e0:f5:7a:3c:da:
f9:d6:65:ff:c5:83:ef:48:4b:f6:06:2b:be:bc:54:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E6:E0:1B:65:38:CC:3B:6A:EB:B8:B3:09:E6:AD:C8:CB:DB:C0:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d5ddb3fb-6b1b-3f71-ac87-0396fe8a3728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:45:56:11:a4:2e:b8:1e:8b:a2:a7:ca:17:d9:0f:29:60:44:
ff:f0:e1:bd:e6:fe:99:bf:49:79:71:8b:20:37:85:49:2c:ca:
dd:8b:bf:e0:1c:b3:81:30:8f:95:86:0a:22:7e:bb:28:a4:03:
37:f0:04:1f:5d:6b:76:6f:cb:8c:7d:73:08:2a:51:11:5f:ef:
a8:44:58:2f:e2:5f:3d:25:85:98:b7:ca:6b:3d:f8:58:6c:d2:
c9:f8:55:89:03:08:b2:9e:d3:f5:06:2a:5a:c7:63:06:97:ee:
21:1e:c4:59:d0:36:de:7a:07:74:2b:9c:31:7c:bd:92:03:d5:
43:d3:81:97:5f:c1:3f:84:bf:71:bf:a3:d0:8e:19:80:f9:15:
cc:9b:91:7d:ec:b9:d9:6d:a6:82:4f:6e:d7:fb:2f:ad:db:3a:
3f:11:ba:13:ba:15:b6:b8:90:33:c1:63:97:44:4e:d4:d2:be:
fb:1a:ce:46:dd:b9:d7:33:49:9c:78:66:a2:4b:0c:8e:5c:07:
28:bc:ed:88:28:f0:14:73:9c:74:e8:d2:2b:cf:6b:da:08:4d:
d2:74:8a:83:e9:9c:d2:ec:64:be:a4:0a:03:b3:48:a0:1c:5a:
f4:8e:d7:fd:05:bc:08:93:81:42:d0:5e:c7:b9:29:07:e0:f3:
b9:89:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 18:45:10 2023 by rpki-client on console-fra.rpki-client.org