Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d79eec58-6747-31bb-b84f-4e8faf167851.roa
File: d79eec58-6747-31bb-b84f-4e8faf167851.roa (raw, json)
Hash identifier: TmHT/1ByX2YeBQIr9O3YO2IFozIxxhwbJiqRw3ln/tI=
Subject key identifier: 8B:51:B8:8B:15:05:89:5C:2E:EB:ED:7A:3F:91:58:03:37:C6:1D:FD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BDEB4F6C02E49AC708A856E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d79eec58-6747-31bb-b84f-4e8faf167851.roa
Signing time: Tue 01 Aug 2023 16:07:10 +0000
ROA not before: Tue 01 Aug 2023 16:07:10 +0000
ROA not after: Mon 30 Oct 2023 16:07:10 +0000
asID: 11798
IP address blocks: 166.1.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bd:eb:4f:6c:02:e4:9a:c7:08:a8:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 1 16:07:10 2023 GMT
Not After : Oct 30 16:07:10 2023 GMT
Subject: CN=ca5fc9b2-8dd1-4678-8173-807c01a78a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:5f:c4:2c:6c:f8:9f:48:f6:cd:32:40:b7:
15:36:61:8a:98:18:71:ca:25:93:9c:e9:85:5e:a7:
22:70:b0:a1:93:6e:96:44:c5:62:be:c2:dc:1e:db:
b0:36:05:2a:f4:0f:1d:49:7c:32:4f:d9:6f:72:83:
e5:7d:26:7a:07:29:d4:d3:ec:c1:02:8d:e8:4b:1f:
42:7c:e6:79:89:76:64:8d:26:4f:98:f4:c8:6d:d3:
a8:c5:3e:2d:44:21:c5:f7:12:98:f4:09:48:6d:da:
7c:83:ec:4a:15:08:03:05:d2:21:9c:a6:8e:ac:c7:
0f:0e:d5:18:f4:cf:17:9d:53:44:c6:c0:37:17:ba:
ad:d5:79:f1:4b:e6:98:94:9d:45:b5:f8:8d:ea:cf:
36:ba:9e:bf:32:18:b1:c9:85:ab:1a:49:45:02:a3:
fa:d1:cc:0c:3d:53:6f:28:1e:60:fc:3b:10:e0:78:
d1:76:7d:e2:e3:95:1e:ba:20:29:81:e7:8c:23:ec:
10:d7:49:49:94:49:20:2f:72:d8:ba:57:5e:ba:2f:
09:e6:01:3a:a4:fd:35:19:c5:2b:6c:0f:2f:c3:fa:
65:d2:89:c0:a6:98:96:2e:a4:2d:13:83:24:d1:bd:
03:e0:0c:51:35:99:77:81:42:98:e6:dd:c2:c8:d5:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:B8:8B:15:05:89:5C:2E:EB:ED:7A:3F:91:58:03:37:C6:1D:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/d79eec58-6747-31bb-b84f-4e8faf167851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:bd:62:66:cf:f3:43:da:66:b7:88:d4:00:d9:3a:20:b5:dc:
d0:32:29:4a:9e:ea:1b:8d:9e:98:24:92:89:9b:53:e6:3e:e6:
69:eb:6f:64:98:de:1a:55:dd:e5:93:e8:7e:c4:ec:7a:b6:43:
dc:d3:80:30:56:ec:74:d1:34:67:18:d7:21:25:e3:d1:ea:1b:
d1:63:49:cf:f5:6a:80:d5:8d:f6:b3:a3:3d:56:75:6b:ff:8f:
53:53:9e:47:63:cc:b3:ba:1d:cb:fe:0f:d4:5d:20:26:c5:83:
a3:f9:e8:c1:b4:34:59:31:ca:72:65:fb:ab:f2:e3:0a:6c:5f:
97:cb:92:5f:d6:e6:46:2d:c8:42:11:9d:74:3f:0a:2b:3a:80:
9c:be:61:74:91:90:3f:a2:22:e3:91:9e:14:16:b4:10:7f:45:
7c:c9:46:a7:f5:45:94:1b:91:d2:0c:b7:8c:e4:d9:e5:f6:39:
dd:7f:35:59:03:04:f0:e2:50:bf:90:78:c1:51:43:69:47:fa:
15:05:bf:e8:2c:a0:f1:da:74:e4:6f:22:ef:fc:de:58:11:b2:
aa:75:7b:45:16:42:07:f8:55:92:e0:82:a4:0d:32:62:7f:05:
69:6e:96:7d:eb:ce:f5:96:97:42:3a:17:5f:d5:db:f2:58:6e:
29:be:01:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 19:18:31 2023 by rpki-client on console-ams.rpki-client.org