Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e945ec88-a299-39a9-93a6-6f14f02f00f0.roa
File: e945ec88-a299-39a9-93a6-6f14f02f00f0.roa (raw, json)
Hash identifier: MNbpJQGlwZ4PAfI2vrQyZOlMcFLwv+ypQW5BsjLoplU=
Subject key identifier: AC:78:8B:65:50:F4:65:9D:6A:BF:77:FB:9E:AE:9D:CD:00:AD:B5:32
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844159E1349F78A811E0B251500
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e945ec88-a299-39a9-93a6-6f14f02f00f0.roa
Signing time: Sat 02 Dec 2023 18:49:37 +0000
ROA not before: Sat 02 Dec 2023 18:49:37 +0000
ROA not after: Fri 01 Mar 2024 18:49:37 +0000
asID: 212238
IP address blocks: 108.165.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:15:9e:13:49:f7:8a:81:1e:0b:25:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 2 18:49:37 2023 GMT
Not After : Mar 1 18:49:37 2024 GMT
Subject: CN=770ff8d6-184c-488c-b02f-c4962ee8125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:84:60:92:1f:fd:ef:b0:76:9a:93:75:07:
2b:48:dc:1b:91:a3:40:9b:f2:6e:e1:0a:5a:cf:97:
32:17:82:65:df:f8:11:fb:ec:fa:26:da:3f:6b:bf:
70:03:97:98:47:ac:04:e0:fc:a0:cb:52:be:cd:fe:
c8:0f:d5:28:37:e6:fb:f3:08:c0:7b:80:2a:47:5d:
15:7a:42:d8:ee:a4:a1:c1:11:34:fa:9a:1b:51:1c:
04:b5:4b:9a:e7:ee:f2:e7:32:da:27:2e:e7:1c:8d:
59:c5:93:3b:98:03:9e:b3:49:71:9b:84:2e:2b:56:
e4:62:6f:f6:ea:07:94:85:d1:a8:f7:9b:e6:be:34:
49:4f:ed:65:f6:dd:e2:eb:93:d2:7b:a7:40:f4:a4:
7a:18:fe:4d:4c:e8:82:52:de:f2:e3:6a:d4:54:d1:
96:ec:16:d7:d9:99:e8:c5:20:e9:ef:cd:8b:31:42:
ee:be:c2:d1:f2:12:4f:a4:bb:0e:13:f1:a0:0d:82:
a7:a2:99:94:78:97:eb:7f:14:62:27:61:e3:6d:09:
b8:f9:7f:ff:d8:7e:7a:19:7d:5a:0e:c0:73:75:f7:
dd:a9:4d:11:b2:37:f4:05:5d:46:aa:ac:a1:7e:61:
46:ac:35:1d:08:7e:b9:b8:f8:28:1e:de:7a:95:0d:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:78:8B:65:50:F4:65:9D:6A:BF:77:FB:9E:AE:9D:CD:00:AD:B5:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e945ec88-a299-39a9-93a6-6f14f02f00f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:b9:8c:fc:35:b9:dd:ff:5c:16:bd:9a:ef:57:16:c0:51:65:
f1:33:72:37:e3:f5:ac:96:58:fb:2d:cc:3b:21:9b:d8:9a:e8:
3c:02:08:a8:d1:a3:33:a6:bf:57:de:9d:53:92:2e:55:49:53:
f1:d3:6a:81:77:05:90:b1:06:cc:c2:3f:da:cb:36:31:1c:5d:
4f:45:a8:0c:6f:fc:67:a0:74:d4:0c:79:82:70:4e:f3:39:ae:
1c:2b:28:bd:90:a3:cc:04:53:10:1d:b3:59:29:b8:14:2b:ff:
81:53:3a:c1:0f:cb:64:17:e0:37:22:2d:6d:9e:2b:4e:9e:79:
d7:48:f4:0f:0a:a1:48:d4:51:d1:d2:2b:6e:49:7f:ac:7e:c8:
ba:b5:dc:29:74:89:bb:71:6d:0f:8c:ba:84:e3:8f:08:72:0b:
6c:90:39:03:d9:a6:f6:42:2e:3c:64:de:2f:ab:e9:58:ea:45:
7e:df:b9:b6:2b:a2:18:6e:b3:b2:6a:25:d8:0c:c8:c0:a3:bf:
2f:c4:3f:1e:ff:7e:ae:c4:87:cc:b3:1d:97:27:d6:41:24:fb:
3b:e0:19:bb:0b:c4:09:20:6d:ec:71:04:6a:82:fe:e7:84:07:
67:25:06:f2:7e:c8:45:73:a6:68:48:17:ea:29:e9:2e:a8:35:
29:17:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:16 2024 by rpki-client on console-ams.rpki-client.org