Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebfe400b-657f-3380-9178-3726deb2b919.roa
File: ebfe400b-657f-3380-9178-3726deb2b919.roa (raw, json)
Hash identifier: QhU6ncyyzby4NeR9LGWAaf7o3+rwSayTnvXTj5iCjuU=
Subject key identifier: C2:B7:87:43:45:DD:9F:60:81:5B:C6:28:6C:8F:1E:6B:1E:F2:91:26
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842FF29B2CD6A6881F706A359C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebfe400b-657f-3380-9178-3726deb2b919.roa
Signing time: Fri 25 Aug 2023 01:00:22 +0000
ROA not before: Fri 25 Aug 2023 01:00:22 +0000
ROA not after: Thu 23 Nov 2023 02:00:22 +0000
asID: 11798
IP address blocks: 166.1.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:ff:29:b2:cd:6a:68:81:f7:06:a3:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 25 01:00:22 2023 GMT
Not After : Nov 23 02:00:22 2023 GMT
Subject: CN=42dcf480-fd94-462c-bcc2-a0460b0f3031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:0e:77:f3:05:88:c0:1c:e2:93:bf:db:c5:
8f:60:33:5b:90:a1:e9:ac:5d:c5:37:08:c3:ee:83:
0d:a5:44:f2:c6:69:95:5e:46:4b:c4:dc:30:0f:ea:
7c:dd:23:f9:c1:a0:df:10:51:f9:e9:9c:90:a8:eb:
ec:f9:1a:1a:a9:77:a2:c0:bd:ce:78:47:20:df:96:
42:66:bf:ed:08:da:55:06:07:1b:0c:45:c4:69:66:
ef:12:80:98:ce:68:eb:3b:cd:1a:f2:52:42:31:ae:
d7:8b:57:85:eb:c6:55:32:a9:d1:87:24:c3:0a:a6:
5e:2f:85:ed:0b:63:76:f6:6e:80:0e:0c:5b:37:18:
da:03:41:f4:1a:0d:99:5a:76:06:ed:c4:54:2e:97:
74:7a:90:94:68:1d:35:13:2e:e2:ad:3d:a0:df:cd:
a8:68:34:9b:6c:7f:3a:23:2e:50:d7:59:45:b9:ec:
e5:76:2b:bf:ce:a0:fc:ea:7f:02:63:6c:fe:99:98:
dc:1f:89:75:16:14:c4:38:3c:08:3f:dd:f0:17:6a:
14:ca:df:34:de:d1:2f:22:8d:28:81:0a:93:f2:5f:
09:5d:41:fe:22:a5:0b:d2:21:c2:9a:34:1e:af:83:
9c:b3:6b:38:b6:67:46:13:ee:12:43:76:7b:03:d3:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:87:43:45:DD:9F:60:81:5B:C6:28:6C:8F:1E:6B:1E:F2:91:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebfe400b-657f-3380-9178-3726deb2b919.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:3c:01:d0:65:54:94:1c:8a:12:d6:f8:c8:c1:7a:40:62:f3:
61:47:0e:77:c2:fc:56:94:7d:f6:ee:8a:07:44:a2:d8:cb:86:
26:a5:df:36:db:35:24:09:4b:fb:c5:e1:3d:97:13:5b:d9:cc:
18:9d:c0:09:60:34:18:42:de:28:f5:7e:d1:cf:b1:b3:84:84:
d6:1d:6d:61:25:6c:b9:09:1c:45:f0:5a:4c:8b:80:38:be:34:
02:7c:9c:cd:d4:f0:c0:25:da:36:c2:16:bf:53:35:c7:24:87:
a7:20:07:30:13:2e:0f:cd:4f:76:f8:af:15:67:d6:7e:c2:b1:
d1:9c:e4:be:50:a3:08:f3:90:e4:11:fb:66:8d:f1:d3:90:b3:
af:ad:37:6e:2d:56:f3:4b:20:05:6f:09:83:69:53:c7:fd:ef:
e5:60:22:94:94:78:2a:23:96:df:81:48:e4:ba:5b:ca:30:4c:
48:ab:95:93:22:5e:51:fc:df:ae:f2:ce:ae:3d:79:d5:4c:91:
93:85:46:10:8f:9a:ac:53:d3:3d:1c:b4:82:e4:94:d0:5c:d7:
cd:97:e9:6d:2f:39:d7:1e:b6:9f:42:6d:eb:1f:df:8f:ae:5c:
41:02:bd:2a:d4:fd:3b:4c:8a:50:e5:91:58:51:ae:ed:44:43:
be:37:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 19:43:08 2023 by rpki-client on console-ams.rpki-client.org