Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecf184a2-79b2-38cb-9fa1-6af7bb5f7b3d.roa
File: ecf184a2-79b2-38cb-9fa1-6af7bb5f7b3d.roa (raw, json)
Hash identifier: rR4HvGhdkLHF3zqDk8ClhH1tho35e779YJREgFrV38A=
Subject key identifier: D8:8F:51:EC:A5:25:95:85:6E:22:C7:AE:02:D4:08:7C:DD:6F:9E:79
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842BDF13752A71B51A85261F9C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecf184a2-79b2-38cb-9fa1-6af7bb5f7b3d.roa
Signing time: Tue 01 Aug 2023 16:19:04 +0000
ROA not before: Tue 01 Aug 2023 16:19:04 +0000
ROA not after: Mon 30 Oct 2023 16:19:04 +0000
asID: 11798
IP address blocks: 166.1.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:bd:f1:37:52:a7:1b:51:a8:52:61:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 1 16:19:04 2023 GMT
Not After : Oct 30 16:19:04 2023 GMT
Subject: CN=79ac69af-26b3-4490-a54f-2fa15ecf31d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:72:ad:b0:b0:33:7a:bf:5c:65:5d:3c:85:
cf:8a:2d:77:e6:af:af:46:44:eb:0e:66:b1:e6:07:
02:1e:7a:53:99:47:27:27:c6:50:0f:be:99:85:18:
78:6f:43:2c:1c:66:12:71:c6:34:8e:21:b1:b0:cb:
ee:44:2e:62:f8:5b:af:9d:e0:ff:e1:20:93:ce:da:
8c:db:9e:79:36:d6:7a:55:f4:86:4b:11:b2:fb:3e:
4f:c9:9b:43:24:e5:a4:6f:aa:3b:cf:c1:7f:5b:9f:
2e:fc:e1:db:1f:5d:c3:fd:81:a2:d2:8f:5b:6b:6e:
1b:28:75:b4:95:d5:59:fc:53:fd:38:d9:a0:4d:6c:
56:1f:5e:ec:ca:8c:02:b3:b1:a1:81:c7:64:b0:c5:
4e:5b:ac:00:7f:d8:85:fd:85:7a:f6:d6:7a:52:5f:
92:b7:85:ad:92:10:22:7b:10:a3:09:fd:49:a9:91:
8e:08:fc:90:c1:1c:df:ef:7e:58:48:ad:75:75:7f:
2a:d9:75:c9:15:78:6f:ca:cb:14:92:c4:a5:94:7f:
65:84:24:5a:1e:75:e9:d7:78:d0:b1:40:04:1c:c9:
ae:bb:fb:f2:91:ae:2b:cf:49:14:1d:4c:59:dc:02:
15:7a:2d:4f:ce:00:0e:53:fd:50:45:0c:c6:79:e3:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8F:51:EC:A5:25:95:85:6E:22:C7:AE:02:D4:08:7C:DD:6F:9E:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ecf184a2-79b2-38cb-9fa1-6af7bb5f7b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:83:04:28:24:15:c6:73:2f:c4:b9:6b:90:9d:7e:91:0c:9b:
c9:30:9e:92:37:67:ea:07:c5:84:37:f1:82:69:4d:ea:17:e3:
e0:76:8d:da:bb:23:f6:71:8f:fe:21:58:71:34:51:f9:a0:d9:
49:f2:25:98:ed:58:49:71:d9:61:55:f8:c7:72:6f:9d:a7:96:
57:6d:c7:b1:ad:03:36:ee:9a:2b:bf:45:00:17:e5:a2:a7:57:
e2:81:f0:7c:65:b6:d7:78:a7:90:e5:13:d4:8a:5e:5c:53:fc:
8f:e9:50:d0:10:10:01:cf:d3:97:01:1a:49:9f:3e:27:81:fc:
90:99:7d:ab:a5:26:04:86:1d:05:20:e4:cb:ce:c6:16:ca:4f:
31:34:b5:c3:ff:17:73:0d:fd:06:32:bd:42:52:5e:e9:fd:26:
00:05:4b:1c:62:95:0e:59:5a:dd:3b:9e:70:da:9d:80:6d:c5:
49:cf:14:d1:e5:8d:1e:42:e8:21:45:37:91:3e:43:b1:ae:c2:
82:74:dd:e1:ca:86:42:ea:06:49:07:ce:da:5d:27:5e:84:f4:
9f:34:ee:7e:ac:5f:31:91:cf:0c:b1:e6:99:41:ee:0a:ad:b6:
8e:c5:00:d6:f4:14:25:76:94:23:f5:26:01:43:b4:f7:0b:42:
66:49:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 16:52:58 2023 by rpki-client on console-ams.rpki-client.org