Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fed29af7-aa0e-3c57-b0d2-38823963e396.roa
File: fed29af7-aa0e-3c57-b0d2-38823963e396.roa (raw, json)
Hash identifier: 4jedlDg9t0TiUkG9+EEq/n0VPdUDf/ittjaQEPHju5k=
Subject key identifier: 95:BF:9B:9E:54:4F:C9:EB:B9:28:46:53:79:D4:00:EF:D6:3C:6B:5B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285844372C24EB7E2DC763657BE400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fed29af7-aa0e-3c57-b0d2-38823963e396.roa
Signing time: Thu 14 Dec 2023 19:17:32 +0000
ROA not before: Thu 14 Dec 2023 19:17:32 +0000
ROA not after: Wed 13 Mar 2024 18:17:32 +0000
asID: 15083
IP address blocks: 166.1.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:37:2c:24:eb:7e:2d:c7:63:65:7b:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 14 19:17:32 2023 GMT
Not After : Mar 13 18:17:32 2024 GMT
Subject: CN=fcbc15e4-ce0d-4d9e-b694-bd776bfb94ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:a6:ec:97:36:95:e7:5d:41:f5:b0:ec:7f:
5b:b3:0a:bc:40:84:25:42:5c:51:55:cb:e1:48:48:
2b:10:99:2e:4c:2a:73:36:81:34:5e:03:d2:e6:07:
7d:ac:36:d6:d1:1d:b9:0f:01:e9:f7:d8:57:64:58:
80:49:4f:04:e9:71:d7:06:9f:40:18:64:24:0d:f0:
2d:5f:8c:b8:47:82:05:86:7f:d8:ed:2e:e2:f8:0d:
9b:cd:e2:78:f5:96:6d:73:a0:93:10:fc:eb:2b:75:
81:64:05:37:5f:fa:16:81:05:1c:92:7f:e6:8d:9d:
de:d0:ce:9f:a0:7a:a9:72:dd:3d:1f:45:cb:09:41:
d5:20:08:57:9a:51:34:69:dd:ad:97:fc:d1:10:36:
c2:48:7a:93:97:09:95:dc:08:74:dd:61:49:3c:54:
32:2b:42:ec:d1:5b:3b:41:9f:f8:0c:00:c3:02:8a:
35:90:9d:2f:b6:df:65:ef:07:28:2d:dc:f8:5c:9d:
dc:da:b2:08:ed:b3:78:fa:ec:67:55:f1:a3:07:70:
9b:59:1d:3b:3b:83:0a:f3:7d:ae:dc:f9:7d:36:a7:
97:f2:ce:38:e1:9e:37:1c:fb:ab:38:d4:e6:73:55:
64:85:84:90:bb:b3:87:79:02:ac:a8:9d:6c:bb:8a:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BF:9B:9E:54:4F:C9:EB:B9:28:46:53:79:D4:00:EF:D6:3C:6B:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fed29af7-aa0e-3c57-b0d2-38823963e396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:65:06:a8:b8:4a:df:77:0e:c6:f0:01:6e:5b:60:86:65:bb:
2c:a1:93:29:65:77:22:a8:83:a4:ea:0d:0e:e2:f7:cd:bd:49:
1a:1f:f7:34:32:dd:1b:ff:af:59:04:8a:93:7b:8d:b7:91:60:
47:53:d2:af:ba:f7:7c:e6:33:f3:15:bf:5b:86:55:92:25:cb:
a7:67:1a:d0:f4:58:5e:7a:0c:08:f4:dd:99:9c:ac:8d:14:0d:
46:91:6e:6b:d9:54:58:30:69:23:8f:99:52:31:c5:e7:bf:11:
d1:a3:ed:09:f7:74:98:34:c3:91:bb:b0:3e:e9:24:da:cc:2e:
56:d4:54:16:88:3f:c1:9b:5c:3c:ad:1a:6d:d3:3b:ec:95:01:
0a:78:db:f3:0a:aa:c0:02:3b:17:1e:5c:b0:60:4c:ef:6e:cd:
ad:b8:2a:8a:84:b0:1d:4c:03:64:4d:e4:c8:c5:11:14:3d:12:
5b:66:a5:74:29:9b:29:5d:cb:60:df:e4:9d:6b:a5:ee:8e:b5:
f3:64:78:0d:f5:ad:64:5d:cd:59:b1:92:1d:64:e6:30:b1:88:
35:6b:44:1a:ba:96:dc:70:2a:c4:e7:14:ab:62:f8:14:18:bb:
73:9d:5f:71:f7:d7:ac:f7:38:df:d4:d9:9d:82:22:0a:78:bb:
60:90:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 21:19:22 2024 by rpki-client on console-ams.rpki-client.org