Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff591363-6865-31f7-822d-331e40a2a2b0.roa
File: ff591363-6865-31f7-822d-331e40a2a2b0.roa (raw, json)
Hash identifier: SWSNCfrbNlrdc8/qFuS0BdZOI2HWOxjPv46lq6vUMhU=
Subject key identifier: 07:AA:CB:FD:71:95:A1:CB:86:02:06:62:E8:CB:DF:B5:88:01:C0:76
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858445C3EF3885D03D0A68CB596C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff591363-6865-31f7-822d-331e40a2a2b0.roa
Signing time: Thu 28 Dec 2023 02:00:15 +0000
ROA not before: Thu 28 Dec 2023 02:00:15 +0000
ROA not after: Wed 27 Mar 2024 01:00:15 +0000
asID: 11798
IP address blocks: 166.1.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 17:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:5c:3e:f3:88:5d:03:d0:a6:8c:b5:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 28 02:00:15 2023 GMT
Not After : Mar 27 01:00:15 2024 GMT
Subject: CN=6bed8047-3cbb-48c1-a321-b086609429b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:74:e0:d3:52:a5:fd:8d:28:d1:38:ef:8f:
7e:75:de:f1:73:ef:aa:e3:b3:78:6e:82:e9:d0:cc:
40:03:c4:f1:9e:68:d9:57:88:b9:75:10:07:87:83:
42:4d:1b:24:0e:ba:57:de:29:f2:7b:f8:30:98:c4:
3b:d1:19:00:b9:fd:52:b2:94:35:61:44:30:a2:83:
3d:e4:46:2d:a6:a4:d7:f1:c6:92:b8:12:bf:2c:81:
ed:7f:67:b5:aa:1c:d5:ef:2f:fe:99:3b:66:96:3d:
c8:6a:0f:a7:0e:3d:03:52:2e:39:f2:8e:2a:2d:ab:
52:03:31:40:14:4a:f8:e7:65:f0:ed:ad:65:e0:f8:
e2:b6:f7:6b:c2:d3:b0:c3:47:b7:fe:25:25:70:cc:
ef:b0:e1:fd:88:af:f8:54:2b:e4:41:5c:07:d6:1b:
4e:85:d7:79:aa:d4:39:bb:3f:75:d8:1b:45:28:60:
df:23:7f:42:6e:d4:3f:05:aa:43:5c:13:86:5b:68:
b3:83:a4:0e:17:6e:0a:69:44:90:6d:f6:5b:c9:53:
e4:23:f8:c0:11:85:9c:b0:55:ce:4a:c1:3e:f7:72:
cd:45:71:c6:f0:cc:f2:f7:9f:34:1a:45:41:66:96:
4a:e8:7d:8f:e8:91:f3:41:fa:df:c6:41:ed:6c:ab:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AA:CB:FD:71:95:A1:CB:86:02:06:62:E8:CB:DF:B5:88:01:C0:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ff591363-6865-31f7-822d-331e40a2a2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:1d:ac:29:9e:cf:ef:c8:3b:d6:01:2c:48:51:e6:c9:71:4e:
17:b3:19:90:eb:12:25:9f:9f:c1:c2:d4:98:6e:4c:ae:c8:f2:
28:d5:ea:52:0c:bb:00:66:9b:b6:2c:18:79:df:4c:1a:2f:dc:
e8:f2:bf:c2:93:8c:90:33:ec:3f:88:82:b9:35:f2:54:81:da:
39:39:ea:a7:8f:98:50:5f:21:7a:6c:ab:3b:8c:c2:b1:1a:23:
7e:8d:1f:d5:60:10:b8:1a:40:82:1e:a6:5e:cf:19:a1:c7:22:
92:d1:94:c6:09:ab:09:76:71:09:77:67:2f:2c:be:12:b4:63:
ec:53:aa:60:16:73:70:f8:f0:f5:cb:5b:d1:91:3a:cc:5a:12:
68:b5:2a:6e:a2:ae:39:fe:35:46:dd:46:94:eb:1f:9d:81:b2:
be:ed:a9:3e:18:40:c1:fd:db:2e:b4:30:8b:ce:4b:28:88:04:
0a:bb:3e:eb:8c:ba:e4:79:89:7b:02:3f:b5:9f:d7:f1:90:5e:
78:54:ce:96:bd:31:49:22:8a:fe:b6:56:8d:5f:52:60:af:59:
c1:e9:f2:8e:75:fe:26:33:53:b6:23:20:ac:b8:f8:d5:15:0a:
d4:60:b5:d4:8e:07:50:b5:03:98:6e:07:b5:57:63:21:1e:9a:
91:24:f5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 23:17:20 2024 by rpki-client on console-fra.rpki-client.org