Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afd5fa96-6113-3899-a922-c749614bbb4d.roa
File: afd5fa96-6113-3899-a922-c749614bbb4d.roa (raw, json)
Hash identifier: QxFbiFvebP/oq4olNu1gREW1x6TuCoIpj3NvTok/9pE=
Subject key identifier: AD:09:36:D6:75:12:58:F2:E3:F4:38:28:49:11:90:30:AB:D5:28:1A
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285844CEB5085375817468F9613680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afd5fa96-6113-3899-a922-c749614bbb4d.roa
Signing time: Wed 07 Feb 2024 02:00:24 +0000
ROA not before: Wed 07 Feb 2024 02:00:24 +0000
ROA not after: Tue 07 May 2024 01:00:24 +0000
asID: 139076
IP address blocks: 66.160.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:ce:b5:08:53:75:81:74:68:f9:61:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 7 02:00:24 2024 GMT
Not After : May 7 01:00:24 2024 GMT
Subject: CN=c113de5b-1e64-401a-9fe1-a0802487cad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2f:96:35:d5:aa:3e:00:fe:c3:c6:60:03:c3:
45:20:03:6b:5d:da:a9:38:b9:6a:01:9b:d3:49:65:
fb:3b:ff:72:0a:0a:65:c5:dc:50:6b:1e:e8:ab:ed:
19:03:8c:33:d7:ab:fa:12:85:bc:72:ca:28:bb:06:
88:98:42:e5:ad:83:45:fa:4b:aa:36:5b:ac:c7:9a:
3f:36:0a:04:eb:2f:62:c4:59:d6:b1:a5:1d:2e:07:
95:19:44:b7:cb:3d:07:b3:fe:19:ef:b4:2b:2e:5d:
fa:db:82:e5:92:e1:d2:b1:0e:c0:4b:62:42:83:56:
23:eb:00:c9:80:43:49:84:5e:e6:59:ce:bf:21:6f:
16:44:17:13:63:31:6d:c6:bd:42:26:cb:13:19:c2:
c4:b3:7e:5a:15:e4:f0:a4:99:ed:cf:a9:97:e6:b9:
5d:a7:d7:ef:65:43:33:da:a9:c7:e6:55:90:51:80:
d0:99:98:f7:3f:e3:00:5a:d9:77:ed:ca:9f:92:1a:
bc:6c:3f:c7:2e:47:e9:41:44:f7:6d:e4:3d:d3:9c:
8d:12:a8:c0:cc:45:b0:12:dd:79:bc:1d:7c:d8:64:
5f:fb:ce:99:73:9f:77:4a:60:e3:53:1f:ce:27:36:
b5:0c:e9:5a:aa:94:f9:d7:36:fb:3f:7f:3a:9f:d7:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:36:D6:75:12:58:F2:E3:F4:38:28:49:11:90:30:AB:D5:28:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afd5fa96-6113-3899-a922-c749614bbb4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
66.160.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:a5:21:20:36:77:33:82:f0:6b:b5:3b:a1:35:fe:6e:11:b1:
40:08:a6:d2:ad:31:6d:59:2d:88:a2:a7:9c:e0:c0:3d:b2:54:
b6:dc:a3:aa:c4:f2:73:c0:b5:a9:85:4b:17:1c:1d:fc:71:c5:
3b:eb:c8:bb:79:eb:2b:e4:82:f2:44:6b:cb:32:a1:32:29:15:
9b:4d:bc:83:05:35:b8:84:89:b4:60:09:bb:f8:3b:fd:0f:fa:
4f:fc:1a:b2:05:b3:cd:a0:a1:a0:a2:35:28:61:20:7e:9b:f6:
56:05:5a:43:53:ac:a5:c8:ee:7c:2c:67:4c:ff:b0:d2:bb:c8:
ef:db:4f:8a:84:78:b2:64:71:a7:f9:7b:47:17:6f:45:59:cc:
9d:f9:ba:49:93:f7:e9:bd:da:65:c2:56:28:e0:74:1a:19:9d:
e3:1a:4d:79:d7:10:57:67:f4:b9:06:c2:e9:0b:11:c6:ab:e8:
36:fb:d1:66:ba:37:5c:14:dc:87:20:d0:e8:d0:30:b5:e7:57:
67:50:df:a4:f1:91:70:5c:ee:9c:c8:7f:78:ee:e0:44:b0:6a:
69:46:d9:7e:cf:6a:d1:7f:cb:ea:c6:f4:09:31:02:f3:ee:90:
1b:16:06:89:d3:54:72:03:ff:86:80:3c:f6:fa:d3:73:8a:46:
72:42:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 01:10:33 2024 by rpki-client on console-ams.rpki-client.org