Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3239e57d-8c69-3c9a-a0e7-69963da90fff.roa
File: 3239e57d-8c69-3c9a-a0e7-69963da90fff.roa (raw, json)
Hash identifier: ENfY7bsUsJR7BtLd+aJieC6Omuo5xUKG1gw7d4j5TSI=
Subject key identifier: CA:E6:BE:C0:10:D7:3D:9A:87:E6:34:FD:5F:A9:5C:1C:4C:E4:A3:3D
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285841E446F2691D84BFEBC414B380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3239e57d-8c69-3c9a-a0e7-69963da90fff.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Mon 31 Jul 2023 05:52:37 +0000
asID: 33696
IP address blocks: 166.0.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:f2:69:1d:84:bf:eb:c4:14:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Jul 31 05:52:37 2023 GMT
Subject: CN=2b14da26-db75-428e-bb58-3d3a7f71e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:53:9f:c1:c3:cc:ef:d3:6c:cb:f2:9b:79:
c4:79:9f:a5:38:f2:61:81:5b:b9:11:6d:1e:69:13:
c1:96:1c:a2:56:7c:fc:50:64:53:34:12:b8:cc:05:
d4:12:d7:4d:c0:8f:45:48:0c:e1:5c:36:c5:1e:ec:
42:8d:61:89:da:2c:70:ed:52:32:3c:f4:2a:93:f0:
4b:ae:e5:18:2b:53:ed:f5:ee:71:1c:bc:91:b4:2e:
d6:22:26:68:17:98:cc:d3:1b:1d:46:8b:f4:eb:03:
fa:3a:6b:32:9b:5a:8c:ea:25:b3:f7:e6:57:5a:63:
4b:a2:0d:d6:c2:0e:1b:2e:88:44:8f:45:21:7e:be:
eb:d4:e1:11:65:50:66:20:9a:f0:81:fe:b2:a0:c4:
e6:df:60:94:30:39:22:8c:df:e9:b0:89:b6:c5:5f:
36:bf:1c:53:e9:90:2b:e4:b0:1d:ca:17:ea:5d:fd:
8e:ed:9b:6b:20:ca:da:6f:81:1e:d1:b9:2b:84:a4:
8d:3a:09:5f:23:19:aa:28:ab:ba:7c:ae:8c:27:0d:
3a:3a:df:8f:4a:69:dd:12:c8:c1:40:05:dc:ad:d5:
a5:04:09:87:1d:37:da:b2:69:08:b4:4e:b4:91:35:
f5:a6:2f:be:18:ad:29:15:52:61:dc:8c:98:3b:b3:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E6:BE:C0:10:D7:3D:9A:87:E6:34:FD:5F:A9:5C:1C:4C:E4:A3:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3239e57d-8c69-3c9a-a0e7-69963da90fff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:76:d3:2f:fc:e1:87:16:ff:81:fd:4a:46:20:ef:f1:9e:8f:
b4:8c:88:e6:27:f9:0e:6f:c1:e2:7b:44:a7:2a:c8:8c:5c:1e:
03:9b:2e:b2:2f:e0:49:73:dc:59:34:10:fc:ea:4d:7f:ac:7f:
50:cc:6f:11:8a:09:ab:ed:6b:a3:4d:1f:6a:c3:85:04:21:eb:
8b:6f:3c:70:a8:a8:2d:4a:98:1c:da:06:1c:fa:1b:d1:ec:ac:
1f:d2:29:76:ae:c0:af:03:dc:42:2c:37:fe:0f:03:c9:61:bc:
cb:e5:15:11:ae:44:a2:0b:6e:66:6d:c3:5f:ef:35:d0:f5:0b:
db:87:cc:a3:c2:23:eb:53:7c:86:b9:73:2a:d4:be:f8:47:88:
bc:c2:e8:fd:56:54:dc:6c:30:3d:18:bf:c3:f2:e7:85:be:46:
1f:f0:40:fa:ff:2f:f2:fd:ee:a1:63:cd:a6:63:80:1b:7a:8e:
ac:8d:f4:ff:3b:d6:77:bd:bd:c9:d3:7b:89:1a:22:71:e7:98:
6c:46:ce:b2:8f:21:b6:18:5d:e9:95:b6:e8:6e:b0:b5:77:5d:
e6:ff:c2:21:97:18:4f:96:fe:0e:5e:c9:4c:1c:2f:bc:61:8f:
2f:8b:9c:19:d7:4a:25:53:fe:85:8a:68:a1:13:71:65:29:41:
5e:cc:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 18:11:23 2023 by rpki-client on console-fra.rpki-client.org