Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/deb4fb72-1bc5-3eeb-a443-983e1c666b06.roa
File: deb4fb72-1bc5-3eeb-a443-983e1c666b06.roa (raw, json)
Hash identifier: UtCFf4O+bq0vOlCyd0yvvG5NnQNr9hPgI7jmOuENAo8=
Subject key identifier: A1:AF:0E:F0:C0:65:08:96:6A:9D:FA:5B:49:B0:DC:D8:C4:94:38:75
Certificate issuer: /CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
Certificate serial: 010D0C9F4328583CCA8CC91AD3D0D41F5C520300
Authority key identifier: 36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/deb4fb72-1bc5-3eeb-a443-983e1c666b06.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Sat 01 Feb 2025 05:00:00 +0000
asID: 14618
IP address blocks: 66.187.204.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 05 Feb 2022 18:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ca:8c:c9:1a:d3:d0:d4:1f:5c:52:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8d78a-02cb-46ee-acd1-464f03f3e12a
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Feb 1 05:00:00 2025 GMT
Subject: CN=d003a3ff-5adc-4e6b-a941-f5f28f61cb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:7f:14:d8:9b:1b:4a:f3:ef:4c:67:0e:bd:
75:e8:a4:d8:46:80:86:c2:fe:61:21:e4:20:f9:23:
a9:a7:1b:1e:ff:60:5c:3e:ab:2d:f8:ad:43:4f:54:
52:c6:ab:1d:75:4a:57:2e:d2:a0:85:00:ee:b6:7e:
a7:b9:6c:53:be:ba:dc:43:3e:2f:d2:6e:b5:d7:8c:
99:72:a3:c6:6a:3e:fd:26:78:c5:ff:0f:35:11:60:
8f:90:30:8f:1a:5c:db:3b:b4:4a:33:80:65:ae:d4:
12:65:e5:ac:37:4d:b7:58:c1:7e:14:74:ca:9d:3a:
cd:ab:88:ce:38:66:27:76:09:25:24:b8:92:b2:b4:
9d:cf:5a:c7:dd:75:73:94:08:66:2a:d0:b8:83:9c:
4a:fc:d9:c6:79:ac:0d:81:3a:f0:20:ad:d9:79:15:
ce:a5:68:5b:00:72:e2:a8:2f:8d:4b:ba:9e:78:13:
f1:8f:68:f0:89:da:f4:42:f3:56:cd:8a:17:28:41:
f6:e5:35:00:21:9a:d9:4a:be:b3:7f:ca:94:2b:58:
3c:bd:9c:44:4e:21:66:38:ab:ee:07:36:01:0d:e9:
33:ec:1a:ed:87:34:7c:66:47:3f:09:f0:1a:c8:f4:
f2:7d:11:02:c9:d0:55:13:75:38:db:ea:83:9d:a4:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AF:0E:F0:C0:65:08:96:6A:9D:FA:5B:49:B0:DC:D8:C4:94:38:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/deb4fb72-1bc5-3eeb-a443-983e1c666b06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.crl
X509v3 Authority Key Identifier:
keyid:36:48:5E:C5:9A:6B:CD:87:9A:78:DA:0B:5A:AE:B9:89:1B:98:14:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1dd8d78a-02cb-46ee-acd1-464f03f3e12a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:51:a4:52:f2:c3:e0:20:7a:4f:0c:aa:74:fe:f6:93:87:4d:
36:73:d5:d4:99:c7:a7:78:40:c9:c8:69:3e:73:77:04:b6:a9:
d1:a6:68:90:25:11:94:d4:34:2e:4e:c8:89:83:03:5e:5c:53:
74:ad:76:e1:de:3a:13:f5:fa:3d:82:29:69:6a:9c:85:d6:41:
0a:e6:eb:b4:f0:54:ae:3d:b9:48:b4:b0:f6:bc:8e:c2:24:72:
bd:2b:fa:10:2b:59:d4:fb:02:f1:34:f7:8f:c9:05:99:9d:37:
38:6a:0a:77:92:d4:c9:18:fd:85:54:76:7f:de:67:e9:91:da:
ff:f9:e3:1b:bd:01:36:4d:6a:df:15:b9:3f:ad:c7:fc:7f:51:
4b:ad:87:c7:0b:f4:29:7d:b6:46:e9:a8:f7:7c:18:6e:72:12:
6d:4a:5f:0e:52:86:d2:42:99:98:ed:c4:df:8a:26:2b:c0:1e:
3f:63:e9:1a:dc:12:9c:7f:d7:c2:a2:02:81:4e:61:2e:4c:31:
c3:91:ee:d4:07:24:15:8d:28:7d:fa:c5:7d:7d:98:bf:26:4f:
18:49:ce:96:55:8c:4a:37:00:31:2b:08:ca:13:e0:c9:08:a6:
85:0d:20:ad:c7:80:b2:30:40:03:0f:c6:4e:fe:1f:a5:70:ff:
cd:ea:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:13 2024 by rpki-client on console-fra.rpki-client.org