Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bddb494-8716-39dd-8652-410f4a8a1b10.roa
File: 0bddb494-8716-39dd-8652-410f4a8a1b10.roa (raw, json)
Hash identifier: iZ/vuqLjhoxD7bu8M9UngGOW51NcGOjKUWFIqyIDLv4=
Subject key identifier: 38:4E:91:9E:76:5C:51:D0:8B:82:29:3C:6B:B7:FC:02:21:F1:B8:9B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858444EE3E7245E7334270DBE5DB8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bddb494-8716-39dd-8652-410f4a8a1b10.roa
Signing time: Sat 23 Dec 2023 07:11:23 +0000
ROA not before: Sat 23 Dec 2023 07:11:23 +0000
ROA not after: Fri 22 Mar 2024 06:11:23 +0000
asID: 834
IP address blocks: 108.165.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:4e:e3:e7:24:5e:73:34:27:0d:be:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 23 07:11:23 2023 GMT
Not After : Mar 22 06:11:23 2024 GMT
Subject: CN=5697e096-f23b-4027-84f6-187a387d5a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:c1:05:d9:d9:f2:90:25:82:90:2f:ea:61:
ee:5c:41:60:26:ad:a4:56:af:a9:96:7f:88:49:c0:
36:1f:d0:48:e3:6f:08:05:b5:f2:ae:1a:f0:26:4b:
ce:f7:38:fc:3b:23:09:62:da:ee:aa:5e:c9:d0:38:
e2:5c:12:45:dd:1c:54:32:61:ec:cf:98:3d:b9:41:
48:4f:3b:53:0a:e5:ec:f7:12:fa:aa:1d:73:69:98:
6a:47:fa:a1:24:af:cd:ff:a9:dc:e7:e9:b5:cf:a8:
0a:b6:5a:1c:9d:55:a5:b7:e3:8e:31:c7:9f:59:9c:
d4:12:20:50:f7:fc:71:96:ae:ac:e6:09:93:14:52:
82:df:d1:ea:39:c1:56:09:95:ed:0c:b4:0a:b8:0d:
48:bd:34:d3:4b:1d:d3:6d:95:39:f3:6b:05:b3:0c:
83:b5:c5:e1:7e:97:97:f5:86:1b:03:b1:32:ec:91:
92:a5:12:d5:c9:0d:d8:49:6f:fb:5d:9f:c5:d3:62:
02:e4:b6:ce:94:ad:6a:88:da:6f:63:21:2e:34:0b:
76:5a:f1:9e:f8:cf:f3:fa:75:1f:9c:9f:c1:13:e1:
84:0d:3b:45:db:86:9b:be:65:ed:7d:1f:57:c9:69:
b3:79:5b:4b:4e:a5:89:94:d5:de:d0:9b:05:33:95:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:91:9E:76:5C:51:D0:8B:82:29:3C:6B:B7:FC:02:21:F1:B8:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0bddb494-8716-39dd-8652-410f4a8a1b10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ae:c1:3a:46:0c:ea:94:9d:bf:af:3b:c3:e6:77:bf:ba:b8:
dd:a5:ed:30:78:b5:6f:e1:53:a5:c7:e3:17:9e:17:6a:db:96:
be:3d:10:fd:cd:98:53:57:74:9e:b7:5b:49:8a:3a:ca:a5:ae:
21:4c:7f:28:f8:30:31:7f:99:bf:84:7f:9b:f7:67:97:d6:37:
d2:f8:12:fb:f9:c7:d2:ea:2b:90:e8:5b:ec:31:9d:24:ff:32:
0a:40:37:a4:fc:77:27:82:29:b7:a9:9b:fa:75:ab:68:64:05:
af:60:5d:4a:6f:e8:d8:1a:c9:5c:87:ad:50:14:a1:87:b5:26:
51:c2:88:92:e2:3e:c5:2b:c2:b3:08:98:1b:d6:1b:1d:6c:2e:
b2:86:e0:a0:d8:db:8b:98:20:de:6f:e5:ca:c7:03:70:0b:56:
be:2d:38:1f:e2:25:1b:b4:0c:47:2b:1b:28:d6:cf:ed:23:f5:
11:a8:73:fc:7d:aa:5e:2b:8f:f1:9b:3c:63:a2:e9:c8:86:b6:
57:24:60:05:f6:19:b3:c2:0d:75:f4:10:5f:b0:f3:80:c5:6b:
5d:24:97:34:e9:8f:fd:88:0a:6b:b4:bb:4f:44:b2:21:b4:39:
84:47:2e:54:a8:dc:76:87:1e:4c:0a:72:f5:05:2b:a3:b1:38:
5e:e5:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 04:04:46 2023 by rpki-client on console-fra.rpki-client.org