Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d595e29-f909-3f9e-bc2e-e96b63b16cb9.roa
File: 1d595e29-f909-3f9e-bc2e-e96b63b16cb9.roa (raw, json)
Hash identifier: 3bQwUg1NHonmX35+OiEM9kmdf8+3li7JU5XotLAJEnU=
Subject key identifier: A9:3D:C2:27:A9:D3:37:2E:72:16:E0:8F:A2:19:F0:F0:10:C0:E5:99
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858447F8BCCDB558FFDD03EB65F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d595e29-f909-3f9e-bc2e-e96b63b16cb9.roa
Signing time: Tue 09 Jan 2024 17:28:29 +0000
ROA not before: Tue 09 Jan 2024 17:28:29 +0000
ROA not after: Mon 08 Apr 2024 16:28:29 +0000
asID: 834
IP address blocks: 108.165.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 18:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:7f:8b:cc:db:55:8f:fd:d0:3e:b6:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 9 17:28:29 2024 GMT
Not After : Apr 8 16:28:29 2024 GMT
Subject: CN=722af567-c251-4442-a908-43abb4dfc50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:b7:27:25:a9:25:68:7a:2a:a4:f9:47:43:
f1:0d:fe:4f:4b:d3:25:f5:22:df:0b:67:9c:6c:77:
7d:8e:5a:a2:60:e5:59:cb:c1:0d:0e:6d:0f:3a:51:
bc:d3:35:66:26:6f:ca:f6:1f:89:53:9d:89:7a:cf:
18:37:5b:b6:3c:d1:90:5d:35:13:38:87:d1:85:e7:
17:a3:f3:10:f4:f3:15:c1:0b:8f:b1:8c:f0:3e:28:
07:03:89:03:63:48:de:d6:9a:32:4a:62:dd:84:88:
0b:c2:aa:56:1d:eb:47:03:42:79:bb:b8:19:09:8b:
b1:fe:f0:50:1d:06:0f:da:87:c7:43:c0:fd:3d:04:
5c:88:97:b7:e9:74:19:51:5f:71:db:b1:81:71:1d:
98:ac:c7:2f:db:2b:ac:d0:eb:96:71:c0:d9:21:5b:
e6:af:53:8a:3a:4f:0a:0d:86:4d:18:6d:23:66:9b:
d6:dc:ce:8c:98:ee:2d:a5:e0:4e:ae:4d:ff:3e:51:
95:82:17:b5:e9:93:05:66:c3:c0:db:e9:45:34:61:
25:b8:9a:d1:85:8c:85:2a:b1:59:9a:9b:6e:ff:e5:
e4:f3:6d:49:3c:97:6d:42:09:f3:3b:22:bd:41:ee:
fe:22:91:e7:de:77:2c:ce:22:f1:cc:af:0e:66:72:
88:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3D:C2:27:A9:D3:37:2E:72:16:E0:8F:A2:19:F0:F0:10:C0:E5:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/1d595e29-f909-3f9e-bc2e-e96b63b16cb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d4:14:9e:d1:9e:25:9e:d1:1d:3f:6a:da:7a:f3:56:69:ce:
ca:d5:fe:b6:19:2d:46:e1:7c:2d:33:60:48:93:0c:d6:1e:db:
7e:b3:be:86:de:33:d7:cb:29:4a:f0:d4:ce:95:27:55:ef:31:
49:fb:b6:57:7f:b9:27:d0:e6:c5:70:b4:8b:38:be:a5:be:ab:
0b:e6:6b:39:c5:4c:7e:ea:54:bf:39:0e:a2:2c:20:9e:ec:a4:
21:26:69:53:b9:d5:ce:61:d6:7a:cd:2e:c6:7c:9e:71:32:3d:
88:ce:7f:8d:1b:84:9d:f5:eb:4b:e3:94:c7:1d:26:f4:05:73:
93:1b:a8:03:92:1c:50:14:9d:bb:03:6a:1b:ad:bb:e1:8e:8b:
ab:8b:74:c7:fd:f5:c8:de:1d:6c:0a:30:ff:ff:fe:bb:67:15:
89:5f:9d:32:ec:9e:7c:c4:6e:bf:64:8a:87:6b:7c:0a:b2:6e:
f6:7b:ed:b1:b2:e5:22:03:28:2e:18:9b:2d:47:be:a4:f5:28:
5a:5b:a8:3f:e1:0f:da:83:0a:9f:76:40:d5:89:b8:d0:5e:3b:
71:85:fc:27:dc:69:61:b2:da:db:04:88:c8:80:96:aa:3c:c8:
e0:9a:02:b4:e3:89:1c:24:37:85:82:b5:f9:91:a3:df:09:b3:
11:4f:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 23:51:23 2024 by rpki-client on console-fra.rpki-client.org