Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d71016f-a043-3bbb-ade7-28ca08905e2e.roa
File: 3d71016f-a043-3bbb-ade7-28ca08905e2e.roa (raw, json)
Hash identifier: tNfqimzr7B/VUa9kA5DHc9LxKQjFhvjCNgNcQt/gO44=
Subject key identifier: C2:08:6A:04:19:62:0F:4A:41:77:CB:A1:77:B0:7A:7C:5E:11:76:45
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285842C666854D90DA4F23007F7A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d71016f-a043-3bbb-ade7-28ca08905e2e.roa
Signing time: Fri 04 Aug 2023 17:01:53 +0000
ROA not before: Fri 04 Aug 2023 17:01:53 +0000
ROA not after: Thu 02 Nov 2023 17:01:53 +0000
asID: 51722
IP address blocks: 108.165.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c6:66:85:4d:90:da:4f:23:00:7f:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 4 17:01:53 2023 GMT
Not After : Nov 2 17:01:53 2023 GMT
Subject: CN=6d1ebd53-e40e-4c15-91fa-56405178caaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:7f:19:f6:2c:6f:c5:7d:34:11:51:d7:93:8d:
74:ba:bb:86:db:ab:9f:a0:00:3c:fb:7e:60:0a:39:
63:10:eb:4a:3a:65:46:59:09:58:92:ed:10:7b:2b:
b8:86:d4:64:a5:79:ec:6a:63:ff:7d:24:55:03:ce:
ed:4d:5f:5e:59:05:45:93:ff:80:ee:28:d7:3f:8d:
e9:55:95:77:a6:19:37:cd:2e:6b:39:f9:1f:c6:2b:
f0:5e:18:3a:ee:68:32:22:2d:d3:0f:c0:17:fb:83:
8b:a2:43:56:0c:53:77:e5:3b:ac:3e:90:7f:eb:7e:
e6:9c:19:80:ca:0e:27:47:14:34:cc:fe:17:23:a6:
0b:d1:a0:01:b5:33:34:9e:0d:db:18:cf:8c:d0:25:
03:d0:77:cb:4d:3d:b3:28:45:32:5f:81:74:16:ee:
e3:3b:13:ae:9d:0c:c8:c1:04:16:89:d8:38:fb:6c:
5d:96:f5:ce:a2:b3:f3:fd:4c:c7:3a:6d:d2:2f:63:
08:ed:dd:84:f5:74:ad:bf:09:e8:aa:42:5b:3c:e8:
3c:3a:4a:83:08:58:17:b5:07:eb:f7:8e:98:1a:de:
65:09:6a:62:de:e8:a0:91:46:9f:50:69:48:1f:b6:
38:31:bc:47:51:04:24:9d:02:bb:1c:8b:0d:4d:1a:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:6A:04:19:62:0F:4A:41:77:CB:A1:77:B0:7A:7C:5E:11:76:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d71016f-a043-3bbb-ade7-28ca08905e2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:10:05:5c:f1:4b:d2:b0:fa:62:f8:f2:9b:84:3d:98:d4:c9:
22:54:62:77:2c:5d:09:2d:ab:58:b4:ce:25:af:70:13:24:67:
91:df:0f:2b:92:8e:1a:fb:81:80:3a:00:4f:fc:79:26:66:19:
81:f8:81:98:5b:ef:a0:3f:11:da:cc:11:fd:7f:9e:03:cd:55:
28:1c:0c:0e:f1:59:f6:a0:cd:0d:51:13:89:04:08:b8:b7:88:
d4:3d:3d:c1:4e:4d:cb:7c:d9:a9:80:7e:7f:51:66:56:fd:79:
1d:87:c3:72:0d:0c:9a:da:4d:19:76:bf:fb:87:89:6b:32:f4:
12:02:78:35:84:e1:4b:8c:47:d4:9d:f8:a6:d6:4d:d0:77:df:
66:d5:fe:8f:d7:7f:55:2a:a6:23:6e:d8:19:a0:04:cd:aa:72:
41:14:8e:9a:71:97:3f:1b:56:61:a8:02:c0:8a:44:85:d1:ff:
c0:d4:c6:fc:52:4d:5a:d6:7e:cb:99:7f:26:bd:c1:2b:a1:fb:
78:8f:9c:63:e3:9d:85:e3:b4:05:97:08:ad:82:d5:2f:38:fc:
0b:be:c2:3e:1e:a2:54:8e:70:2e:62:c0:50:35:19:30:29:1e:
6b:29:7f:6e:04:bf:93:4c:73:df:d5:c6:2d:25:2d:b4:05:f2:
09:9a:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 18:24:26 2023 by rpki-client on console-ams.rpki-client.org