Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43f6185f-4fd5-3d2e-9a27-58f0aa0af01d.roa
File: 43f6185f-4fd5-3d2e-9a27-58f0aa0af01d.roa (raw, json)
Hash identifier: UoYl4UmulZbu/RIXn1pfzB3gw5msgjFzcsO7IdvfmMk=
Subject key identifier: F9:4F:7D:E8:AD:AC:3A:21:5F:D5:7B:22:E8:35:0F:E6:24:51:58:7A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584420BBC2DF8EAD9614D84A3680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43f6185f-4fd5-3d2e-9a27-58f0aa0af01d.roa
Signing time: Wed 06 Dec 2023 18:23:19 +0000
ROA not before: Wed 06 Dec 2023 18:23:19 +0000
ROA not after: Tue 05 Mar 2024 18:23:19 +0000
asID: 834
IP address blocks: 108.165.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:20:bb:c2:df:8e:ad:96:14:d8:4a:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 6 18:23:19 2023 GMT
Not After : Mar 5 18:23:19 2024 GMT
Subject: CN=e07b6337-01ee-41ee-8856-a09d6ce6b41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:65:96:6a:52:b3:b8:54:bb:81:82:1f:ab:
75:2c:16:bc:9e:eb:40:d0:36:7a:46:9d:de:08:01:
56:80:2c:4d:c5:f1:e0:40:13:8b:b3:2c:ad:dc:d1:
6e:9c:40:78:88:e0:39:58:84:9d:1e:93:6c:63:6c:
8d:c6:b3:87:d5:66:d4:bd:cb:8d:66:51:58:bc:06:
ce:e8:09:d5:7b:84:25:ca:6f:4a:ef:93:a5:1c:5c:
8a:ee:93:34:26:82:3b:b6:c3:2e:ea:ea:b5:0f:16:
bd:60:66:0c:a9:84:0c:78:af:1f:00:0d:31:25:9e:
02:a3:92:f0:f2:f4:57:97:16:9a:ee:58:60:f8:9a:
da:7a:d6:a3:e9:9b:22:b9:7b:0c:ce:57:26:d7:dc:
c8:3f:c4:4c:b0:f0:cf:5b:2d:db:a1:4a:af:53:28:
7c:fe:43:95:10:65:17:c5:3c:0e:f8:9b:0f:a8:3a:
00:ea:51:7d:01:0d:a5:c1:df:74:95:ec:27:58:4f:
51:66:2e:fa:19:bb:4a:16:2e:72:f2:81:84:ca:09:
ca:4a:b3:7f:76:0e:f5:b2:e3:f2:17:70:c5:67:7c:
f5:01:1d:81:80:a0:37:15:90:25:af:4e:5e:e3:5d:
29:6e:d9:68:5b:d6:cd:f2:27:58:49:30:4a:00:15:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4F:7D:E8:AD:AC:3A:21:5F:D5:7B:22:E8:35:0F:E6:24:51:58:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43f6185f-4fd5-3d2e-9a27-58f0aa0af01d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:50:19:a3:2a:98:59:a6:b0:18:46:38:30:a7:92:12:c4:07:
02:cc:17:95:18:c1:bf:e8:f7:dc:a3:21:19:9e:3a:01:76:fe:
93:c1:bf:0b:1f:26:d2:f5:aa:1a:e7:30:4f:19:ef:1f:4a:9a:
68:ec:20:64:13:3a:54:b0:c6:e9:13:e6:65:0f:d1:2d:a3:47:
e5:3a:87:fb:83:57:4e:7e:77:8f:2f:84:64:ce:fc:9d:a7:6e:
77:5d:49:31:03:60:82:72:a4:e3:9d:d5:1d:58:05:14:90:ae:
41:03:06:71:ae:fb:ff:22:67:75:95:00:84:b1:3c:fe:58:36:
aa:fd:76:e4:4a:c7:25:9b:32:4a:75:6a:1b:1c:75:db:3d:64:
2c:f2:e1:c7:15:d9:a8:45:66:dd:47:e1:ee:a1:2d:3d:4b:52:
e7:1c:64:44:07:f0:48:a9:8e:02:a8:60:2f:df:99:52:b7:3b:
57:78:c4:1d:2f:5d:a4:ac:31:5d:5a:6e:1d:23:e7:6c:c5:ec:
b4:37:54:db:9f:8c:39:e7:44:dc:fa:1e:93:28:1b:79:b9:6e:
e4:44:57:0a:cb:64:4d:34:eb:02:74:03:17:18:63:d3:ee:c4:
1c:a9:10:ba:53:b0:42:11:9b:35:5a:16:42:cb:08:e4:76:9a:
0b:97:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 18:19:09 2023 by rpki-client on console-fra.rpki-client.org