Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/472d9395-af4b-3020-ad43-e523ac20b6d1.roa
File: 472d9395-af4b-3020-ad43-e523ac20b6d1.roa (raw, json)
Hash identifier: Ge+jp29stWUSyUU7dfPtbYTzFHDvDJoQZbbszlqd7a4=
Subject key identifier: A4:94:E6:9E:BA:2E:1E:62:98:31:46:3A:1A:CF:1B:AD:A1:78:EB:81
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858426FEF865222F0BA8A4ABB74A0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/472d9395-af4b-3020-ad43-e523ac20b6d1.roa
Signing time: Tue 04 Jul 2023 17:42:36 +0000
ROA not before: Tue 04 Jul 2023 17:42:36 +0000
ROA not after: Mon 02 Oct 2023 17:42:36 +0000
asID: 834
IP address blocks: 108.165.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:6f:ef:86:52:22:f0:ba:8a:4a:bb:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 4 17:42:36 2023 GMT
Not After : Oct 2 17:42:36 2023 GMT
Subject: CN=3346e37f-46bf-43c1-9920-7d7ec83a3dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:b3:69:2f:ee:e0:30:b4:51:c4:b9:00:7b:
fa:37:4c:c6:35:9b:ea:4a:c9:22:61:7e:89:6c:d1:
e1:07:45:c4:ea:53:d1:c2:18:e0:bf:95:f4:21:1f:
9c:44:1d:69:23:5e:78:e1:2b:47:60:e5:26:81:db:
b4:c5:43:71:b8:53:ef:3a:5b:60:b0:d5:1e:9b:0b:
95:47:4f:18:14:32:e3:09:78:de:27:22:69:e3:cd:
ab:12:45:36:aa:be:9c:dd:8e:a3:93:b2:73:e8:f4:
5b:38:fe:00:5f:3e:a6:e4:e0:3e:a8:0a:dd:92:26:
4e:d9:02:93:f2:0d:64:e4:57:46:57:ea:63:1a:3c:
03:f5:3a:38:fb:d3:7c:39:0f:ee:82:5c:0f:94:bc:
64:65:e5:45:d1:e2:25:45:08:3e:7e:2d:81:18:ad:
3a:a6:9c:f6:7d:b3:42:7b:6d:a0:00:25:04:77:85:
e7:51:d7:cb:ff:69:12:62:56:39:2d:98:69:6f:9c:
f5:76:d3:b0:10:31:38:85:9e:63:26:c7:5e:e8:36:
1f:a7:48:89:80:52:01:2e:b3:4b:45:d0:3e:1d:cb:
8f:21:89:af:4a:fa:43:b5:8e:f9:1d:62:78:2d:29:
0d:e0:87:16:aa:00:07:bd:44:ca:f7:be:cb:a2:ef:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:94:E6:9E:BA:2E:1E:62:98:31:46:3A:1A:CF:1B:AD:A1:78:EB:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/472d9395-af4b-3020-ad43-e523ac20b6d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:c3:86:76:01:f8:d0:ed:6f:10:03:4a:49:0f:25:1a:83:f9:
8d:ef:26:16:c7:58:f1:1a:e8:a8:6d:57:f2:3e:c3:fc:b7:55:
e0:22:f7:ed:68:4b:e1:75:17:a1:46:37:47:1f:99:b8:7c:f0:
31:83:19:5c:63:1c:fc:e8:03:de:a7:4b:78:d9:b9:35:db:be:
66:7a:b1:f0:91:92:12:3d:41:91:d5:59:9e:6a:73:db:25:11:
ba:f2:f2:a0:e5:9d:fe:99:97:d9:9b:0e:2f:3a:93:03:d3:91:
14:18:b5:7c:55:54:01:5c:70:87:33:26:ce:b0:ba:6f:02:a5:
85:29:e7:5c:81:67:ca:43:7a:c7:73:04:db:2a:92:f6:f7:96:
83:b7:19:b7:c5:1b:f2:1e:a7:e6:32:5d:83:92:fb:0b:f3:79:
29:bf:77:50:69:3f:a4:91:5c:27:2c:59:e4:07:9b:51:0d:b6:
85:ed:6b:7c:5f:c5:b0:ee:23:3a:39:eb:3f:24:bc:55:ad:4f:
4b:08:5f:eb:f0:33:fd:d6:65:96:5c:11:85:2c:9c:db:fc:93:
cc:a3:83:8a:be:51:b9:9d:9f:94:7b:46:2f:ee:55:0d:3c:59:
64:b3:c0:31:95:b4:f3:07:15:04:cd:d4:e8:9d:38:42:d7:ea:
92:8a:c6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:29 2023 by rpki-client on console-fra.rpki-client.org