Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5de34fe8-0cc0-370c-8fa6-5627909f737c.roa
File: 5de34fe8-0cc0-370c-8fa6-5627909f737c.roa (raw, json)
Hash identifier: PAmMz1UxUgrsVtLFpNETkEGGBz0POh6vug4GnkKiB1I=
Subject key identifier: BD:A3:91:46:7D:D0:AE:83:79:4F:AB:5D:91:C0:3C:DB:87:D6:43:AF
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285840045E7C401F9C07E047D59B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5de34fe8-0cc0-370c-8fa6-5627909f737c.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Wed 26 Feb 2025 05:00:00 +0000
asID: 8100
IP address blocks: 108.165.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:04:5e:7c:40:1f:9c:07:e0:47:d5:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : Feb 26 05:00:00 2025 GMT
Subject: CN=aedc8013-c68f-46ee-a9e9-efb1a5fb29a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:fa:de:6e:9a:37:6c:e4:13:91:48:a9:53:
21:c6:4b:27:c4:13:ab:02:0a:fa:53:e6:e4:17:4a:
5e:a5:fc:13:c1:7e:04:f3:e5:5a:ac:ab:4c:0c:5a:
78:17:03:e4:86:51:a2:fa:81:07:5d:f3:c0:42:3a:
ec:d2:17:cb:45:5f:b8:67:16:29:f7:eb:b1:8f:78:
96:53:ce:76:5b:f8:d0:2e:ad:3e:56:4a:2d:c1:40:
8b:5b:3c:72:68:62:e2:f4:87:e9:67:8d:cd:a8:d1:
9f:88:c5:be:c9:5b:2b:57:20:cf:89:9c:56:e5:50:
8e:0d:19:d3:cf:d9:2b:90:7d:cd:8a:9e:fd:59:6c:
76:88:61:3a:1a:e9:90:63:9c:35:5d:74:8a:81:c6:
05:bd:0d:e8:6c:be:b4:05:4f:0c:19:83:33:58:03:
f5:b1:b1:a6:48:2c:08:1d:b7:f4:03:62:6c:cc:d5:
c4:92:c1:61:97:86:03:ed:9c:d9:93:65:73:7e:ce:
2c:30:12:64:ee:ed:b0:d7:46:ed:b3:0e:ae:9f:ec:
4a:9f:0a:ee:7f:89:f8:6c:48:99:fe:ff:71:28:5f:
cf:b1:03:cf:05:35:b7:f6:be:2b:78:fa:b5:d5:4f:
ff:83:d4:2a:45:4b:fd:5a:9f:39:02:77:f0:2b:05:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:91:46:7D:D0:AE:83:79:4F:AB:5D:91:C0:3C:DB:87:D6:43:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/5de34fe8-0cc0-370c-8fa6-5627909f737c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c3:c3:08:52:fc:04:33:75:08:6c:d3:e4:77:7a:fa:4d:0f:
a8:65:1a:c9:c1:a4:10:7c:45:b9:da:44:c1:94:e4:73:d8:d6:
5e:03:5a:d2:0e:29:a2:05:db:da:a2:0e:ec:41:71:77:88:58:
25:59:20:b1:9b:1c:26:cb:da:d1:e4:99:04:59:01:a9:ab:72:
9d:3e:de:17:95:42:a4:96:30:82:36:cc:aa:09:47:85:94:e2:
fb:91:3f:5d:a1:49:03:29:94:fb:0d:1a:7f:c5:ae:3d:2d:1b:
82:01:d3:13:71:3f:15:89:07:8b:01:ac:1b:72:24:1c:2e:7b:
ad:97:3b:7b:12:a2:ab:16:d9:49:28:5d:90:5e:8d:7b:44:0e:
00:7e:81:d9:b3:26:03:4c:e9:14:f6:09:a6:3f:53:7e:76:a0:
60:e9:07:74:55:7c:52:5e:ef:07:51:90:0b:ba:7c:54:24:31:
92:75:2d:4b:2c:37:0d:d4:95:49:aa:95:5a:14:3a:9a:a0:b0:
a9:fc:ff:da:cd:da:de:14:2a:a0:5f:a8:5b:09:5c:dd:59:6c:
30:06:44:b2:5b:5d:c1:b5:ef:81:68:bd:b4:43:a7:0b:e5:c3:
aa:2a:be:fe:4b:06:b0:6c:b7:5c:aa:2b:a1:9b:07:41:c2:ce:
c4:41:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:37 2023 by rpki-client on console-fra.rpki-client.org