Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67a4101f-212f-3ac5-a72e-c0eb7e8fde9e.roa
File: 67a4101f-212f-3ac5-a72e-c0eb7e8fde9e.roa (raw, json)
Hash identifier: O7As+OoGhJuC7e9McijUagbg9AP6IceHldejqu9c5d4=
Subject key identifier: 08:C6:1B:70:94:4E:52:6B:F3:2B:4A:1C:05:E3:8A:37:F9:E6:BE:64
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584516735940CC41C99195F14680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67a4101f-212f-3ac5-a72e-c0eb7e8fde9e.roa
Signing time: Sun 03 Mar 2024 18:46:16 +0000
ROA not before: Sun 03 Mar 2024 18:46:16 +0000
ROA not after: Sat 01 Jun 2024 17:46:16 +0000
asID: 834
IP address blocks: 108.165.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 16:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:16:73:59:40:cc:41:c9:91:95:f1:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 3 18:46:16 2024 GMT
Not After : Jun 1 17:46:16 2024 GMT
Subject: CN=19d56fef-b224-41c1-8b8e-3ee7665f0c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a2:79:e2:41:11:67:28:22:48:2e:e7:7b:1e:
f1:89:74:9b:22:19:05:09:05:40:1a:4a:87:67:dd:
df:5d:29:2b:92:a2:c9:03:1a:71:7f:d9:90:fd:3f:
2a:f9:0e:f5:01:c9:40:91:09:19:52:41:ee:e5:c6:
6e:ca:67:6e:14:e7:f8:29:37:43:45:b3:ee:79:09:
b7:b9:b9:8d:e8:41:ed:f1:f6:04:e6:7d:a7:e1:c1:
3d:6d:73:e4:f4:96:31:c4:e9:c0:73:42:40:fc:0c:
bc:87:6e:7c:27:24:d5:7a:5d:4e:b3:ca:ee:05:5a:
50:e1:26:66:61:87:35:c2:b1:39:27:f9:40:65:56:
e4:c9:b2:1b:9b:59:0d:2c:4d:d9:cb:01:15:06:be:
4c:a3:80:5d:e1:3c:20:52:fc:4f:bb:0d:ec:d6:fd:
64:0b:cf:dd:af:60:3b:ea:85:69:01:09:da:48:59:
62:db:b2:a3:85:a9:43:00:e5:4b:b8:e1:47:f2:5a:
61:bd:99:19:8d:bf:14:13:75:05:a2:ad:34:67:95:
7f:fd:5e:99:8d:1e:4e:78:a6:45:14:08:78:a9:15:
4f:90:5a:9a:43:d1:4d:a3:0f:2c:07:99:92:82:41:
7c:6a:c8:1e:04:b4:2e:97:76:bd:0a:da:e5:f7:64:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:1B:70:94:4E:52:6B:F3:2B:4A:1C:05:E3:8A:37:F9:E6:BE:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/67a4101f-212f-3ac5-a72e-c0eb7e8fde9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:39:d2:3e:e7:fa:a0:31:02:07:a0:8b:bb:63:96:b3:b2:a4:
3b:af:36:77:13:04:9c:9f:89:dd:74:c8:7b:1b:d9:86:ed:61:
53:e4:78:36:fb:f1:1b:4f:88:b0:1e:49:65:04:94:cf:1c:6a:
2f:86:e9:d4:de:bc:80:82:11:ea:14:50:86:90:d6:22:f0:15:
9c:62:44:c1:e0:b6:e6:f2:d2:30:33:fa:c4:d3:b1:5c:51:d1:
cb:60:25:11:db:90:29:1f:75:94:17:6c:b6:2e:69:08:c4:8b:
4d:df:d0:cc:8c:5a:ec:37:d3:f2:c7:2e:38:e0:62:80:ce:27:
3f:de:de:9d:ac:57:d8:e7:6d:f9:67:0e:6a:27:85:06:1e:92:
65:a7:de:ce:7e:8b:2a:d6:f8:ee:54:f6:1f:97:c8:74:86:9c:
48:ec:58:68:f7:89:e8:b6:67:f6:71:2c:bd:5a:0d:eb:a5:c1:
a2:e4:89:ff:4b:29:5a:8d:16:a5:46:ac:9a:46:c6:59:ee:9a:
c2:57:47:10:0b:bf:14:dd:e0:08:a9:2a:fa:87:62:8b:3c:65:
98:9a:c2:a5:b4:45:41:7c:17:0e:61:e2:c3:48:1c:4b:18:6a:
f0:ce:3f:ba:0d:bf:ad:24:de:80:07:24:d5:c1:dc:1e:31:ff:
01:c4:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 17:29:18 2024 by rpki-client on console-fra.rpki-client.org