Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa0b0c16-4d7f-3bfe-9222-09b73c3e1588.roa
File: aa0b0c16-4d7f-3bfe-9222-09b73c3e1588.roa (raw, json)
Hash identifier: L9lfUdp1N7xsTp0iDAjTrSpy7Z46B4Io/+ufxDCH6QM=
Subject key identifier: C9:40:5D:2A:6E:06:E7:CD:45:0E:BA:BD:E7:A9:AF:0E:E5:0C:D3:0F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584426482BAFAFE2EBEFF6BA9440
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa0b0c16-4d7f-3bfe-9222-09b73c3e1588.roa
Signing time: Fri 08 Dec 2023 18:05:16 +0000
ROA not before: Fri 08 Dec 2023 18:05:16 +0000
ROA not after: Thu 07 Mar 2024 18:05:16 +0000
asID: 36231
IP address blocks: 108.165.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 17:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:26:48:2b:af:af:e2:eb:ef:f6:ba:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 8 18:05:16 2023 GMT
Not After : Mar 7 18:05:16 2024 GMT
Subject: CN=ca55abe0-e813-406d-bfb2-46f96037e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:e5:fe:3a:a6:47:76:f0:02:26:1b:a8:51:
10:58:92:0a:c1:0f:67:ae:f1:ab:90:aa:5e:d2:6d:
dd:41:bd:4f:6b:15:ef:19:26:35:51:e5:24:f8:f5:
1b:cf:23:0a:4e:06:d1:cd:9e:8f:05:8b:db:1c:a8:
05:4e:73:ba:f5:d0:85:1f:5d:c0:de:13:84:a2:e3:
b2:08:4f:4f:dd:59:8a:10:82:ec:00:e7:79:92:ae:
f9:e8:3b:fe:de:8c:cb:2c:a3:ce:09:fe:10:0c:95:
47:c3:f7:90:44:fb:3d:50:e4:9b:94:43:13:1e:67:
7e:fc:58:c6:89:90:97:f9:2b:cb:bd:ca:98:72:b4:
8c:e7:39:3c:55:73:c6:14:eb:87:63:36:86:16:df:
c0:76:e0:3d:82:13:6e:7f:5e:a3:6b:0d:1a:19:33:
e4:78:f1:55:a3:07:a5:c7:fd:b9:4a:62:8c:42:d0:
e1:3d:b6:17:9e:7d:aa:b4:c6:c1:aa:96:69:5d:00:
d3:a5:fa:cf:39:cc:50:d6:de:ea:22:65:51:6d:e1:
11:5a:87:f0:fe:e6:1b:1d:ee:df:11:af:6d:31:6b:
8b:42:b3:41:b6:57:62:9c:87:16:34:1b:52:75:9d:
b7:3b:78:1f:49:75:4e:ab:38:56:98:a5:d0:7c:06:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:40:5D:2A:6E:06:E7:CD:45:0E:BA:BD:E7:A9:AF:0E:E5:0C:D3:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/aa0b0c16-4d7f-3bfe-9222-09b73c3e1588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:51:df:fa:d5:a3:c9:90:a2:66:7e:a9:42:4c:0d:e3:6e:89:
72:4d:60:98:80:30:9e:a0:c9:2c:66:ed:26:5c:49:df:4a:a7:
b5:28:b4:1c:69:db:a2:0d:18:22:81:80:ea:80:61:3c:0a:da:
45:d0:cf:da:7f:7a:5e:3a:f5:c8:0f:9d:fc:57:bb:7d:a7:77:
6b:11:ba:9a:0e:02:5a:83:5b:63:68:79:91:76:52:35:ed:93:
32:00:51:73:5a:47:bf:19:4c:8d:d8:a9:69:ce:ad:e5:f0:e6:
53:0c:fa:6c:b2:e3:c4:66:45:69:b2:3b:e3:25:f7:07:e5:42:
ca:b2:7c:63:bc:38:0f:e9:e2:a6:36:83:e3:b8:f0:1b:fa:8e:
d7:2c:de:34:8e:69:64:26:46:00:02:f6:8d:79:15:7d:e8:3b:
99:c2:d5:aa:08:aa:2b:a3:88:cd:b9:f6:4c:c6:2c:0c:74:87:
f2:5f:0a:b1:f1:ad:fd:69:99:fc:ef:93:17:f0:72:ee:b0:53:
68:ae:78:0d:0e:71:ae:9f:92:92:1e:a7:f2:aa:82:1e:07:4a:
3a:ee:33:3d:4b:9a:27:80:2a:bd:79:5c:69:8a:84:f4:2b:74:
b6:32:3a:08:73:2e:cb:44:de:de:cb:cd:eb:b0:b3:94:f1:13:
ab:9a:f5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 21:33:17 2024 by rpki-client on console-fra.rpki-client.org