Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd9a5100-e597-3569-8387-ead925253e89.roa
File: dd9a5100-e597-3569-8387-ead925253e89.roa (raw, json)
Hash identifier: mdvQOEpMuzqoOA/PhpNpY5MhBuJF31FWwhLcnz56UA4=
Subject key identifier: A7:8F:CC:64:36:F1:65:E4:6C:3B:F1:34:BD:7F:63:2C:E2:15:C2:56
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858430725EA2D9D8EC8E250E5BC00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd9a5100-e597-3569-8387-ead925253e89.roa
Signing time: Sun 27 Aug 2023 21:39:15 +0000
ROA not before: Sun 27 Aug 2023 21:39:15 +0000
ROA not after: Sat 25 Nov 2023 22:39:15 +0000
asID: 834
IP address blocks: 108.165.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:07:25:ea:2d:9d:8e:c8:e2:50:e5:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Aug 27 21:39:15 2023 GMT
Not After : Nov 25 22:39:15 2023 GMT
Subject: CN=6c0a27d5-0a8c-4ba0-b95b-ca845f3cb2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:6b:a1:f7:40:af:44:c2:a6:10:3b:a6:ce:
7c:20:1d:c1:90:c4:19:df:b4:ef:a6:6a:ab:3a:eb:
1a:e6:2e:e7:bf:7f:dd:80:ca:ab:54:dd:3d:2b:cc:
d4:08:59:d6:10:20:36:4f:9a:37:82:b1:87:13:2d:
70:ba:60:c7:35:87:53:8e:be:0d:15:48:b2:8d:f9:
33:73:6b:02:9c:4e:6c:65:49:14:e5:66:3e:b8:93:
43:e6:b0:3e:0c:c8:c9:fe:e1:49:31:19:fa:ee:fa:
16:99:e0:2d:ad:2e:f1:d7:3f:2a:bf:67:85:a5:7c:
9b:45:ec:c8:e5:df:26:ff:03:7b:eb:80:0e:14:33:
64:c7:53:97:e8:bf:17:80:85:d1:13:e4:44:4c:2c:
d9:7b:00:2b:29:6c:dd:f4:91:44:f3:54:3a:4b:29:
4e:ba:89:08:0c:ea:52:2b:85:ad:b8:ca:f7:35:0a:
e0:f7:c2:1d:48:aa:56:bb:36:4f:17:5a:d4:35:a8:
62:b0:59:15:5e:04:0e:7c:31:dc:06:c4:4d:d2:df:
ad:ea:92:96:d9:46:68:97:43:f9:9b:83:ac:cc:08:
19:9e:82:86:c8:49:6c:27:60:21:b5:27:bb:97:22:
e2:d1:73:2f:bc:d2:c3:25:e1:d2:1f:e7:be:eb:1c:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8F:CC:64:36:F1:65:E4:6C:3B:F1:34:BD:7F:63:2C:E2:15:C2:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/dd9a5100-e597-3569-8387-ead925253e89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:55:39:db:be:f1:a5:e3:80:4e:22:1c:9a:50:ae:60:0b:f7:
cd:c3:1e:37:88:8d:6f:60:09:f8:7e:b3:b7:fa:b3:b8:ca:f3:
76:96:80:24:bf:6c:b7:e7:6b:01:d3:69:16:85:cd:ea:6c:3d:
4f:73:b3:73:a2:d8:6b:e0:ea:11:8a:7d:c0:93:9f:6e:f1:bc:
22:6d:1c:75:fa:16:0b:ad:ce:76:21:de:28:fe:a4:f4:a3:3a:
f6:a9:8f:4e:99:31:88:74:ad:7e:b1:d3:5b:77:a1:65:ae:54:
09:25:c2:2b:16:1e:ff:f6:94:c6:fe:ad:1b:4e:5c:fe:95:e0:
60:4d:94:e7:38:2e:35:f7:90:e9:23:20:dc:b1:9c:63:fa:72:
25:2b:03:3e:58:0b:a1:2b:c1:b4:32:3f:76:05:c8:8b:28:7e:
ab:c0:a9:da:c0:47:25:fe:0f:ba:cb:9b:33:4f:76:a6:43:dc:
87:a7:4c:77:61:f3:35:43:a6:66:08:2f:1f:07:95:09:48:92:
48:89:6c:db:4f:df:24:0c:87:3c:89:dd:63:b2:9f:1a:2f:14:
85:70:56:69:dc:ef:85:3e:8b:01:26:f1:61:84:3e:cc:69:f6:
ec:e4:c7:74:ac:5c:49:50:0b:fe:4c:a6:c5:75:bf:cf:a1:18:
76:fc:8f:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMHJeotnY7I4lDlvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTIzMDgyNzIxMzkxNVoXDTIzMTEyNTIyMzkxNVowLzEtMCsGA1UEAxMk
NmMwYTI3ZDUtMGE4Yy00YmEwLWI5NWItY2E4NDVmM2NiMmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnShrofdAr0TCphA7ps58IB3BkMQZ37Tvpmqr
Ousa5i7nv3/dgMqrVN09K8zUCFnWECA2T5o3grGHEy1wumDHNYdTjr4NFUiyjfkz
c2sCnE5sZUkU5WY+uJND5rA+DMjJ/uFJMRn67voWmeAtrS7x1z8qv2eFpXybRezI
5d8m/wN764AOFDNkx1OX6L8XgIXRE+RETCzZewArKWzd9JFE81Q6SylOuokIDOpS
K4WtuMr3NQrg98IdSKpWuzZPF1rUNahisFkVXgQOfDHcBsRN0t+t6pKW2UZol0P5
m4OszAgZnoKGyElsJ2AhtSe7lyLi0XMvvNLDJeHSH+e+6xzaRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKePzGQ28WXkbDvxNL1/YyziFcJWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZGQ5YTUxMDAtZTU5Ny0z
NTY5LTgzODctZWFkOTI1MjUzZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKVmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdVOdu+8aXjgE4iHJpQrmAL983DHjeIjW9gCfh+s7f6s7jK83aWgCS/
bLfnawHTaRaFzepsPU9zs3Oi2Gvg6hGKfcCTn27xvCJtHHX6FgutznYh3ij+pPSj
Ovapj06ZMYh0rX6x01t3oWWuVAklwisWHv/2lMb+rRtOXP6V4GBNlOc4LjX3kOkj
INyxnGP6ciUrAz5YC6ErwbQyP3YFyIsofqvAqdrARyX+D7rLmzNPdqZD3IenTHdh
8zVDpmYILx8HlQlIkkiJbNtP3yQMhzyJ3WOynxovFIVwVmnc74U+iwEm8WGEPsxp
9uzkx3SsXElQC/5MpsV1v8+hGHb8j5I=
-----END CERTIFICATE-----
Generated at Thu Sep 14 18:17:15 2023 by rpki-client on console-fra.rpki-client.org