Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d0101c-5fa4-3c68-98be-02bd908ec670.roa
File: 03d0101c-5fa4-3c68-98be-02bd908ec670.roa (raw, json)
Hash identifier: BqG0K1m7DogVmQt6q/iCbItwJ+W1BPDMruF71xCxo8w=
Subject key identifier: 46:23:3B:34:6E:D1:DD:1C:65:36:86:1B:CB:37:DA:5E:24:AD:8B:1A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F802DFC84F065476A249080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d0101c-5fa4-3c68-98be-02bd908ec670.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 19:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:2d:fc:84:f0:65:47:6a:24:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=936f3b0b-8f83-4cc6-b292-d7cc83686bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:b4:52:2b:73:f3:4f:19:85:b4:7b:43:bf:
2f:bd:e2:35:36:e0:76:12:0b:24:bb:9b:19:43:f0:
04:32:c5:53:ef:7e:0c:34:24:82:ce:2a:27:88:21:
94:4f:d1:6b:be:1f:45:df:ee:c8:d0:ae:15:dd:a8:
09:1e:b2:a3:4c:ec:42:5d:0a:a8:80:e3:26:10:e5:
c3:31:48:e3:94:bb:4f:d5:71:b0:c9:18:ce:09:f9:
81:57:af:b3:28:9c:1d:14:8a:70:59:c2:49:a1:6d:
6e:80:32:bc:f6:4c:2a:63:f3:b7:89:ed:e1:fd:51:
1d:04:d7:10:30:75:4a:7c:0b:a7:49:96:97:ee:86:
27:ba:a8:da:31:23:3a:75:d2:20:ac:da:23:16:36:
32:dc:7c:c9:d5:8d:28:64:ba:de:11:e4:43:ff:c2:
ee:be:de:7b:ac:07:9f:6f:70:17:e4:b9:e2:1a:c3:
bf:3a:67:be:5e:a0:95:cc:81:bf:b3:c5:9f:99:8d:
1b:83:a9:0b:e3:95:50:87:94:3d:5c:8d:e5:90:d3:
ca:e1:92:16:19:a1:fb:9f:68:e8:62:1d:c0:8a:57:
d9:7c:1a:9e:4d:70:10:40:5d:3f:c1:f0:74:08:bb:
fd:af:36:4a:02:22:94:ea:dc:2c:b5:8b:55:c4:c4:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:23:3B:34:6E:D1:DD:1C:65:36:86:1B:CB:37:DA:5E:24:AD:8B:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/03d0101c-5fa4-3c68-98be-02bd908ec670.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:9c:a7:fe:d0:4e:6f:b1:80:03:8a:89:2e:75:40:72:8e:f7:
60:3f:ea:85:6f:6c:43:72:cb:ca:02:f6:25:e5:fd:24:b7:80:
18:7f:77:d1:d8:b0:44:a5:59:22:0b:95:25:0b:e9:02:e0:f2:
95:36:ad:f8:67:48:75:26:68:74:a7:af:67:f2:35:7e:54:c5:
ca:40:7f:f1:08:fe:44:ab:82:18:1b:d9:77:9f:b9:56:b8:bb:
05:10:d2:48:e8:50:58:c9:12:5b:fe:dc:53:b8:e3:27:1d:3d:
8e:02:4a:2b:b2:11:42:cb:58:00:46:9e:81:2f:2f:11:e5:3b:
65:c1:a6:7e:f9:1b:3e:9c:0d:11:4a:53:1c:cc:c5:24:f9:49:
4f:a3:05:25:3c:d9:ea:c2:1b:96:3a:69:b8:85:25:34:11:e4:
0e:e7:58:9f:c7:de:ae:94:d8:38:69:9d:00:c7:7e:77:8c:a3:
9c:26:13:87:ce:3c:de:31:23:b9:0e:0b:7d:28:a6:93:75:07:
8d:c0:a6:dc:ee:b7:8a:41:81:50:af:ff:90:e0:9a:68:62:77:
bb:89:24:06:de:da:f9:56:43:cf:25:e0:36:86:0a:ba:17:38:
ec:4d:7f:8f:a3:e5:8d:1a:b5:f5:7d:89:17:0e:9a:96:2c:b8:
bc:89:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:05:01 2025 by rpki-client