Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/187e41c6-8246-3cb0-a27e-b6f1188e411f.roa
File: 187e41c6-8246-3cb0-a27e-b6f1188e411f.roa (raw, json)
Hash identifier: inAtfkHz/aZlmaHitq7g26vBoqXSC1iBuz4EFalhk58=
Subject key identifier: AF:6E:25:F3:7B:D9:45:20:A2:26:F5:CF:4D:B5:91:1D:45:28:D3:79
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848D64114B8E43E43B4B8E48F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/187e41c6-8246-3cb0-a27e-b6f1188e411f.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 58061
IP address blocks: 166.1.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 21:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:14:b8:e4:3e:43:b4:b8:e4:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=c9dcbc47-b8cc-4fc6-9d86-2a97041d4332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:09:17:c7:91:ed:53:72:73:3c:bb:11:21:
34:81:79:38:74:30:a9:cc:5c:31:1c:48:27:d1:36:
66:1c:71:f1:39:3c:7d:01:29:81:7c:88:7e:2a:93:
cd:47:16:77:c9:c4:7a:5b:03:f6:36:cc:b6:f3:6a:
39:6b:05:69:32:7f:81:68:bf:be:cd:6f:5f:37:08:
99:b6:89:bc:6b:fa:ec:b3:4a:1f:d0:a0:66:ed:06:
ba:35:2d:1e:e0:73:4c:ab:10:e4:ef:f6:8f:6c:25:
47:b6:3f:fb:67:b6:4c:8d:7e:1c:97:01:f2:e1:a8:
58:c8:a4:79:2f:3f:25:7b:09:a0:38:f8:2a:23:81:
0e:87:38:93:b4:7e:39:a0:ad:d2:97:2e:16:49:26:
f6:98:e4:3c:d3:16:f9:6b:5f:a1:96:d2:ae:ca:63:
3f:f6:a9:83:0d:3e:c1:68:cb:ae:e0:66:30:18:ed:
85:ae:dc:61:6b:4c:fe:39:8a:fa:46:12:67:99:31:
bd:ef:02:d3:51:a8:a0:dc:b3:74:af:28:45:72:9b:
50:2a:4d:0b:6a:0f:6b:1b:8c:a5:88:7f:cb:13:7d:
06:f1:53:f4:b8:f3:12:7c:18:f2:16:0c:6d:d1:75:
b6:08:d8:5b:82:6f:85:ba:ab:54:b4:32:a8:45:5c:
bb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6E:25:F3:7B:D9:45:20:A2:26:F5:CF:4D:B5:91:1D:45:28:D3:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/187e41c6-8246-3cb0-a27e-b6f1188e411f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.83.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:f4:bf:51:49:b4:75:98:c7:ef:73:31:85:4c:96:d4:ff:ed:
f5:6e:bc:b1:76:de:63:2a:50:44:52:30:ab:65:51:1b:67:d5:
a2:8c:92:31:0d:76:5d:cf:77:60:84:66:e2:c1:d3:4c:0c:f4:
2e:93:e8:e5:43:9b:46:c9:a3:c5:6d:f9:3c:66:91:c9:47:f0:
44:55:11:4b:72:c3:3e:22:ff:90:5a:01:a7:31:8b:2f:12:56:
eb:ea:2c:52:ea:8a:69:0a:e5:a4:61:97:ae:20:2f:0b:53:c5:
85:fe:1c:44:06:f4:60:33:19:b3:67:bc:2f:ce:d9:e8:ba:2d:
49:6d:f8:c1:06:3d:e4:6b:6b:b6:68:20:38:90:26:33:8f:7b:
11:23:c5:82:54:21:cc:60:26:14:cf:13:4c:3d:c8:55:19:88:
6b:88:44:32:25:9e:fa:75:a9:86:ea:b2:e7:df:c1:01:a4:2d:
00:15:26:d2:8b:1a:bf:8a:2a:81:d3:34:3a:d9:89:7d:f8:48:
dc:9d:74:1c:65:83:e9:ac:9b:c2:16:2b:e0:d7:1d:89:4d:58:
1f:b4:f9:54:f9:f4:93:9b:ba:0e:d3:a0:f5:f8:18:fa:b9:8a:
5d:d6:73:dc:4e:ec:5f:d8:91:15:75:0e:20:da:dd:65:95:9c:
29:78:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:37 2025 by rpki-client