Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33267c63-5e8b-3f51-8e31-a9d3c7d719c8.roa
File: 33267c63-5e8b-3f51-8e31-a9d3c7d719c8.roa (raw, json)
Hash identifier: TxrHKdBjHUmvq8xhJkgZEnykNGlIrUpTDaVi7J+Jd4k=
Subject key identifier: FD:ED:56:D0:5B:13:1B:03:5B:26:A3:A7:16:2A:51:92:1E:6D:B3:FA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F80306F2CF86C5C3F04DAC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33267c63-5e8b-3f51-8e31-a9d3c7d719c8.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 19:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:30:6f:2c:f8:6c:5c:3f:04:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=537dbf17-a5d9-46b6-b9ab-551db6936409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:e3:e8:e4:19:cc:cc:31:e6:28:0c:41:7a:
ef:82:0f:90:cd:51:4a:38:e6:dd:f9:4f:35:13:dd:
29:4f:a0:6b:bd:89:19:c2:da:66:2c:b0:30:1a:d8:
4c:6f:82:67:0c:7a:09:31:d5:30:62:aa:8a:c2:71:
bd:48:2a:11:cf:6d:d0:75:38:e1:bb:45:3d:a8:5c:
a8:34:e6:31:74:67:69:1f:fb:9a:eb:58:c9:c9:1c:
93:41:db:61:9b:61:67:be:08:39:f3:95:93:bd:be:
70:a7:7d:15:bb:2f:be:bb:71:c9:92:66:1b:6d:6b:
e0:73:00:6b:4d:cf:65:42:a5:08:f6:7b:51:8e:63:
11:fa:12:63:ab:84:94:51:9a:92:e2:ae:b9:cb:c9:
87:d5:cf:3d:1e:c3:bd:24:13:38:00:14:10:d3:7c:
00:5a:aa:53:0d:ff:1f:78:69:6f:83:10:1c:1a:21:
2f:29:73:ed:e9:ae:f1:c5:01:27:62:95:e7:17:4c:
e3:f6:65:78:86:69:ad:59:2e:09:3a:97:4d:b9:57:
ec:46:41:74:52:46:ed:58:94:32:6c:b1:a7:d7:bf:
12:20:ed:f3:b3:99:c0:65:9b:a2:df:30:40:cd:ea:
2b:ed:f0:b5:2f:a5:a2:67:ae:24:b7:d3:fa:07:4b:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:ED:56:D0:5B:13:1B:03:5B:26:A3:A7:16:2A:51:92:1E:6D:B3:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/33267c63-5e8b-3f51-8e31-a9d3c7d719c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:31:56:6c:09:0e:74:31:0d:aa:f7:6f:ea:4f:bb:36:c8:80:
88:e5:99:58:ae:21:f4:82:55:de:2a:06:95:f1:03:ec:b1:e0:
8b:97:c3:56:5b:5c:46:63:0a:90:79:52:83:45:a6:a4:ac:26:
c8:98:ff:63:41:fe:37:1c:68:77:0c:ec:e8:74:e9:0a:83:a1:
38:28:7f:e7:ce:b8:af:81:85:c4:f7:2d:aa:e1:b8:06:f3:15:
e3:bf:56:1a:7c:e4:dd:21:2e:df:31:24:60:4e:da:a2:a6:ed:
17:eb:68:0f:2c:c0:c6:c5:1f:23:87:8a:b2:c1:8c:03:a0:37:
27:bb:b0:a9:47:58:79:e4:f2:9d:8b:15:9e:0f:91:87:d0:b0:
ff:7d:cd:8b:56:9c:30:94:ef:b0:77:fc:fa:e3:e5:24:31:75:
73:cd:ec:50:4f:4c:43:9f:0c:ff:ef:db:8e:e7:2c:95:e2:a9:
ae:a5:3f:8c:f8:a1:4e:b9:8e:e7:42:d7:92:18:15:1f:49:d1:
9c:85:2b:66:ac:24:74:d9:ea:fa:17:8b:6e:a9:e9:db:f2:18:
98:fd:60:ba:63:a0:30:3e:4c:bb:6a:51:0a:69:54:30:2b:f8:
e0:c5:67:2a:66:cf:c3:34:06:4a:78:af:5c:8d:30:41:2f:19:
76:79:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:10 2025 by rpki-client