Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43941802-1e7d-32cb-b59d-1d1027d0d453.roa
File: 43941802-1e7d-32cb-b59d-1d1027d0d453.roa (raw, json)
Hash identifier: DblJ9bFFOl5jFUDBjDgKBmsGE6LO/5xZH/xyIR5t2UQ=
Subject key identifier: A7:DD:C6:9A:56:98:0A:01:30:1A:0E:C8:24:B7:2B:80:AC:7F:53:04
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584924C17B91100C898F0B0DD080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43941802-1e7d-32cb-b59d-1d1027d0d453.roa
Signing time: Mon 10 Mar 2025 16:52:46 +0000
ROA not before: Mon 10 Mar 2025 16:52:46 +0000
ROA not after: Sun 08 Jun 2025 16:52:46 +0000
asID: 215224
IP address blocks: 166.0.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 16:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:c1:7b:91:10:0c:89:8f:0b:0d:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 10 16:52:46 2025 GMT
Not After : Jun 8 16:52:46 2025 GMT
Subject: CN=8ff6fe89-db36-4f5f-a4f4-92d7ba4e44d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:04:f5:0c:d4:f4:27:ae:a4:84:0c:99:f5:
8a:3e:97:30:f8:1a:71:e9:69:df:64:dd:49:b2:cb:
c1:7b:4c:db:56:61:0a:e1:e4:6e:44:3a:d4:72:e2:
b5:3c:6d:47:71:5a:c7:dc:4a:24:d1:8d:00:e5:7d:
d6:fb:3f:9b:64:04:f9:71:63:8e:96:ed:e6:32:14:
09:6d:00:3f:ed:9c:e1:2c:5f:b3:fb:85:b8:9b:a0:
19:c9:24:78:48:1a:6d:9f:d9:4d:b2:a1:88:d8:bf:
57:9d:61:ca:5b:35:40:54:11:04:5d:b5:99:fa:a2:
b8:04:f0:5b:1b:49:c1:27:84:73:82:f2:27:d6:3c:
7b:e9:ec:76:13:5d:f6:e0:e8:c7:78:c9:fb:8f:bb:
90:e9:4a:2e:4e:60:36:f0:2b:95:e5:a6:d5:da:ac:
5c:b1:e7:c6:d4:37:bd:88:f3:5b:56:bf:17:24:5e:
3c:68:df:b7:28:ef:4f:57:0c:2a:d8:e7:bd:76:91:
25:8e:28:0a:33:2b:98:24:12:33:fa:c4:d0:81:01:
9a:42:fc:a5:4e:10:cf:7e:1b:79:2c:e1:dd:d5:8b:
88:c5:b0:3b:e4:45:32:3d:9b:a8:51:93:ca:b4:d5:
47:8c:fc:14:a2:83:0e:b3:ff:60:eb:7d:08:9c:08:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:C6:9A:56:98:0A:01:30:1A:0E:C8:24:B7:2B:80:AC:7F:53:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/43941802-1e7d-32cb-b59d-1d1027d0d453.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:9e:55:28:2c:19:57:f6:84:c8:2f:ab:7b:ca:e5:83:ac:a3:
a6:94:2b:e6:6f:d2:e7:01:57:5c:7e:33:9a:7b:a4:8a:e0:16:
76:5d:c8:63:41:b7:19:73:dc:86:9f:21:3e:e8:cb:21:16:22:
50:49:cd:d2:6d:bd:6c:60:2d:cb:ea:a7:00:ae:fd:64:a9:f6:
d0:02:e9:0c:88:25:d4:09:ba:ac:24:67:c2:65:6d:f5:88:98:
1a:4e:b2:b8:23:59:08:43:15:43:1d:49:b1:46:a5:d8:41:22:
aa:c0:35:b9:3a:f6:3b:9b:a5:9b:a2:48:bc:0a:8a:d0:6b:21:
8d:93:a4:bd:b2:b7:00:01:83:6a:a5:26:9f:1d:1b:16:eb:97:
27:88:76:4e:6c:7c:0c:85:07:32:20:8f:b5:4f:9e:f6:14:3b:
e3:4e:19:d7:af:b6:47:75:41:04:c5:df:6c:9f:99:db:c8:95:
5c:80:fb:bb:84:c7:26:da:6d:0e:d4:88:5a:b6:25:21:ea:31:
e9:fc:7c:4b:93:b3:a0:66:6d:df:3a:1a:1b:7b:0a:bf:a2:95:
75:89:7a:e3:c1:b6:4b:dd:44:98:a1:71:03:0b:f5:dd:2b:fd:
26:56:3a:32:30:e9:c6:d4:08:f4:b4:10:00:ca:53:1d:c7:38:
76:bb:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:20:36 2025 by rpki-client