Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46056d86-37a1-385f-aa4c-aed4689362da.roa
File: 46056d86-37a1-385f-aa4c-aed4689362da.roa (raw, json)
Hash identifier: vUw5EU7BF7QH9WrBwvbvoamHRY4n9aXLHoJnDsgRl2E=
Subject key identifier: 4F:37:C7:72:2C:57:1B:E4:B0:D8:58:BA:F9:31:8A:3D:A8:10:6C:9F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489EBF2DBE35D20DEE07744380
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46056d86-37a1-385f-aa4c-aed4689362da.roa
Signing time: Tue 21 Jan 2025 16:49:48 +0000
ROA not before: Tue 21 Jan 2025 16:49:48 +0000
ROA not after: Mon 21 Apr 2025 15:49:48 +0000
asID: 834
IP address blocks: 166.0.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:bf:2d:be:35:d2:0d:ee:07:74:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 21 16:49:48 2025 GMT
Not After : Apr 21 15:49:48 2025 GMT
Subject: CN=bf4d2edb-92b8-436b-bc45-6c57e9f85930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:1f:69:09:98:fc:80:1e:d0:c9:4a:4d:f5:
21:79:eb:69:0a:3e:b5:11:d0:9c:02:ad:76:f6:3c:
cd:27:8a:ad:54:f9:b4:83:95:2c:3c:b0:f9:bb:65:
31:e1:16:01:8e:96:13:d6:f8:81:4c:12:62:41:4f:
f8:cd:21:4f:52:44:4c:46:19:02:e4:d2:8d:db:4c:
01:fa:0e:ae:cb:4e:b1:cc:fd:55:a0:31:2b:ff:6f:
b2:13:ad:c1:de:d3:c8:cb:00:2a:9a:8e:74:6d:a0:
ab:be:82:2c:4e:31:a3:f8:e9:03:97:4f:ac:89:5b:
4c:33:47:01:a2:49:3c:ee:60:59:01:fa:e9:2b:00:
bb:21:4e:4e:ff:90:c1:f5:bf:7f:58:9e:86:fb:99:
4a:9f:99:98:16:21:3c:23:fe:66:c5:d5:94:d4:9f:
3e:22:4d:8c:7f:54:85:e7:aa:eb:d3:2a:ca:49:e5:
3e:63:54:d4:28:06:4c:3c:6f:98:e8:94:28:14:ee:
70:66:f3:8f:93:4a:c7:3d:11:46:9e:73:04:c4:83:
0f:49:bc:49:0e:f7:f8:e6:86:34:87:1a:77:ed:d0:
b8:bb:78:bf:ae:ee:f0:8e:e9:88:c1:f0:dc:67:84:
8a:ea:dd:40:70:89:92:9a:3b:aa:8e:36:48:14:37:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:C7:72:2C:57:1B:E4:B0:D8:58:BA:F9:31:8A:3D:A8:10:6C:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/46056d86-37a1-385f-aa4c-aed4689362da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:a7:35:05:c1:00:ab:1f:f8:f2:ac:fb:58:7e:3a:bf:92:8a:
42:65:b4:04:10:52:9d:b6:da:42:e9:9d:5a:ef:52:f2:b4:51:
60:5f:94:f7:9d:9f:b4:55:03:0f:26:4b:b0:0e:26:3d:d8:b9:
18:24:b3:b5:92:83:41:03:ad:37:2c:a1:a5:70:6c:e4:24:6f:
dd:03:2e:70:46:c4:a6:7e:e7:00:bc:51:e1:8b:f1:0d:49:9e:
93:34:17:31:f5:f4:ea:23:c6:6f:10:3a:69:b0:af:21:c4:37:
e2:51:88:dc:53:10:64:cf:4f:f3:f3:18:7e:98:76:a5:25:b6:
02:f4:04:d1:3c:24:25:ce:ff:50:45:76:67:47:3d:98:2c:0e:
10:de:af:e8:55:bb:7e:21:50:31:81:58:5b:f1:ef:6c:2a:98:
fb:2a:b2:f9:da:ab:a5:3d:e0:ca:5b:28:09:08:3f:02:aa:11:
58:1b:7a:37:d7:b6:f4:1e:3c:4e:f2:14:b8:37:a9:d3:81:3a:
2b:da:cc:2a:a1:67:e8:ea:0a:99:56:9a:34:a0:de:f0:6f:19:
9b:f2:36:73:47:78:dd:b5:a8:dc:9a:9d:48:fd:3c:d3:b7:7c:
b3:bc:65:3b:1b:d8:40:2f:8e:bc:ca:70:ab:ea:ea:8f:36:2f:
5a:94:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:34:42 2025 by rpki-client