Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64385987-0e31-336c-bed0-b60a81c45740.roa
File: 64385987-0e31-336c-bed0-b60a81c45740.roa (raw, json)
Hash identifier: FGN7A8Bq63dInd0Ep0rJG5CvHWa9aybBuX3ZnvRZmDk=
Subject key identifier: 1E:7C:1D:28:E9:A9:84:89:0A:F7:A4:9C:2F:B3:D0:16:D0:D9:5E:08
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F8037F29170E9F30A540E00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64385987-0e31-336c-bed0-b60a81c45740.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 19:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:37:f2:91:70:e9:f3:0a:54:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=f1892249-684e-4c2c-9de8-61b2a39a59ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:60:64:7f:a9:f8:6c:5a:5b:53:db:c2:ea:
3d:4c:c0:ac:98:98:c9:c4:22:a0:33:c5:6a:95:ab:
25:5d:9b:04:2d:b0:73:fe:35:9c:95:ad:89:d6:93:
c1:0e:65:e4:e9:bb:fd:67:1f:b0:43:c3:9d:23:b9:
92:4b:ed:4a:0e:86:37:84:d5:03:05:6e:a4:d4:31:
18:4e:3b:ef:5e:0a:ca:53:c9:95:02:13:59:4c:4b:
34:be:ef:57:68:2b:05:fc:6e:48:8d:56:65:33:6d:
e8:10:cf:56:f3:65:08:74:64:b4:a0:de:e1:5d:85:
dc:7a:01:49:af:96:a8:53:3c:eb:2e:b4:d1:ec:d1:
9d:de:0c:ff:0d:fe:85:c4:3f:42:36:67:d0:ce:47:
1c:4b:d9:c9:0d:b5:e4:70:3e:0f:aa:c4:b7:f1:fa:
70:23:58:49:59:50:88:d0:10:fa:66:fc:65:f4:db:
e3:ed:9b:08:1d:d1:be:79:94:ca:39:8d:db:b5:37:
2f:21:17:52:e1:7f:ba:eb:0d:e0:cf:98:6d:c6:f6:
79:53:0d:89:9e:44:31:48:cb:c4:8f:f6:92:22:28:
89:89:a9:63:cc:28:83:01:8f:86:f6:1c:69:81:fe:
25:3e:e5:55:50:e8:54:96:75:8e:f3:b9:f4:48:1a:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:1D:28:E9:A9:84:89:0A:F7:A4:9C:2F:B3:D0:16:D0:D9:5E:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/64385987-0e31-336c-bed0-b60a81c45740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:be:66:41:b3:85:7f:77:16:a0:6b:5c:18:da:d1:dc:7e:d9:
19:26:1b:42:d8:46:a4:88:ee:3a:e6:b2:5b:69:66:2f:ce:af:
e2:3b:5d:80:04:12:96:7d:dc:6e:31:0e:5f:de:9c:bd:34:3f:
7f:a0:09:6b:56:a5:49:93:96:cb:7a:68:74:e3:9b:ce:4e:5f:
d0:1e:cb:80:52:9a:96:ba:c5:e4:76:fd:c1:85:10:66:71:32:
97:6e:d3:15:8b:2a:ab:c1:25:a0:4f:84:95:d9:8a:ef:96:79:
4c:70:4a:c7:5c:21:02:c9:98:b3:54:52:f6:36:e2:ef:11:1a:
22:9d:8d:4d:b6:8f:66:e4:4f:30:ac:3f:7f:57:2b:2c:1d:97:
82:56:be:0a:7e:74:f3:29:19:c0:f1:77:68:78:ba:f7:39:bc:
76:7d:14:56:18:ae:63:30:14:6d:37:48:ec:3a:1c:35:62:d5:
02:a8:76:39:64:f2:fc:6e:6e:13:7a:b0:a9:ad:53:64:4b:ea:
44:4d:07:cf:c9:d0:db:66:b5:80:ae:51:e8:4e:f5:6b:42:9a:
08:e5:c8:e2:64:38:42:0e:3a:cd:4d:22:53:49:ab:b8:74:4e:
34:f2:e5:d5:40:8e:3e:65:eb:98:ce:79:bd:63:18:ae:dd:9d:
2c:91:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:32:13 2025 by rpki-client