Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73e80997-5655-3cf6-b91e-a9b8bb3f23fb.roa
File: 73e80997-5655-3cf6-b91e-a9b8bb3f23fb.roa (raw, json)
Hash identifier: RtsEJdVJBXPcr1NrYEDcsQ90l9PS+cDL4qlCJriuL0I=
Subject key identifier: 52:D3:2A:05:6B:52:17:8A:5E:A0:C8:18:BD:B8:89:25:22:64:18:B4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858485500CB5293C546DC46EF6180
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73e80997-5655-3cf6-b91e-a9b8bb3f23fb.roa
Signing time: Thu 26 Dec 2024 06:52:12 +0000
ROA not before: Thu 26 Dec 2024 06:52:12 +0000
ROA not after: Wed 26 Mar 2025 05:52:12 +0000
asID: 834
IP address blocks: 108.165.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:00:cb:52:93:c5:46:dc:46:ef:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 26 06:52:12 2024 GMT
Not After : Mar 26 05:52:12 2025 GMT
Subject: CN=e88727cd-2f07-48c2-936b-8185325b0e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:e3:9d:a8:36:8a:d5:77:d8:c8:7c:f3:86:
e9:25:0c:55:ba:83:5c:fc:c9:c1:45:45:fe:b5:fd:
eb:d2:68:6d:b0:a0:a6:7a:c6:20:a0:02:2a:51:8a:
b4:db:09:3c:8a:b9:45:12:4a:46:c6:1f:47:01:09:
bb:fe:8a:fc:37:d7:c1:08:13:77:e1:9c:18:2d:86:
1d:23:08:0a:e5:c9:18:55:53:a2:7d:26:9b:3f:25:
44:5b:32:b0:12:a4:d4:77:4a:77:fc:27:53:81:bf:
8f:ac:c0:b6:37:6f:62:9d:2d:a0:54:58:0f:7d:7c:
25:42:ee:42:8f:bb:63:38:05:55:d2:d7:68:71:d2:
7f:d0:87:5e:e3:a0:8f:3e:c5:1d:be:c5:33:de:13:
e6:e5:bb:4a:26:b5:a9:d7:a7:9e:04:d5:aa:2a:a1:
f7:ac:d2:b2:97:ec:37:93:1d:a3:d3:72:20:62:b9:
0f:8a:67:bc:79:f7:0c:8c:ec:25:10:43:aa:77:f7:
c1:c6:c2:8a:2e:f6:da:a1:0b:ab:f1:19:68:76:14:
fb:6e:8b:1e:4b:3e:7b:88:5b:1d:60:f7:52:62:b1:
5c:b4:c8:62:3d:07:7a:26:46:32:86:6d:3f:d4:17:
03:dd:92:50:bf:3c:f0:97:fd:97:56:48:73:25:e2:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D3:2A:05:6B:52:17:8A:5E:A0:C8:18:BD:B8:89:25:22:64:18:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/73e80997-5655-3cf6-b91e-a9b8bb3f23fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9a:e7:50:39:f9:fa:5c:8d:50:9e:64:11:d9:95:05:f9:fa:
6b:55:55:30:9c:9a:bb:54:57:0b:f4:85:c8:bf:3b:8d:a4:24:
52:37:24:10:a3:dd:0d:5b:73:a3:b3:c4:6f:ba:5c:16:ea:de:
bc:58:31:40:01:5f:81:c2:be:cb:3e:9c:b0:18:17:a6:ce:4d:
61:53:08:80:c6:59:5c:89:40:db:e5:01:bd:e4:a7:d0:40:d9:
b6:53:61:60:cf:11:39:1b:47:47:7b:bc:d2:0d:81:a7:59:54:
e0:b9:e5:e9:75:f5:f9:4a:d0:4c:df:22:77:dd:7b:a8:6c:57:
72:5d:32:13:ad:06:c6:34:ae:b4:f9:1e:21:33:db:92:a1:b2:
3b:2f:3f:69:e9:a5:fd:d3:7a:78:5f:97:ff:85:f5:a5:3a:3d:
08:9d:1f:77:81:d1:1d:9a:da:37:9d:c7:a3:53:8b:2d:77:7c:
53:b3:8c:a7:e4:cc:e3:ab:b6:ae:bb:4a:c9:4a:c4:74:d3:f5:
cd:73:17:fe:f9:5b:ec:01:8d:43:83:4c:95:c0:77:01:94:58:
47:f6:3f:3b:ed:ca:57:26:6f:8e:33:46:5c:f9:ab:cd:0b:d8:
29:10:c6:0c:53:67:88:a3:d2:4d:e4:ed:75:54:ff:ea:00:ce:
aa:5c:bb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:58 2025 by rpki-client