Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75e6a8a3-bfe6-3efd-a020-9de38a49e322.roa
File: 75e6a8a3-bfe6-3efd-a020-9de38a49e322.roa (raw, json)
Hash identifier: ZYWgY8Bk+Y47mxYfboFZJF6xzyk6eFSY1O8iKklr4n0=
Subject key identifier: 92:63:F3:10:48:A3:77:B0:B1:8C:33:72:11:60:B4:D5:5F:08:18:06
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C580EE7A3A0E2A36E0E557D8
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75e6a8a3-bfe6-3efd-a020-9de38a49e322.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 6939
IP address blocks: 108.165.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 18:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:ee:7a:3a:0e:2a:36:e0:e5:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=84015eec-f99f-47e6-aba4-c9d0f3106366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:ba:28:ea:79:ae:8c:e3:d7:e8:b4:51:0d:
7d:21:51:2e:6a:38:e0:f5:3d:d6:47:db:ea:f4:5a:
a9:3b:39:6e:28:6f:15:02:2c:0f:5f:4f:54:82:3d:
bd:53:7f:ee:45:9f:06:c4:14:f6:8e:cf:ef:7b:3c:
5e:bc:23:b4:9a:27:67:44:28:89:46:01:44:0e:c8:
88:05:33:d0:18:b7:58:1e:17:7b:73:ea:e9:a0:c1:
5b:ad:33:3f:77:62:07:19:84:27:31:d3:de:df:4b:
44:20:fe:99:c4:ea:8a:b1:48:d5:33:0f:aa:70:45:
c8:1c:3f:28:9f:dc:11:22:89:50:2a:5f:22:33:84:
77:f3:8d:60:b8:37:1e:5c:57:4d:4e:87:41:41:e8:
37:93:8c:6e:75:2a:9c:ed:17:c6:10:8a:b8:98:0c:
c8:5c:b7:4a:94:66:fa:91:fa:72:2d:68:61:29:ce:
82:5b:8e:86:16:7f:c6:28:e9:b8:90:ec:40:cc:0b:
31:bd:8a:70:2d:ec:0d:db:0d:53:d4:60:c4:f1:23:
42:13:c5:10:9a:38:9a:62:8a:92:a0:eb:61:33:a5:
5c:3c:c7:4c:9c:3a:7f:22:a7:99:20:0c:f1:c2:e1:
16:2c:58:16:4c:25:72:59:f4:e3:8a:35:d3:76:ad:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:63:F3:10:48:A3:77:B0:B1:8C:33:72:11:60:B4:D5:5F:08:18:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/75e6a8a3-bfe6-3efd-a020-9de38a49e322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:34:1a:6c:92:14:14:02:01:01:09:e5:17:5a:69:94:09:ec:
51:9d:03:8c:c8:f1:83:84:a7:a5:db:50:07:e9:c5:00:5e:1e:
2b:35:d6:04:15:43:06:7f:a3:52:b6:08:4b:3f:f7:6b:3a:41:
06:11:7e:2f:1d:75:98:8d:f4:4a:c2:1c:71:1e:f2:00:3d:0c:
13:51:36:13:46:56:65:08:f0:56:1e:1d:63:af:0f:99:8c:16:
6b:e1:97:93:d3:11:3c:ff:d6:09:50:7c:c4:df:17:ad:ac:a1:
96:96:93:6c:67:12:2f:e1:15:c7:ce:4c:c7:10:82:f0:dd:00:
72:6d:b1:b9:7c:42:7b:eb:d4:c2:c5:5d:42:b0:d5:ad:64:60:
46:2f:24:d4:2a:33:44:c8:0e:8d:94:c7:72:3c:c1:22:52:85:
3d:be:4a:9b:bb:27:bf:52:26:23:ab:ff:cd:df:78:ed:a7:bc:
c3:97:94:b3:c8:89:d6:aa:60:40:c4:9a:99:be:5e:a4:27:99:
90:72:67:83:ad:c4:2f:a4:ba:f9:f4:5c:9f:26:c3:c8:32:61:
d1:15:70:28:c9:91:22:c2:f6:67:ce:91:e6:60:4b:eb:49:9b:
10:ae:a0:89:7e:7f:a4:32:20:b7:79:6d:64:8a:d4:76:2e:92:
11:d9:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:39 2025 by rpki-client