Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a537dd6-2d3f-3ea1-a73a-5a23dbd6351e.roa
File: 7a537dd6-2d3f-3ea1-a73a-5a23dbd6351e.roa (raw, json)
Hash identifier: ZGt0GhcRozb1TLekXZysVe3NW2LbK5N1wuP3D9gLwsQ=
Subject key identifier: 4B:D5:57:9E:64:48:21:1E:E5:EF:73:2E:BD:18:F8:9C:C7:95:4A:95
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584665361B4982CCF17B38A38B50
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a537dd6-2d3f-3ea1-a73a-5a23dbd6351e.roa
Signing time: Mon 01 Jul 2024 16:38:40 +0000
ROA not before: Mon 01 Jul 2024 16:38:40 +0000
ROA not after: Sun 29 Sep 2024 16:38:40 +0000
asID: 25996
IP address blocks: 108.165.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 15:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:65:36:1b:49:82:cc:f1:7b:38:a3:8b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 1 16:38:40 2024 GMT
Not After : Sep 29 16:38:40 2024 GMT
Subject: CN=36f66a64-aacc-4c45-8264-d5ff045d6c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:1f:1e:de:77:d9:d9:9a:bf:fa:c5:83:02:
d7:05:40:00:f7:5b:84:ac:90:90:aa:96:1f:8a:56:
5f:58:c4:f5:86:ac:2e:ea:81:f4:62:02:62:45:e1:
a7:71:b9:bd:c7:ba:46:f7:d7:ba:34:c4:86:c5:bb:
5e:04:21:ce:2b:8c:1f:2f:4f:5a:e2:c0:29:b0:c2:
bc:75:71:2c:11:4c:ce:fb:7f:0b:03:54:9c:05:c2:
f1:4c:b5:85:57:67:8c:e6:ee:d1:89:11:57:f8:a9:
e2:de:21:de:0a:23:5e:23:25:60:19:f7:76:bf:75:
6d:a3:89:fc:4d:d0:05:ba:c1:fb:4a:f5:5d:f0:8e:
4f:b6:c8:41:c4:d4:4f:11:78:b8:3f:36:92:c5:81:
f6:45:c8:da:f0:3f:ec:d9:dc:bc:79:20:73:4c:59:
53:d8:57:a2:28:b3:6d:02:34:9a:e2:c6:70:bc:8b:
07:46:eb:60:a3:e6:f5:f3:ad:a7:d0:8b:bb:4f:a9:
77:16:39:8c:bd:16:55:47:d0:89:7c:7c:54:47:15:
8a:e7:24:f6:0c:d8:c1:48:6e:13:dd:be:d6:12:6b:
5c:df:b8:83:6e:3e:b3:6d:98:75:03:19:d5:71:1b:
a9:a5:05:12:25:f1:d0:fa:b8:cd:3b:cb:24:14:cb:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D5:57:9E:64:48:21:1E:E5:EF:73:2E:BD:18:F8:9C:C7:95:4A:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/7a537dd6-2d3f-3ea1-a73a-5a23dbd6351e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:85:d4:aa:5f:8c:21:fd:99:44:d6:01:57:08:2b:47:24:af:
74:23:22:79:48:2e:dd:59:a3:91:72:d6:99:14:bb:9b:cf:dd:
05:20:01:ec:a0:52:c9:76:32:4a:14:38:1d:c1:d8:fe:ef:ce:
9f:56:61:45:0f:18:f8:45:db:f5:e1:e0:14:e2:95:1d:78:99:
75:7b:0d:d3:cb:51:1d:10:13:b2:62:a2:c0:89:c0:3f:5d:90:
c8:4d:07:3e:bd:fa:a4:8a:0c:51:a1:f0:bd:9e:42:c3:91:06:
d1:27:20:9e:65:af:9d:ab:b0:8d:57:9e:27:07:1b:de:60:9c:
49:c2:ae:94:d4:de:9b:8a:c2:c9:f2:e9:15:92:a9:39:f7:27:
e2:a2:6a:4d:3d:7d:0d:dc:d8:65:e0:2c:ee:9a:08:c6:ee:c8:
6a:0d:db:3a:bd:89:c5:84:8b:03:29:03:e5:64:15:51:f2:be:
1e:96:30:7c:0e:b7:f7:c3:a7:f0:1e:11:f0:58:cb:b1:23:c5:
2e:c5:80:3f:8a:61:9c:9b:cb:b8:38:b6:6b:74:3a:d9:4d:88:
49:85:f4:f5:cb:e2:2d:db:ac:31:cd:12:46:93:e1:d8:b7:7a:
67:ed:b4:b4:0e:df:55:2f:9d:04:4d:c4:a5:95:ca:8a:12:4c:
6a:a9:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 17:56:19 2024 by rpki-client on console-fra.rpki-client.org