Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82ab9425-9f05-3a51-9ed9-36def47569eb.roa
File: 82ab9425-9f05-3a51-9ed9-36def47569eb.roa (raw, json)
Hash identifier: PLo+EXirtpEbL71ZBBt3bvgR7sPkjdZPN7U12RLOxLU=
Subject key identifier: F6:C3:90:E5:C2:EE:46:56:92:82:97:BD:4D:4E:5E:E9:84:8E:EE:AD
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858446E646B5FEC573A8C4D9CE280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82ab9425-9f05-3a51-9ed9-36def47569eb.roa
Signing time: Wed 03 Jan 2024 14:00:21 +0000
ROA not before: Wed 03 Jan 2024 14:00:21 +0000
ROA not after: Tue 02 Apr 2024 13:00:21 +0000
asID: 61317
IP address blocks: 108.165.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 18:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:6e:64:6b:5f:ec:57:3a:8c:4d:9c:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 3 14:00:21 2024 GMT
Not After : Apr 2 13:00:21 2024 GMT
Subject: CN=81424097-d4f6-4d6b-82aa-1e2dc5fea0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:13:a1:59:a8:f9:de:7f:d3:d0:3b:d3:8c:
0b:14:f5:70:07:a6:36:e7:60:78:7b:d5:8a:64:db:
5f:78:5a:73:e7:7a:5b:ec:10:09:5b:d0:63:e7:a6:
8f:2c:d6:ae:34:31:f8:2e:a9:ae:97:1c:f6:c2:11:
36:89:d9:34:6a:f5:e5:f6:58:b7:e7:60:37:a4:55:
c2:7a:f4:52:70:d4:33:16:fb:a0:f7:39:e7:7c:f7:
48:07:55:7c:e7:ec:bf:36:ba:fb:cb:63:7c:a1:e7:
7d:7c:a5:0c:1b:6f:f0:ce:be:c1:dd:58:18:fa:eb:
91:6a:1d:d7:6a:cf:35:2f:1d:1f:c1:8b:2b:ba:cb:
b8:7f:61:a0:19:83:2a:f0:4e:50:87:24:14:cf:a6:
65:2a:00:42:20:27:be:7c:58:25:2c:bf:7e:e8:f8:
a4:70:00:96:d7:2d:52:e2:1c:dd:71:f9:26:ed:5b:
41:d4:4c:f2:59:31:34:97:e8:26:39:ed:4e:09:40:
de:a4:ac:de:0d:5f:18:08:c9:e7:dd:6f:e0:75:46:
8f:2d:e5:27:1f:c8:f9:81:5e:66:07:ca:32:ba:7d:
a9:22:e4:b3:06:b4:51:09:3e:27:b5:3c:33:bb:d7:
b7:e4:e5:d7:9d:8e:57:3f:fd:ea:49:2b:1e:e7:97:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C3:90:E5:C2:EE:46:56:92:82:97:BD:4D:4E:5E:E9:84:8E:EE:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/82ab9425-9f05-3a51-9ed9-36def47569eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:61:da:c7:fc:ff:be:b2:0a:9a:07:61:01:54:dd:fe:00:6a:
51:5c:40:da:ee:fc:09:66:ae:4e:a3:21:cd:3b:d1:b6:22:07:
d1:32:d8:77:bb:59:de:b4:8a:60:b0:e1:e1:8b:66:23:93:58:
fc:6b:52:98:d3:bd:02:b5:cb:87:1b:72:bf:7f:c5:29:e9:04:
14:06:2e:28:6b:97:2b:8f:e4:2c:f8:a0:76:cb:95:71:8b:d3:
8f:ff:03:9f:b6:93:2e:f3:6f:e3:f6:ad:98:a0:db:65:b8:f5:
c4:57:2c:ef:70:82:31:c5:a1:5d:89:55:ce:13:d9:5d:26:2a:
f9:88:d3:f3:8f:2a:7f:8f:98:06:7a:e4:e1:9a:35:d0:3e:d2:
e4:f4:cd:8d:f1:9c:b8:93:a2:2f:6d:01:61:db:0a:69:eb:e4:
f2:64:1d:ff:64:68:c5:bf:f2:de:d3:bf:c5:8c:96:c9:4b:64:
67:1c:a4:7b:e3:71:7a:02:7d:88:1a:7f:6e:9f:ff:0f:fd:21:
02:f9:34:a0:75:43:90:c3:6e:b5:66:ed:47:2b:0b:c4:7f:62:
8e:98:c1:3f:92:79:17:af:d6:62:33:fe:ab:b8:59:54:10:df:
65:e1:01:48:a9:66:5a:ca:b8:80:6a:2a:e2:94:d1:59:12:80:
61:d9:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:48 2024 by rpki-client on console-fra.rpki-client.org