Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87d4cd1e-3934-3bce-b58e-4755567bb5bc.roa
File: 87d4cd1e-3934-3bce-b58e-4755567bb5bc.roa (raw, json)
Hash identifier: 5i5t+CQwrGYSJ5QMlzx00s6xQ9IHUm+mF2Ou+m+746I=
Subject key identifier: 72:4A:9B:C2:E4:5F:4B:F2:A6:1E:F9:AC:07:12:08:19:A1:53:AD:11
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489A3B42216521B9629D517B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87d4cd1e-3934-3bce-b58e-4755567bb5bc.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 14315
IP address blocks: 166.0.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 18:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:42:21:65:21:b9:62:9d:51:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=ac8f98d5-f74a-4186-b7d6-849b9f251ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:1a:55:da:32:dd:07:cb:1e:c3:b6:a1:36:
4b:27:a1:7a:e8:52:93:d0:2f:06:83:92:04:5a:d4:
bd:05:61:80:37:3c:37:1b:d5:2b:65:37:56:9e:fa:
73:a0:39:49:9f:27:81:65:ad:a0:48:34:df:eb:e5:
f3:21:6e:f7:ff:a0:8c:71:1a:97:69:37:bc:c1:5a:
96:fc:7d:71:cb:07:1a:c2:75:0e:a4:9c:30:a2:74:
f0:52:34:0f:37:39:c8:83:54:d0:57:d4:cd:be:c4:
36:0c:12:70:52:87:2d:54:a9:33:f5:45:bd:f4:2e:
e4:9c:e6:d0:d3:7a:17:c1:80:d5:c7:cc:92:16:66:
ee:1f:d7:d4:c8:e5:59:2d:b0:64:e7:17:63:9a:ef:
c5:ee:05:9f:09:15:39:96:e3:0c:70:38:1e:47:ae:
6a:91:8e:95:2f:09:61:0c:6b:de:2b:2a:42:6c:ee:
69:6a:08:bd:06:9e:cd:22:36:1a:72:c1:cd:4d:bd:
2d:0f:3b:38:76:aa:57:4d:e9:80:27:77:1a:a3:e0:
90:52:d5:64:f4:be:b4:11:7b:55:e4:a1:0f:53:d6:
51:8c:33:41:f2:c1:62:b1:58:7c:32:f6:c6:a3:28:
5d:8c:16:79:a5:5f:36:05:a8:4e:99:48:8d:f3:8d:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4A:9B:C2:E4:5F:4B:F2:A6:1E:F9:AC:07:12:08:19:A1:53:AD:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87d4cd1e-3934-3bce-b58e-4755567bb5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:8f:31:9a:a7:f0:a1:ca:42:4f:46:9f:1d:5a:14:40:2e:d1:
7d:a1:0f:f4:61:a5:ad:f8:26:56:6a:2b:fd:36:5b:66:da:93:
15:f0:62:30:22:d6:f4:65:f0:68:f4:47:50:1b:62:68:b7:d9:
8f:13:9b:80:79:c2:83:0f:e3:d4:58:eb:34:f6:42:8a:02:ab:
98:7a:6c:18:50:bc:66:77:8c:c1:01:6e:82:be:0b:30:50:3e:
bd:12:ad:59:27:3d:5d:08:16:a0:8f:9b:c0:00:00:68:56:97:
96:e6:07:dc:b6:e2:a6:58:53:78:21:71:fd:b1:4c:20:be:4d:
33:b0:53:a1:fd:6b:6b:37:2d:38:f1:f6:ce:e3:64:38:b5:bf:
60:2f:66:6a:ba:c0:b3:34:b0:9b:5f:09:3c:91:80:3f:97:a3:
36:41:bc:cb:b4:97:a8:e6:8c:92:d1:76:b1:06:a6:07:2e:ae:
6c:82:c2:a4:25:34:11:68:27:73:5e:c8:99:2b:a5:d2:a4:db:
a3:87:f1:b2:38:24:83:da:86:71:89:1a:5b:b7:bf:49:97:14:
48:00:eb:64:5c:9a:f6:78:aa:f6:52:d5:7b:e2:27:c2:c5:60:
2b:6c:97:aa:c2:47:09:ca:39:0c:65:03:f5:64:89:9e:f7:14:
3c:6e:8f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:13:44 2025 by rpki-client