Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/943980b0-653f-386a-9406-98dd702fcb13.roa
File: 943980b0-653f-386a-9406-98dd702fcb13.roa (raw, json)
Hash identifier: CJuljZ/QhFcIxOpBUcW8P10FN9jpSUJoUt+pheEBcC4=
Subject key identifier: 37:9F:34:3F:23:7C:2E:06:0D:05:AE:4D:DD:66:8F:10:DE:A3:48:09
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858483F80337BD1F84D71208EE900
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/943980b0-653f-386a-9406-98dd702fcb13.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 62240
IP address blocks: 166.1.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 19:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:33:7b:d1:f8:4d:71:20:8e:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=509021d9-d1c5-46da-b05d-cd3e353ffe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:6b:c4:88:6e:6e:18:2b:86:16:bb:f4:99:
0a:ff:59:10:82:d8:1f:68:f9:4d:67:c8:bb:7e:3b:
8c:da:56:ba:09:9e:7e:ee:c4:8f:78:60:10:86:78:
57:c6:09:e1:72:0e:3c:90:e6:f1:d2:c0:2e:24:c9:
90:89:85:93:de:8a:4d:0d:83:83:46:a8:31:51:10:
d3:ef:c7:5e:a1:63:6d:63:d6:7a:83:04:64:69:54:
a1:45:af:1f:8f:c7:d7:00:0f:65:75:38:13:a3:de:
2c:1e:d6:87:f9:c3:ae:40:3b:21:de:fa:a9:31:74:
41:01:ff:0f:a0:4a:be:6f:b9:16:21:d2:63:f9:e0:
ef:1b:08:e9:d6:aa:09:13:19:bb:cb:e1:95:da:7a:
5c:0e:e0:3f:c0:93:64:df:ee:03:07:3e:b8:54:e3:
b7:21:05:36:05:fa:3e:e1:c8:81:80:48:65:3c:90:
b1:1c:e4:98:6a:d8:d7:6f:ea:c5:9e:60:5e:96:4a:
17:42:01:00:df:b5:2c:4e:a8:aa:ab:c7:8f:48:46:
cb:b4:cd:0d:00:e8:35:ab:24:4c:37:50:9f:78:30:
3b:1f:53:72:31:1c:36:21:8a:79:8c:91:4c:78:c0:
a5:3b:5e:f2:41:77:da:e6:a1:dd:97:fc:a7:2d:d8:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:34:3F:23:7C:2E:06:0D:05:AE:4D:DD:66:8F:10:DE:A3:48:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/943980b0-653f-386a-9406-98dd702fcb13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.1.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:74:69:49:58:a8:f3:10:d2:69:43:0d:d8:14:1b:87:64:42:
7f:00:d9:f0:f1:6f:dc:63:2f:0c:44:35:4f:b1:35:e1:7f:79:
d9:c3:96:b0:23:d1:a5:5d:ff:7f:98:66:42:11:e0:26:98:e0:
e2:bb:1b:78:da:62:39:92:12:77:39:57:3f:ad:77:ae:14:10:
59:21:8f:a2:11:6a:89:33:b8:37:91:22:8e:ff:1d:8d:2a:dc:
ba:37:5c:7e:19:0b:08:a8:95:cb:88:59:80:20:06:fd:d7:7c:
f2:b9:cb:13:f6:c8:d6:2c:4f:fa:af:d9:f1:f2:19:78:39:d2:
77:b7:db:4e:67:be:bd:30:ae:5a:60:2c:0d:60:16:d0:4a:d7:
3e:5d:4f:2a:c0:01:7f:64:ab:43:c9:51:58:b7:92:76:63:01:
5b:d9:cd:77:88:7d:63:83:45:bf:9e:09:20:a2:62:a6:71:ad:
a7:7f:a5:a5:6c:15:02:38:ac:ed:14:60:e1:f1:03:df:cc:43:
93:f3:72:84:f8:0b:d6:d9:70:70:72:aa:25:c4:68:55:f6:b4:
5b:93:a1:c5:29:75:0b:52:cd:41:09:5b:e8:34:b4:a2:52:fb:
f7:b5:09:c6:9e:00:fd:ab:24:3d:12:05:d1:0d:0d:76:e4:14:
92:10:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:17:48 2025 by rpki-client