Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fe0c616-4aef-3ece-9d0c-b738b12b6871.roa
File: 9fe0c616-4aef-3ece-9d0c-b738b12b6871.roa (raw, json)
Hash identifier: gH9tM054AtL2PkWhdCETVwihWFjOfLWc59FvjaqdHEc=
Subject key identifier: 78:0E:D4:15:5B:93:BB:D2:8D:88:9A:8E:10:91:DF:42:F2:56:AB:4C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858410C12E91E8E750D6DFE1CD2E0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fe0c616-4aef-3ece-9d0c-b738b12b6871.roa
Signing time: Tue 05 May 2020 17:33:37 +0000
ROA not before: Tue 05 May 2020 17:33:37 +0000
ROA not after: Sat 31 May 2025 04:00:00 +0000
asID: 6939
IP address blocks: 108.165.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Mar 2023 21:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:0c:12:e9:1e:8e:75:0d:6d:fe:1c:d2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 17:33:37 2020 GMT
Not After : May 31 04:00:00 2025 GMT
Subject: CN=cf86bae2-3685-4bfc-8434-e198a0405008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:70:f5:74:1a:88:1f:14:cc:49:7f:c7:15:
24:04:81:d8:f8:1f:3b:09:1f:49:dd:58:2d:94:ac:
4a:8b:35:41:6a:9e:c7:19:94:17:b3:09:c7:87:41:
68:77:d6:0b:1f:84:b8:cf:9f:e6:26:80:c4:f1:b7:
07:ff:af:2e:ab:30:d0:67:ab:8e:21:26:9f:a4:64:
5d:5e:07:87:ad:5a:c3:ac:3a:9c:41:b9:1f:f2:ce:
7a:74:66:8e:96:30:a4:0b:60:cc:50:36:51:e4:ee:
24:b3:d2:f4:ae:b0:d5:f9:31:24:c8:d9:4a:63:16:
4c:2c:e7:96:c7:20:c7:da:97:43:01:54:6d:4f:30:
3c:c8:16:c6:84:40:32:47:0e:8a:0c:aa:72:99:e8:
01:97:18:e4:38:da:ff:e3:71:9b:d7:67:43:4e:fa:
68:67:49:79:5e:ec:be:a9:b8:33:c9:00:3f:95:f7:
d8:84:a7:dc:b9:69:a7:41:84:8f:25:75:89:40:e0:
eb:04:2c:42:e7:2a:e5:35:5c:46:8a:82:25:7a:a3:
4b:fd:b8:3c:20:51:df:9f:7c:e6:f1:26:f7:a9:89:
b4:aa:14:93:8d:0d:16:e8:48:b3:82:8d:fd:c5:c4:
e9:ac:ef:bc:05:64:27:90:74:4f:78:77:b8:91:52:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:D4:15:5B:93:BB:D2:8D:88:9A:8E:10:91:DF:42:F2:56:AB:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/9fe0c616-4aef-3ece-9d0c-b738b12b6871.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:69:17:f4:67:34:47:35:d3:b6:59:b4:63:28:de:f6:ec:c4:
04:99:bd:f6:fa:5c:d6:bd:ec:34:b7:21:e3:b1:18:80:91:f3:
6b:ec:b2:51:d8:63:d8:a6:14:4c:28:b8:02:2e:9f:2f:14:36:
e0:1f:cb:87:fc:d7:b6:e8:72:df:e9:0f:d9:8a:1d:e2:4c:37:
22:35:c2:e7:b5:1e:2e:d5:46:4e:34:49:e0:ea:9f:0c:dc:e2:
ff:62:a0:23:73:bb:9b:0a:12:ca:10:1b:7e:b4:4b:5c:3d:7e:
55:30:3f:59:b2:70:69:a1:9f:38:73:1f:29:e0:e7:f7:fb:55:
6c:ca:7f:b5:30:11:c5:01:d6:8f:f7:6a:14:fa:d8:70:d1:ec:
52:c3:a3:16:4b:37:12:ee:1f:61:af:42:76:b6:f3:f4:e7:70:
05:1b:74:40:72:a2:cd:59:1c:15:7e:48:df:41:7c:56:df:66:
58:a5:32:36:e4:cc:f9:39:ed:88:19:15:fb:ee:83:d2:0f:61:
f8:66:1e:41:a6:f1:6b:f2:83:28:93:94:71:5d:3a:7d:b2:9c:
ed:e6:0a:05:4c:10:fc:87:53:02:13:d1:52:60:08:f5:57:fc:
2c:80:b2:53:53:c3:43:7b:2e:8a:30:d7:14:c8:56:48:35:89:
40:d0:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 23 07:58:56 2025 by rpki-client