Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6679bf8-3d30-3994-b343-8475860e550b.roa
File: b6679bf8-3d30-3994-b343-8475860e550b.roa (raw, json)
Hash identifier: GvpQL2UYe7/1RmtOk25X07C/lQZO58OAXSrw2oO9NZg=
Subject key identifier: 14:31:11:B6:AD:69:88:6E:B4:FF:8F:C7:5A:9C:C7:8B:D0:53:80:8B
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584891DB3330BDC6916FE731C400
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6679bf8-3d30-3994-b343-8475860e550b.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 834
IP address blocks: 108.165.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:33:30:bd:c6:91:6f:e7:31:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=f5746f8a-9079-4de9-b17e-88e90a003bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:f5:1b:15:79:99:5b:eb:7d:21:1e:34:47:
88:97:8c:a1:4d:aa:96:b7:59:c8:08:2e:03:86:2f:
34:1a:92:af:99:76:ed:6b:70:7a:5d:2c:19:23:17:
f2:5d:93:99:d2:37:28:d8:3b:66:ab:ea:a7:7c:86:
39:e7:3a:b9:eb:f0:79:85:bf:02:b2:81:5b:ba:bb:
93:1d:db:c8:33:98:29:bb:5a:2b:0a:33:9b:4c:99:
e6:93:6d:f9:71:2d:31:b0:7a:b8:ce:07:7c:bb:66:
6a:69:93:a0:14:b0:b5:97:44:b7:75:84:bd:07:fb:
00:bb:a6:9d:01:63:97:97:71:f2:fe:bd:02:ab:3f:
24:5e:1a:60:f9:db:e0:8c:01:82:44:0e:5d:d4:7c:
54:b5:5e:79:68:b1:5a:97:a0:59:38:29:55:77:26:
1f:73:a3:52:68:fa:4b:19:02:fc:be:ef:d1:56:77:
a3:30:74:71:b0:15:dd:8a:f2:ce:41:25:89:be:99:
c1:cb:fa:ed:28:f3:ab:8a:7b:f5:d8:cd:b7:2a:07:
b0:b0:e9:4b:aa:08:fb:70:f9:fd:99:22:86:2d:93:
42:b2:6f:66:21:03:d2:61:62:bd:de:5d:96:82:c3:
88:e3:58:bb:50:f5:5c:25:45:89:77:3d:64:b7:1b:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:31:11:B6:AD:69:88:6E:B4:FF:8F:C7:5A:9C:C7:8B:D0:53:80:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b6679bf8-3d30-3994-b343-8475860e550b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:30:49:3f:55:a0:78:85:86:f2:53:ef:f9:3b:a1:97:65:d1:
08:f8:88:9b:9b:eb:93:d0:ee:2d:e7:4c:cc:60:70:12:e3:e9:
ff:a0:59:2a:9a:f4:64:71:7a:16:98:78:9d:36:95:06:b7:06:
d8:0e:7d:c5:09:98:9b:88:86:a5:3d:c0:9c:ff:27:f1:9d:35:
47:4f:26:ff:11:32:98:b3:1d:6f:6d:2e:a9:6e:23:7a:62:87:
35:2e:8e:95:2f:9d:30:90:11:81:04:61:5d:1d:0e:c8:c2:2c:
72:9c:29:a3:da:e3:11:bb:a9:24:c8:a3:94:4b:ee:d2:41:99:
4a:d9:7d:a9:ba:b2:78:83:10:7e:17:97:8d:8f:49:9f:f3:51:
71:ed:5e:3a:01:e0:c9:a6:d5:5b:35:90:ee:94:dd:42:10:48:
72:6a:5d:03:84:ca:f4:70:20:22:29:76:34:de:13:61:66:45:
c9:f8:fa:fd:71:1a:9f:cd:89:e6:f8:70:29:34:5d:51:cd:4c:
e0:ab:f5:99:d4:18:a8:27:52:7a:af:62:d0:5f:c2:c8:1e:23:
5e:9b:a6:d1:8d:6b:f1:93:1c:6e:1e:3f:96:b1:14:41:9b:cf:
7a:b2:df:29:df:65:19:e0:65:91:9b:19:c5:98:09:f0:1c:66:
b9:15:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:40:40 2025 by rpki-client