Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bea7b3bb-89da-3e64-9b61-899629821e85.roa
File: bea7b3bb-89da-3e64-9b61-899629821e85.roa (raw, json)
Hash identifier: pX43nSQSvMtWRFti4tgsgEllRjdrwWecTeZFJIzs0bM=
Subject key identifier: 82:F5:4A:56:FA:3D:00:A2:56:E3:DD:EE:3B:FF:6D:00:07:11:24:38
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848239557A93AC25E934516C800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bea7b3bb-89da-3e64-9b61-899629821e85.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 834
IP address blocks: 108.165.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 20:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:57:a9:3a:c2:5e:93:45:16:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=8a546c33-348d-406e-a784-0c30ad8baab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:a2:65:61:b7:ba:ee:69:53:b8:b6:12:8b:
db:f8:22:e7:3c:7f:a0:5c:57:50:e9:12:46:5a:1e:
88:bf:6e:56:6e:5c:05:54:7e:85:10:f0:21:6a:a5:
64:80:ba:e0:a7:f4:ac:7c:28:c5:4d:3c:0d:12:e7:
5e:d1:93:cf:04:25:6e:d4:73:22:e5:4f:c5:42:d8:
a6:77:e3:56:25:bf:19:da:28:c4:5b:30:5f:ed:92:
ea:c4:55:5b:27:14:4c:60:5e:fd:14:10:b6:d6:ca:
d9:1d:86:da:8f:4b:de:99:67:7a:9c:74:13:41:60:
11:f2:be:86:6d:fd:29:60:8a:0c:fa:86:8a:ea:dd:
91:4a:52:bf:cd:e1:bf:32:3d:f7:10:9f:60:c7:71:
5f:15:ac:25:9d:af:09:ef:2c:d6:25:1e:8a:9e:00:
88:a3:44:10:2a:91:79:73:5f:7a:32:2f:8d:e5:df:
e8:45:27:7b:9e:6e:ad:a8:b1:a7:b1:ea:05:74:4b:
70:ad:f3:41:3c:37:d0:c1:2d:08:e1:53:d6:cb:0c:
73:47:99:3e:b9:3c:c3:06:2d:48:01:f5:84:21:d0:
11:8b:da:23:15:bb:32:16:77:b5:6f:a5:fb:2d:ee:
56:cb:eb:96:ff:41:ae:6f:b6:12:ed:61:9c:4d:26:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F5:4A:56:FA:3D:00:A2:56:E3:DD:EE:3B:FF:6D:00:07:11:24:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bea7b3bb-89da-3e64-9b61-899629821e85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:79:d5:e0:b5:eb:dc:d0:88:f9:f0:c9:56:a5:36:dc:1b:1a:
b1:53:e6:45:7a:7a:ea:95:17:1a:ad:65:14:f4:18:5e:be:29:
c2:75:32:8d:ea:80:07:d6:b9:82:56:24:f5:0f:99:48:b7:9e:
0b:21:eb:a2:1f:1a:b3:7e:21:06:ff:48:d8:00:55:00:2f:1f:
fd:88:78:a7:99:d8:47:46:72:51:4d:dc:02:ec:59:cf:ca:ac:
47:eb:74:04:99:2a:11:4b:e1:9f:f6:a7:c0:10:4b:f2:da:2b:
37:75:c2:40:3b:6e:29:c0:b6:1b:fd:31:32:41:ed:16:7c:da:
78:6f:97:08:27:87:76:05:4f:87:b8:ae:42:70:f0:06:1e:eb:
44:1d:a2:5b:0d:89:25:b8:df:21:2a:61:ef:45:04:43:88:67:
3c:63:f5:7d:65:d1:e1:9a:5b:bb:76:2b:8d:93:86:39:f2:d2:
7b:96:8c:af:eb:ee:b9:50:31:97:fa:f1:54:d0:48:de:7b:be:
8d:fb:48:36:f5:15:85:e9:ed:73:ba:e5:fb:47:7b:9b:41:1c:
e9:29:8c:2d:2d:5e:28:57:61:76:17:d4:04:34:60:eb:1d:20:
7f:5c:2f:62:27:e4:0a:8a:86:82:d4:0e:a5:51:29:22:20:df:
41:3e:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:29 2025 by rpki-client