Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9266885-b042-36b8-8d7e-648febe5746a.roa
File: c9266885-b042-36b8-8d7e-648febe5746a.roa (raw, json)
Hash identifier: BCPuxdDLwcFsiMZcGrK9zZ0k1gLdZ+xSg/b+I8bLvCg=
Subject key identifier: 6E:82:16:34:54:41:17:AF:DB:CA:CA:B7:BA:21:B3:0F:9F:95:8A:14
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285849115E19F2E379A9FDD0507B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9266885-b042-36b8-8d7e-648febe5746a.roa
Signing time: Mon 03 Mar 2025 18:12:10 +0000
ROA not before: Mon 03 Mar 2025 18:12:10 +0000
ROA not after: Sun 01 Jun 2025 17:12:10 +0000
asID: 401152
IP address blocks: 108.165.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 16:55:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:5e:19:f2:e3:79:a9:fd:d0:50:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 3 18:12:10 2025 GMT
Not After : Jun 1 17:12:10 2025 GMT
Subject: CN=2e36f330-4c18-41a7-8fea-f14ccb88ff1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:0f:6b:4d:27:91:18:52:ec:3c:1d:9f:f5:
37:54:89:05:69:4e:fc:d2:77:54:2e:fe:6d:e2:ea:
7e:8f:80:42:dd:c4:22:85:ae:a3:f6:fa:6a:81:b8:
33:82:48:37:ad:b4:9f:47:5d:8f:cf:41:13:2c:90:
fe:00:55:be:06:29:9f:5c:3e:53:87:b4:94:15:e8:
07:fd:52:7a:6d:c2:41:ad:37:0e:69:38:f8:29:8d:
71:00:76:32:ca:e4:10:de:c5:ed:d6:da:03:23:4b:
a4:d3:8a:cc:e0:f4:0a:38:0b:d8:72:41:98:92:29:
56:2c:4c:2d:57:02:79:fd:69:32:90:e3:64:6a:3c:
68:b2:73:f7:29:61:db:f8:3c:06:07:8b:79:8f:25:
c2:38:47:88:1f:94:5b:a4:ba:ed:52:7c:22:de:02:
7a:7e:02:87:10:76:8a:90:95:78:7e:75:01:e9:de:
2e:e1:12:f6:db:4b:4b:7b:6a:bc:04:93:29:e3:f7:
76:31:d3:ac:e2:af:90:cb:2a:18:4f:be:5b:15:92:
3d:5a:ad:77:61:5f:01:b5:1d:65:93:35:16:7b:bd:
43:a2:9a:01:7c:c9:97:7b:51:c0:ef:0b:4a:58:ab:
f0:84:e4:fb:a4:17:7a:8d:02:37:a3:82:98:67:06:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:82:16:34:54:41:17:AF:DB:CA:CA:B7:BA:21:B3:0F:9F:95:8A:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c9266885-b042-36b8-8d7e-648febe5746a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a1:0e:88:02:c6:e9:3d:66:cd:34:75:7d:f2:49:44:87:c2:
f0:ab:44:bb:83:05:b8:df:94:d1:da:77:1b:8c:18:7b:5c:e1:
f8:da:2c:bc:73:9d:6e:00:af:c0:79:84:7c:a0:0f:b2:1e:4f:
64:39:06:9a:06:2b:a8:bc:57:f6:6f:e6:53:e5:e7:f9:bd:2d:
e5:43:61:5d:58:97:f0:0e:b1:c0:42:87:e9:4f:59:d6:b5:5e:
47:82:b4:d1:f7:55:ea:73:32:94:06:86:4d:2e:89:6f:cc:46:
8d:76:05:2e:ae:1c:03:b1:13:6e:61:08:d2:f7:75:c5:da:ff:
e8:8c:fa:b1:7e:63:7a:1a:75:4b:35:01:c7:4b:81:3f:5b:a8:
43:2f:de:6a:85:95:85:1c:0b:a9:58:11:92:82:82:21:65:16:
c9:9a:2c:1d:9f:53:ff:75:b1:cc:3c:3b:6f:16:35:02:b7:61:
79:e5:41:1f:e1:dc:8a:e8:dc:ff:c6:1f:95:07:6c:39:ef:83:
08:e6:48:ed:9b:de:0b:bd:6a:44:5a:94:04:82:ad:4c:22:84:
99:bb:ef:30:39:a4:a0:64:80:e9:d9:12:44:79:8f:fd:e1:1b:
f3:f1:86:2b:75:4a:f5:91:5d:aa:fd:49:cb:8f:5e:7b:4f:e8:
01:38:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:20:41 2025 by rpki-client