Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfd6b6df-27c8-3e92-a66a-28ca3de22b2f.roa
File: cfd6b6df-27c8-3e92-a66a-28ca3de22b2f.roa (raw, json)
Hash identifier: GGV8BlZyn++/OrECyzlJ1xgTcLSMyR81Tt9AkQAMOw8=
Subject key identifier: 17:9B:52:7C:F1:13:1F:C6:9B:B4:39:FA:0A:C8:D1:64:28:34:41:3C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285847FD20F400C354BC67448F8100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfd6b6df-27c8-3e92-a66a-28ca3de22b2f.roa
Signing time: Sun 24 Nov 2024 19:25:51 +0000
ROA not before: Sun 24 Nov 2024 19:25:51 +0000
ROA not after: Sat 22 Feb 2025 19:25:51 +0000
asID: 14315
IP address blocks: 166.0.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 19:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:20:f4:00:c3:54:bc:67:44:8f:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 24 19:25:51 2024 GMT
Not After : Feb 22 19:25:51 2025 GMT
Subject: CN=698d0c37-c6bc-411b-afb7-955530fafb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4d:3d:41:93:6a:13:2e:a5:e9:57:0f:3d:28:
19:b4:e3:06:96:e8:f2:2a:05:50:89:2a:d3:d4:07:
fb:43:99:77:d6:19:fb:b1:b1:d2:f9:d3:f0:9b:76:
88:1e:06:ff:05:00:dc:9d:b3:db:37:87:56:8a:f4:
14:43:a7:49:c5:12:2b:58:c0:8a:a4:5f:3a:f9:99:
b5:f3:c1:18:8e:03:9c:5a:fd:78:02:34:b0:12:01:
7e:21:c9:07:02:68:00:b0:2f:1f:9e:4d:c5:4e:bd:
a1:76:e5:31:42:27:f9:99:76:06:e4:4d:7c:de:70:
e0:99:48:b1:0e:f9:10:f3:83:2d:5c:99:1e:0d:4d:
41:cd:fe:96:52:11:49:59:bb:c3:86:49:55:8d:62:
e9:55:ba:6f:e7:af:d0:d8:c2:b8:cc:c1:a9:de:5e:
7f:9f:92:9f:ef:68:e8:6a:03:93:0d:7a:cb:34:d2:
22:52:0a:e9:a3:2c:93:1d:1c:85:3a:8f:bf:9e:ec:
d5:9c:52:1d:5b:cd:08:1d:d1:55:1b:31:20:f3:73:
8a:e9:49:3f:42:2c:83:32:22:c4:97:a9:d1:aa:c6:
87:b2:9d:8d:ef:05:6d:72:f1:33:82:36:3f:f4:89:
aa:89:8c:16:7c:bf:52:b3:e7:53:24:9b:04:ee:23:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9B:52:7C:F1:13:1F:C6:9B:B4:39:FA:0A:C8:D1:64:28:34:41:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cfd6b6df-27c8-3e92-a66a-28ca3de22b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:3f:ae:c3:5e:50:07:9e:24:95:8c:30:ad:47:c7:0c:b4:ea:
fe:c2:bb:5d:b7:37:1f:7a:67:5d:23:f2:e1:05:7c:87:42:18:
38:a2:fe:ab:d5:af:0e:9c:86:7c:8a:3d:b0:da:4d:34:f3:e2:
fd:1c:e3:80:88:1b:36:0b:b8:a2:1c:db:9e:dd:4e:17:d8:72:
99:a2:78:22:64:49:14:f7:7c:03:0b:d8:dc:8b:72:bf:f8:38:
63:18:9d:20:a8:69:74:c0:36:19:82:fc:d5:e5:a5:60:5c:83:
0a:1d:e4:a8:4b:b7:e3:3e:3d:8f:68:b7:ca:d2:84:bd:4a:65:
3f:b8:b1:2f:f3:d6:6b:9a:b5:51:e3:c1:b9:c7:25:d6:16:4b:
69:3f:ff:43:a8:6c:e1:3c:92:d8:b7:27:31:b8:ee:6a:ab:42:
4a:cf:55:51:31:15:c0:e0:e3:f2:af:b7:4c:23:aa:8b:6b:e2:
c7:3e:ad:8f:7b:d4:ba:bd:c9:6a:78:0f:aa:bb:8b:b5:35:e5:
57:c2:d2:b4:42:eb:b9:03:be:c5:9b:1b:2b:14:c7:f1:cb:c6:
c2:23:ab:61:37:0a:9c:b0:54:b7:a6:2c:a3:64:59:89:91:6f:
69:03:0a:98:60:96:89:87:91:0e:24:bc:b2:64:cd:03:3a:f8:
8d:c6:86:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:50:08 2025 by rpki-client