Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ded0b439-6716-3ccd-b66c-fcf7151c5565.roa
File: ded0b439-6716-3ccd-b66c-fcf7151c5565.roa (raw, json)
Hash identifier: WOoMVZLxSqoSlJaSk2xOtw/ovUehtE54517XRNkyIIs=
Subject key identifier: 21:2E:27:35:DD:83:04:17:18:FF:5C:DA:10:9B:49:F9:7B:0D:1D:26
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848977092D4E6706E7C3ED0B318
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ded0b439-6716-3ccd-b66c-fcf7151c5565.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 834
IP address blocks: 108.165.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:92:d4:e6:70:6e:7c:3e:d0:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=a8df0998-fec5-46cc-a4d4-cb3f0ec3b545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:7e:7d:cc:0b:8a:a7:12:87:c7:48:6d:60:
12:3b:6c:80:b3:19:a2:3e:24:24:fa:ee:07:08:ad:
37:fe:13:ad:98:dc:dc:f7:9d:1e:38:1f:a0:dd:42:
07:c3:0e:c2:e9:46:6d:cf:bc:71:71:58:71:49:c2:
0a:bb:49:55:3d:1c:95:4e:09:df:4f:33:63:d5:48:
e7:29:ea:71:b9:72:92:d6:54:e6:70:cf:6b:79:f4:
f6:e5:bb:8a:32:79:b6:30:05:49:40:b8:65:6e:de:
42:fe:3e:bc:d4:ee:6f:bb:b3:bc:29:37:ce:a3:8f:
d4:1d:3e:9a:d3:ff:80:15:df:5d:09:aa:ab:cb:69:
97:18:89:a5:53:fa:59:39:56:36:89:23:47:17:0f:
50:7f:f0:e4:e8:b4:d5:4a:0c:12:d4:ff:8a:69:01:
5d:20:e0:14:08:13:a2:ed:a0:6e:c6:c0:bd:55:cc:
54:77:82:fc:d1:a7:7a:2c:4b:6c:1a:34:45:1c:3d:
0f:5e:8a:fd:41:49:5a:25:ea:d7:2d:04:23:d8:0a:
a6:52:85:10:c1:76:45:e9:75:50:70:1f:68:c4:29:
62:cf:70:55:4e:91:06:d0:14:13:29:fa:ce:65:39:
4b:2c:62:c6:9d:22:bd:b8:13:79:06:00:40:56:d8:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2E:27:35:DD:83:04:17:18:FF:5C:DA:10:9B:49:F9:7B:0D:1D:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ded0b439-6716-3ccd-b66c-fcf7151c5565.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:f4:3d:d9:24:77:dc:1a:ad:41:5a:a3:78:4c:b3:c0:c7:13:
32:62:60:d1:8b:e1:95:6e:c8:a9:a4:af:e6:ba:c9:8c:f7:88:
59:36:e9:0b:55:58:65:2b:8b:a1:98:38:06:86:2f:83:f2:e2:
a7:f5:59:0e:67:88:03:dd:00:96:a7:eb:fd:4e:2c:7f:2e:48:
fb:d5:6e:b4:a1:20:0d:17:83:32:a8:ce:5c:cd:d8:b4:a6:87:
6c:1a:80:eb:96:43:a1:5d:40:d5:56:6d:35:ef:c9:20:33:54:
90:02:6e:99:8d:29:92:54:41:ae:a2:1a:79:c3:e6:71:67:c3:
c6:c2:61:5e:35:06:1b:49:f6:af:0d:e3:b1:78:93:e2:59:cd:
fd:6c:4a:fc:39:f6:a6:c5:fb:d8:d7:77:33:12:f1:44:6c:87:
81:fa:c0:4d:31:f7:22:92:0c:e6:4a:55:db:0d:e9:7a:4b:6a:
e0:f2:29:94:da:61:25:bd:6c:95:c9:cc:55:cd:03:b2:f2:6b:
82:69:65:7d:65:57:f6:78:7d:2f:b7:b3:5f:81:a6:c1:22:d8:
41:0b:7a:03:a7:1a:65:45:95:2f:60:25:de:07:97:82:00:00:
f0:90:d3:6f:49:da:dd:f5:83:94:d7:45:81:7c:b8:67:00:41:
f0:85:c3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:02 2025 by rpki-client