Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb41deb0-7bc7-3aa7-ace5-f11632d9b625.roa
File: eb41deb0-7bc7-3aa7-ace5-f11632d9b625.roa (raw, json)
Hash identifier: ulpxugv73IOME4EFV1uWBGqJrCu2mNbnuuyiVPIySNU=
Subject key identifier: 5F:BA:39:1D:0C:C1:1E:E8:1E:76:31:8E:E3:A0:FD:DD:B4:A5:2D:A9
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858489EBF2E08F76A1A219C170573
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb41deb0-7bc7-3aa7-ace5-f11632d9b625.roa
Signing time: Tue 21 Jan 2025 16:49:49 +0000
ROA not before: Tue 21 Jan 2025 16:49:49 +0000
ROA not after: Mon 21 Apr 2025 15:49:49 +0000
asID: 834
IP address blocks: 166.0.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 18:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:bf:2e:08:f7:6a:1a:21:9c:17:05:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 21 16:49:49 2025 GMT
Not After : Apr 21 15:49:49 2025 GMT
Subject: CN=001d5a47-c28b-4602-a144-4235674d030e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:da:ab:01:46:38:a1:2d:30:1a:b5:75:82:
fa:d2:ef:8e:88:5b:52:ce:b8:93:45:45:9c:df:5c:
ba:a5:68:04:ff:8c:b3:12:2a:dd:46:cd:55:0c:a3:
c7:15:d3:91:1c:bd:92:8d:e4:1a:57:5b:23:fc:e0:
ae:49:59:21:98:09:d7:97:47:da:8c:dd:7a:c1:5b:
43:a2:3b:5b:7a:a2:67:2c:4c:de:b5:3f:17:b9:79:
90:f4:9b:eb:7c:2b:53:3d:a2:db:97:2e:3c:33:57:
92:be:40:15:61:8d:42:8d:9b:48:92:15:bb:c7:88:
d4:81:bb:13:fb:44:12:b5:6f:17:7f:27:28:40:33:
35:92:0f:bf:2c:53:91:27:41:0d:c1:d9:9c:75:df:
c7:fa:01:de:60:2f:d1:57:4e:85:17:76:8c:a3:73:
8b:8d:d0:19:9a:f1:9c:91:84:2a:6e:8a:91:6a:2b:
87:8b:73:55:f1:be:cb:70:9b:22:f8:20:55:fb:b7:
cb:1f:c0:d5:57:8c:ab:04:a6:51:f9:ff:82:b6:03:
2b:0b:b5:28:fa:97:1e:3a:f5:f6:3d:30:54:84:30:
c0:d1:df:79:ec:d1:38:d1:04:f4:ef:eb:3e:87:e0:
8b:99:6f:1b:28:74:6d:4b:1c:1e:1e:d2:1a:69:b8:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:39:1D:0C:C1:1E:E8:1E:76:31:8E:E3:A0:FD:DD:B4:A5:2D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/eb41deb0-7bc7-3aa7-ace5-f11632d9b625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:88:96:ca:82:98:93:8d:d7:fc:d4:f2:9c:03:e9:76:42:eb:
f8:e3:f5:c7:f5:51:0e:f6:0d:e8:8c:ff:4f:42:f8:fb:2c:43:
18:9b:59:23:82:cc:fd:3c:89:bf:89:db:94:ed:6a:44:f8:7c:
fe:e5:f6:93:01:d1:39:e6:f8:5d:2d:1b:7f:5f:ab:24:f3:a7:
d9:02:96:5a:54:9b:43:fb:7b:ab:4d:42:1c:f1:67:80:23:27:
50:e5:e5:72:1e:51:d8:23:67:01:e6:64:b8:69:fa:f4:ac:eb:
79:f4:3a:6b:f9:5b:9b:5e:f7:50:46:92:5b:2a:00:45:69:a5:
39:5e:f0:71:69:a8:cc:84:9f:96:2a:67:e7:00:1e:c9:41:ae:
27:d0:58:7a:c7:cc:02:ec:40:fc:7b:b4:ed:ba:7b:e3:c1:f4:
21:57:73:ad:5c:66:43:64:e0:fc:91:ba:2c:bd:32:f1:96:f2:
be:79:5d:ca:93:dd:9b:89:57:b2:31:85:85:bc:29:05:5b:70:
f2:bc:14:11:43:bb:a4:89:64:a3:89:a0:c9:fa:73:f0:8c:9a:
03:77:37:6a:5b:e0:90:a1:16:96:5f:c5:f4:80:8c:2f:e6:1c:
17:a9:4e:e9:eb:90:11:4e:3d:03:f1:f4:86:ee:82:95:04:e5:
46:85:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:19 2025 by rpki-client