Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebd66dc4-06e7-389b-a8a7-9320bd977fd3.roa
File: ebd66dc4-06e7-389b-a8a7-9320bd977fd3.roa (raw, json)
Hash identifier: A7yeEx6zBmElfF2Heu/ytVCaEOnwb2WA5b3qay6YDU8=
Subject key identifier: 84:6A:C0:CC:F8:4C:36:03:0B:FC:55:FD:D4:A8:0F:D7:A8:B4:C4:D2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848C2B65402F1754218B081D210
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebd66dc4-06e7-389b-a8a7-9320bd977fd3.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 7018
IP address blocks: 108.165.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 18:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:54:02:f1:75:42:18:b0:81:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=ce88d8f8-2c91-448a-93d7-27162afbee36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:f7:4e:b3:5a:1d:fe:8c:57:63:06:1c:9f:
cd:13:e8:be:ed:a2:c9:07:19:5d:32:ad:8f:b9:a9:
1f:c1:92:8a:5a:f0:d1:ea:27:a1:ee:bc:f3:eb:f6:
bf:41:00:f5:23:6c:dc:40:1f:03:5d:4d:0f:e9:17:
ba:83:a0:4c:64:dc:4b:8b:b1:81:5c:25:1d:d6:cf:
21:1c:5f:22:41:1f:0d:f7:9f:45:8c:7f:d8:0d:b2:
09:8a:52:63:b0:46:20:62:62:1d:00:1b:51:40:d6:
54:1a:fa:5b:53:38:56:14:20:e5:52:7e:ad:03:50:
41:28:43:e8:11:84:d3:77:f7:d7:21:a9:60:eb:d6:
38:ee:6a:cf:86:5e:42:f6:0d:10:e7:5a:d4:e7:e7:
3f:d5:56:0c:fa:b4:c3:2b:fb:c7:34:73:58:47:e2:
fb:15:0e:5a:e1:68:6d:7f:1c:89:7d:55:e8:17:e6:
41:94:cb:65:2c:78:be:04:eb:40:de:32:9a:89:b3:
93:8c:72:c8:a1:75:03:f4:4c:16:c7:10:b3:f1:0d:
79:fa:d8:85:61:2f:08:fa:15:ef:ce:c9:61:08:cc:
4b:c3:86:c9:40:67:1a:a2:3c:0a:7f:94:6c:d5:ef:
c3:82:97:65:58:c5:4f:f4:50:67:99:db:23:c5:9c:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:C0:CC:F8:4C:36:03:0B:FC:55:FD:D4:A8:0F:D7:A8:B4:C4:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebd66dc4-06e7-389b-a8a7-9320bd977fd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.92.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:52:51:1d:96:82:77:ed:c8:39:34:38:8c:05:bd:59:83:e8:
df:b0:6c:f4:ba:bd:1d:63:45:ad:85:75:7a:4f:19:9f:d5:24:
27:20:53:36:4b:15:21:53:76:96:29:2c:15:9d:ef:45:12:5e:
7e:8f:30:27:01:be:29:14:f2:a6:4c:f7:d1:ba:7c:b0:3f:d7:
d3:34:d6:78:1c:ec:b3:54:04:e7:b3:30:71:24:6c:0a:1f:9d:
2e:26:57:7e:34:45:83:9d:7c:2a:45:0f:a1:45:cb:fd:2a:99:
af:8a:92:88:3a:74:66:6d:83:7b:1b:92:3f:26:19:75:08:6a:
d1:c5:9e:ce:41:7b:a0:8c:ec:d9:46:d5:0a:d7:dc:fa:ab:70:
7a:73:4a:91:ca:7f:0d:5a:5c:a1:8a:0d:ed:69:b6:72:62:31:
68:15:5e:7d:c6:de:c5:42:f5:65:23:1e:d5:95:e3:05:6b:05:
1e:69:6f:74:1b:f5:57:6e:85:2e:47:9c:cb:d1:0e:21:71:4d:
ea:79:a2:5b:d1:4d:38:ba:d9:56:c1:d1:3a:bb:4c:a2:cd:9e:
a3:a3:49:70:9a:c9:0b:bb:fe:0d:36:36:97:3d:9e:ed:a5:d8:
b6:de:bb:d5:f5:34:3c:e3:cd:11:11:fd:71:66:fd:a8:38:7d:
98:4b:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:03:43 2025 by rpki-client