Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebe9a66d-4e92-349d-b92c-774c02a3d556.roa
File: ebe9a66d-4e92-349d-b92c-774c02a3d556.roa (raw, json)
Hash identifier: zLMr6L6eJSarSimZ1twK0xJ+AgpKl6AjdkIe2zOad5c=
Subject key identifier: D1:5C:2D:C5:E3:B3:B7:5C:15:EA:FA:DC:66:5C:AC:D1:98:16:66:84
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584819D0080258492D5B1DF55B80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebe9a66d-4e92-349d-b92c-774c02a3d556.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 108.165.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 16:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:08:02:58:49:2d:5b:1d:f5:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=afe76837-349d-4ea7-b08d-e747ca9abcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:7b:7d:60:ab:91:39:72:5b:a9:22:1f:28:
99:fe:f0:8a:d5:25:01:01:29:a0:dd:b1:3b:f7:d5:
7d:7e:cd:6f:33:d0:93:f7:2b:76:80:d4:28:5f:5a:
d6:f4:d1:e7:7a:e6:3b:59:ec:b9:7e:bd:59:8a:12:
a3:56:68:fd:ab:4c:6f:06:fb:d0:fc:d0:d8:fe:4a:
66:6a:f5:60:20:3b:4f:00:4f:1a:2b:14:e8:ef:05:
ab:61:df:2c:4c:0e:9a:f3:75:8e:79:2c:ee:d1:51:
9c:ea:cc:19:48:64:bd:44:8b:00:40:33:82:27:54:
72:d3:5d:86:2d:b5:01:31:4b:6c:98:83:b4:73:4d:
a0:2c:6e:a1:88:f6:58:dc:55:31:e6:be:12:f2:54:
4c:0b:43:95:36:82:4a:25:cc:b5:c3:40:1a:0e:7e:
9b:b1:63:2b:49:75:5d:77:17:fc:89:46:f7:4d:98:
00:53:e3:2f:7b:ea:28:43:ec:ed:02:1c:ae:00:0b:
3d:4f:9b:2f:43:d2:7f:5a:72:f4:00:87:35:73:5c:
c3:1e:b7:0a:41:7d:da:c0:08:27:d8:1c:e2:59:b2:
dd:bf:7d:db:e2:0f:5a:47:02:42:3c:0c:a1:ac:57:
9b:cf:74:68:a8:c3:26:00:29:4e:0d:c8:29:38:f6:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5C:2D:C5:E3:B3:B7:5C:15:EA:FA:DC:66:5C:AC:D1:98:16:66:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ebe9a66d-4e92-349d-b92c-774c02a3d556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ac:f8:94:7b:ee:a9:52:73:45:8d:13:51:07:6f:68:64:c6:
11:b9:a4:d9:b0:e8:49:48:44:c6:c3:f5:e4:86:ff:58:1f:41:
e3:fd:eb:74:d4:ae:e4:6d:59:9d:d1:32:0e:b1:f6:ba:05:b9:
9e:a7:ea:96:46:6e:4a:46:a3:2d:dd:26:e1:6c:d9:a3:f0:fc:
35:d2:f6:a0:84:d5:f5:cf:aa:9b:c7:28:be:20:cf:ba:3f:4a:
a2:9f:06:d6:12:49:8b:24:2c:94:06:66:5d:40:47:18:c6:bb:
d3:aa:a1:d1:1c:1f:b5:79:5f:85:45:08:af:e7:f7:3d:1d:30:
da:d6:c7:c9:4c:db:36:b0:f0:51:46:65:aa:eb:8b:de:48:c3:
56:ee:be:b4:e9:c4:65:d3:fa:ea:6a:ec:71:13:e1:4f:ef:b2:
49:97:4e:ec:de:68:be:21:5d:78:fa:c1:e4:9b:af:c8:7b:f4:
fb:6e:00:bf:38:b8:04:c8:cd:9f:e3:d5:68:ab:af:de:34:87:
61:eb:27:c2:be:58:53:be:ba:b4:6b:88:3e:9b:90:77:d2:c5:
89:46:9e:79:a7:dc:e5:07:ce:82:8c:46:b9:50:63:d5:c5:23:
e4:8b:36:9e:03:a2:5e:4e:3e:dd:b1:82:39:41:af:ae:d3:3f:
d6:f0:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:24 2025 by rpki-client