Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee7379f9-11cf-37d5-9012-5e8527111b1b.roa
File: ee7379f9-11cf-37d5-9012-5e8527111b1b.roa (raw, json)
Hash identifier: dwiIZ4i2LwFXEZAtzwNHtHmpM3oz4mAWj4fcxdk70EM=
Subject key identifier: 8E:75:28:F0:6B:AC:A3:B2:34:BA:37:59:AD:0E:32:F7:E0:8C:00:99
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848CBAFEC41756B255F3FB6A300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee7379f9-11cf-37d5-9012-5e8527111b1b.roa
Signing time: Thu 06 Feb 2025 19:10:27 +0000
ROA not before: Thu 06 Feb 2025 19:10:27 +0000
ROA not after: Wed 07 May 2025 18:10:27 +0000
asID: 401152
IP address blocks: 166.0.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 16:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:af:ec:41:75:6b:25:5f:3f:b6:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 6 19:10:27 2025 GMT
Not After : May 7 18:10:27 2025 GMT
Subject: CN=2b11808c-b0c9-4736-9b55-3f08108ffcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:14:16:23:58:60:eb:5f:4d:59:c6:c9:15:
6f:e3:a5:78:b7:bf:cd:4a:ee:42:6e:a2:73:d4:e8:
a1:10:c1:10:5d:68:07:7e:62:ce:65:a8:a9:a3:1c:
19:a0:a4:bc:c0:78:a2:8c:9f:82:10:df:8c:bc:78:
8d:c5:2b:d0:78:c6:e3:dc:66:a3:78:48:08:62:d7:
c0:40:88:c6:a5:2c:cb:d4:1c:62:4e:a8:dc:c9:01:
1b:4a:cd:b2:20:7d:3a:c5:a9:45:98:c4:1f:67:47:
f1:53:af:07:72:fb:df:5b:e9:8d:2c:30:e0:75:79:
18:0e:5a:27:8b:84:a2:01:0e:35:d3:24:9e:3d:0a:
0d:f2:6f:25:ff:62:71:1c:73:b3:91:ec:a5:f4:d4:
82:b7:dd:69:ac:c8:55:25:68:0c:7f:03:fb:23:a3:
9e:89:0e:a7:18:d9:4a:fe:a2:07:05:50:54:79:00:
ca:c1:08:c8:ba:31:29:0d:d0:09:7d:e1:f2:5c:16:
bd:20:4b:18:e7:60:97:e4:ab:b3:c2:29:e6:c4:79:
aa:22:59:76:64:77:8c:ff:cf:2a:17:8f:94:30:15:
05:06:d0:9d:19:36:69:94:3a:e3:5b:78:1a:a6:4a:
9e:72:72:40:af:3d:b4:b1:f9:b9:3b:40:86:9a:9a:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:75:28:F0:6B:AC:A3:B2:34:BA:37:59:AD:0E:32:F7:E0:8C:00:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ee7379f9-11cf-37d5-9012-5e8527111b1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:f2:1c:8e:70:a7:9b:27:05:5d:d5:1c:46:44:bd:8e:0b:59:
77:29:f3:a3:fd:54:f0:4f:8c:e3:3f:89:32:28:77:22:27:09:
5e:6f:8e:e2:28:24:fe:45:08:b1:07:3e:4a:3f:82:31:4f:3d:
ef:d8:04:1f:1d:29:c7:79:96:09:0b:c7:8e:e1:8f:a8:9f:f7:
cf:5b:fc:fd:eb:43:e1:f0:ef:1e:39:4c:82:5e:fc:fe:a7:57:
17:59:62:b6:aa:55:23:3d:4c:5f:ad:71:c6:a5:c2:75:f9:78:
b0:f9:2b:40:53:02:23:6a:7b:3a:3a:8d:14:64:95:b0:c0:27:
ea:d4:55:e4:05:a3:a2:65:2b:c3:ea:7a:7f:f5:af:96:b7:af:
33:bd:78:01:fe:cb:dc:a3:ba:c2:ff:5c:36:a8:d9:26:c7:d4:
47:3e:cb:1c:c2:b0:d5:84:73:5e:6c:7e:ab:1c:4c:ab:1f:7d:
3b:11:3d:5c:83:8c:32:4b:50:67:99:4b:b4:59:58:b2:23:26:
56:1d:bd:74:a2:e2:cd:41:5d:05:4f:94:7c:08:01:70:17:3e:
05:d5:1b:ce:ac:c2:d0:ea:a0:43:18:a6:57:52:3c:e3:65:f8:
ab:65:96:7d:5b:80:25:53:8e:3d:e0:ce:ae:7a:25:ad:d8:bd:
09:7e:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:35:40 2025 by rpki-client