Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f59e2c61-88ad-38ae-b406-827720fe05c9.roa
File: f59e2c61-88ad-38ae-b406-827720fe05c9.roa (raw, json)
Hash identifier: Xlk0Qvvk82bgdv+/Urr3K2MZMrgN/j5a6vw1kfw8HLw=
Subject key identifier: 31:DC:DC:6A:BC:8D:DE:C2:5F:34:4F:52:4F:E6:5C:76:A7:C4:F7:A4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848ADC623D8819C2040DCBCC800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f59e2c61-88ad-38ae-b406-827720fe05c9.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 21743
IP address blocks: 108.165.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Feb 2025 21:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:23:d8:81:9c:20:40:dc:bc:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=6d2584c3-496a-46b6-b3d4-4882c7c57886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:cb:26:bf:f9:48:47:e7:58:10:e3:25:75:
47:b4:0b:9a:e9:48:21:be:a6:31:14:30:0a:0f:84:
00:2a:66:54:a2:8d:5f:68:b8:05:1a:41:61:8b:1d:
45:b8:e0:23:dc:6b:aa:3b:5c:26:ea:85:78:ec:fd:
b2:8c:63:57:4f:2e:4a:fe:fd:91:1d:99:25:42:9a:
fb:7c:09:e4:fd:4c:56:4c:f1:7a:0c:e0:6e:9a:64:
83:d2:a2:8f:03:79:e1:33:37:74:4a:e3:3d:5c:85:
b7:fa:70:dd:61:9d:99:5c:1d:8b:c1:e0:cb:34:31:
df:bc:6c:66:fc:8a:5e:48:e6:1a:db:65:fd:59:a4:
f4:31:87:01:64:36:b9:04:ff:6d:bc:d4:33:16:a4:
e8:22:d3:0f:b6:a0:a3:b5:86:55:6e:53:45:ed:17:
99:74:6a:ac:b1:24:da:2c:8e:c0:69:04:e2:f3:4e:
9f:4a:40:d0:50:24:18:71:4b:90:cb:b1:36:7e:1b:
8f:8a:71:7e:1e:11:24:d8:35:14:d8:d2:65:0c:88:
84:09:41:14:20:30:74:1a:e9:96:86:b5:35:a5:62:
a3:a6:99:19:66:e5:c0:f7:54:0c:07:b9:97:a1:ba:
af:c3:94:b5:e9:6a:e5:47:20:55:54:e4:29:c5:92:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:DC:6A:BC:8D:DE:C2:5F:34:4F:52:4F:E6:5C:76:A7:C4:F7:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f59e2c61-88ad-38ae-b406-827720fe05c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.160.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:db:66:d9:57:05:10:89:54:be:53:69:b8:ed:1f:4d:78:6d:
24:06:29:a5:4f:b8:89:7a:82:2d:95:e9:f5:6d:10:9c:f7:d9:
c2:a1:eb:27:40:76:64:3c:b5:24:7e:fb:a2:56:ba:c7:2c:4c:
6d:1f:9f:cd:2a:27:96:7a:7c:96:97:1f:b5:f7:74:f7:7c:e0:
3c:12:7e:72:fa:87:79:cc:11:76:d7:39:5a:ad:6c:3f:87:49:
fa:c2:3e:96:c6:ed:5f:18:91:dd:dc:6e:b3:ba:8b:26:4d:8b:
6c:14:3d:e7:a8:48:b2:8a:41:6b:9c:89:97:ff:07:b5:04:d7:
be:d8:9d:3c:4b:de:97:19:d9:67:95:5a:dc:a4:1e:65:24:79:
ab:fc:ca:cd:75:4f:07:04:d3:f5:a4:a7:da:3b:4e:8f:a3:14:
db:c2:a7:f9:45:4f:07:a4:42:4a:a0:66:69:c0:62:4f:d3:25:
ff:c8:4c:aa:09:2b:44:35:72:39:77:72:e4:3a:c8:1d:58:d7:
e6:81:79:a9:cd:0b:2f:51:b1:d2:1d:c6:ef:d1:fa:26:6a:87:
ff:f5:b0:21:c1:8c:92:cc:57:76:50:b1:0a:8f:86:31:41:34:
41:13:02:0d:7b:09:0d:0a:c9:cf:f1:46:c0:0d:25:95:39:14:
c3:f3:ac:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:07:03 2025 by rpki-client