Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f8740cd1-907f-3e0a-bb95-edc9a53b1aa1.roa
File: f8740cd1-907f-3e0a-bb95-edc9a53b1aa1.roa (raw, json)
Hash identifier: WiIY/wQ6siHBFMrkghTjOVgRVjlgvGQQjp9reyDz6ys=
Subject key identifier: D7:84:D8:BC:7D:7C:3E:EC:6F:D2:1E:C8:B2:74:13:EA:02:3D:46:34
Certificate issuer: /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial: 010D0C9F4328584819CFE2A09A7180EDFE89D610
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f8740cd1-907f-3e0a-bb95-edc9a53b1aa1.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36734
IP address blocks: 66.54.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 09:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e2:a0:9a:71:80:ed:fe:89:d6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=beb748dc-2b80-4f27-b179-99e7fd274c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:26:8b:87:d0:72:85:3a:4f:2c:a2:04:78:
f3:92:0e:c8:ad:de:a5:8f:17:bb:06:36:a6:57:d6:
df:13:5c:f5:80:7b:11:bd:9c:10:70:20:b2:12:48:
ee:18:68:d4:9f:0d:d8:71:ce:a5:dd:4f:d3:32:42:
29:32:a2:cc:03:36:e9:56:80:01:e3:a6:a5:8d:f2:
17:6a:95:34:ac:04:ff:a0:3b:10:66:62:97:ea:a2:
23:45:b5:cf:8a:b0:b9:26:09:2c:05:d5:5c:d2:61:
e9:d4:d0:fe:a7:8b:f4:2d:c6:13:58:f2:41:ca:25:
53:08:6a:de:56:c7:48:35:ef:e7:34:ee:ac:ab:33:
99:80:f5:7c:26:5c:db:5e:22:f4:46:76:ef:8e:66:
78:63:ef:a0:5e:ff:fd:49:8a:8a:66:8a:c6:05:f9:
8b:48:87:08:ff:09:51:1d:58:86:09:5e:69:bb:30:
8f:81:ab:8d:e7:6b:7c:ae:58:fb:02:1b:3d:74:33:
65:ba:cc:f7:8a:54:9c:8e:6a:fe:05:82:53:98:ba:
7d:fd:42:b4:7f:21:b1:a9:7d:e6:dc:e1:88:8b:72:
cd:10:47:fd:eb:a0:e8:cf:45:17:84:c5:87:36:3a:
36:ac:82:23:37:48:dd:33:70:33:7c:0a:5c:49:82:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:D8:BC:7D:7C:3E:EC:6F:D2:1E:C8:B2:74:13:EA:02:3D:46:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/f8740cd1-907f-3e0a-bb95-edc9a53b1aa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
X509v3 Authority Key Identifier:
keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
sbgp-ipAddrBlock: critical
IPv4:
66.54.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:33:04:8f:e9:93:dd:7b:57:42:6d:62:f7:43:91:cf:db:d8:
a6:44:f3:69:1f:a1:0f:bd:1d:90:82:af:95:4b:ce:c9:2d:ae:
12:d5:3f:cd:5b:ad:21:35:e5:b5:18:f8:ef:8d:28:9e:88:3c:
97:2a:da:bc:de:99:94:fa:05:9e:56:45:84:14:2c:95:dd:f4:
28:c1:ed:a8:4e:f9:5d:80:e5:bc:6f:0b:c3:b3:f0:14:79:f5:
48:7b:14:7a:d5:0c:52:64:82:0e:db:4f:c5:27:7d:a7:1d:78:
fa:f7:1a:4e:b1:c6:96:67:ed:61:7f:c7:d4:69:bc:5c:ae:4b:
c3:ac:f0:a5:3a:45:e2:ad:30:e2:46:11:f9:5e:ab:83:84:2f:
f5:41:e6:32:b2:54:ae:c3:2b:9d:4a:52:0f:dc:3a:5c:df:32:
96:dc:ae:09:01:4d:d3:03:1b:60:b5:92:b1:28:ac:ab:5f:3a:
1b:04:b1:ac:a8:08:f8:e0:62:e9:c2:73:e5:3c:20:c2:10:9a:
69:fa:71:39:94:71:2f:4f:74:33:2d:4a:ed:5f:b6:0c:70:8a:
8c:70:39:f9:16:27:38:26:9d:09:a1:c6:f0:9b:0c:ab:a0:a4:
c5:5a:09:75:27:8c:bd:1f:09:61:b9:28:3f:06:46:a7:34:f2:
6d:f5:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:49 2025 by rpki-client