Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/42658029-7d11-3b39-bc85-ea7ecc9626bc.roa
File: 42658029-7d11-3b39-bc85-ea7ecc9626bc.roa (raw, json)
Hash identifier: qrjSLAnUr7oCJGGHyu894LelP6xWmQSn5C0mF0K6580=
Subject key identifier: 7C:C6:31:A3:A5:6E:40:1D:CA:52:16:5D:E9:17:2C:4E:0C:5E:35:9E
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABFE64A99C672CACC1828
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/42658029-7d11-3b39-bc85-ea7ecc9626bc.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 66.231.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Feb 2025 15:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bf:e6:4a:99:c6:72:ca:cc:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=7b06428f-8067-4131-8437-edd75dd84540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:fa:8c:14:24:db:8e:3d:1a:16:3e:c8:9f:
aa:af:bd:0c:65:e5:a1:ec:8e:22:90:e4:96:60:09:
7d:7a:f8:83:d2:bb:15:ba:ff:d7:49:0d:b1:b4:6b:
1b:77:22:b3:2e:c2:bf:f3:88:83:fa:d1:42:bd:54:
45:39:d4:f3:db:77:d4:cc:a4:04:78:e5:d5:e2:cd:
30:48:ad:91:a5:3a:2d:cd:15:4b:c8:79:f2:0e:16:
2f:e1:c2:99:a6:39:73:f7:6f:c7:a8:e2:d4:23:78:
09:71:4a:9d:7b:e1:95:e4:56:63:cf:f4:aa:5d:11:
53:1c:a0:83:18:62:26:92:a2:56:0e:94:d2:1b:56:
50:32:6a:9e:c9:4f:ce:8a:d1:fd:2f:a6:8e:9d:25:
c5:07:e9:33:f8:a6:dd:36:9f:d2:3b:64:e2:d4:09:
4f:94:c7:59:37:5a:7b:3d:12:7f:54:95:fe:31:e3:
61:36:e3:8d:97:d1:05:c6:da:f2:70:f9:ac:3d:aa:
8e:68:11:36:98:c4:7b:36:86:af:ef:69:6c:a7:9b:
b9:4b:9f:2f:7a:0c:3c:9d:15:00:21:a0:8c:b6:1f:
ef:2e:1f:37:ad:14:a6:d6:47:00:46:9e:82:d3:a4:
0f:1b:da:13:7e:43:68:26:5d:d6:56:80:e8:ea:40:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C6:31:A3:A5:6E:40:1D:CA:52:16:5D:E9:17:2C:4E:0C:5E:35:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/42658029-7d11-3b39-bc85-ea7ecc9626bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.231.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:ed:a0:83:61:b1:dc:c8:e5:6d:c7:66:28:90:36:91:af:14:
04:51:a3:20:78:ff:bb:a4:69:d9:1f:45:72:0d:be:03:a3:c3:
80:b5:c5:4d:ed:6c:36:a7:eb:55:a0:b9:08:d6:e1:e6:6a:8a:
df:d9:e6:f8:b7:77:1f:c8:11:99:17:e1:d8:01:77:ac:4c:88:
bd:85:19:f4:3f:48:6e:51:65:cb:e4:15:8b:54:33:51:db:94:
b1:6b:fe:b1:61:64:d3:11:3b:16:06:bb:1c:bc:0d:2f:b4:10:
f7:57:0d:cf:b0:fb:1e:9d:70:d9:13:1b:b7:44:99:9a:d5:5c:
03:80:c2:1d:0b:4f:e3:e5:d2:50:5f:21:66:77:22:63:6c:8f:
91:b5:10:f6:d6:49:65:73:92:eb:29:5f:35:47:cf:34:16:28:
93:15:91:d4:29:b8:2c:98:2f:36:50:0e:0f:b1:32:e0:d5:b7:
8c:13:0a:f4:b6:22:46:9f:ab:d1:63:82:62:b9:c6:94:2c:72:
5e:97:4d:3b:73:52:fe:76:b6:92:71:c1:7c:cf:ff:c0:21:e5:
fe:0f:95:d3:c1:63:05:07:1b:a3:d5:77:40:9e:c5:a6:c8:1a:
e6:e7:76:af:d3:ba:ac:a5:ea:8b:6a:0d:3a:32:1c:52:7c:ea:
36:2b:cf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:45 2025 by rpki-client