Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/dfa9232d-6c79-3853-aab5-6832a640c2c6.roa
File: dfa9232d-6c79-3853-aab5-6832a640c2c6.roa (raw, json)
Hash identifier: 4K8AGlxcDlHWh4MyVWgxRi+gxmozUw64pGjKTfRbwpU=
Subject key identifier: 81:79:BB:4A:77:B5:5E:B4:7A:ED:FE:AA:A0:1B:BD:DA:DC:78:26:99
Certificate issuer: /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial: 010D0C9F4328584566CD706B5FB1AC8EEB888840
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/dfa9232d-6c79-3853-aab5-6832a640c2c6.roa
Signing time: Mon 01 Apr 2024 13:32:28 +0000
ROA not before: Mon 01 Apr 2024 13:32:28 +0000
ROA not after: Sun 30 Jun 2024 13:32:28 +0000
asID: 7029
IP address blocks: 104.171.28.0/22 maxlen: 22
104.171.24.0/22 maxlen: 22
104.171.23.0/24 maxlen: 24
104.171.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 16:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:66:cd:70:6b:5f:b1:ac:8e:eb:88:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
Validity
Not Before: Apr 1 13:32:28 2024 GMT
Not After : Jun 30 13:32:28 2024 GMT
Subject: CN=e86531e9-2a39-4ca2-bd0f-675b8984547b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:19:0a:44:6c:86:a3:83:e5:42:e1:4f:dc:
04:01:8d:2c:0d:57:0e:58:16:db:05:0c:e5:04:95:
0b:bf:de:1a:49:62:28:98:d7:f4:1e:48:93:0b:54:
68:cd:77:f2:04:2b:19:10:29:a5:2a:d4:5c:1a:d6:
da:1a:3b:82:70:9e:81:37:a0:9e:7d:44:82:6c:a2:
68:1a:c9:c4:ab:ea:11:92:f1:5f:dd:7d:bc:ea:fc:
49:9e:44:b3:c7:15:78:4f:3b:99:0e:26:c3:a9:58:
f4:91:8a:6a:70:58:71:af:88:50:53:c3:af:5b:57:
1a:e4:56:94:02:df:3b:ad:88:74:f8:80:73:6d:8b:
51:34:a1:0d:db:e8:c9:cd:9d:86:d1:10:dd:ed:54:
26:af:32:84:42:41:1f:eb:07:51:fa:83:fa:72:70:
bd:66:76:17:92:c1:39:e2:d9:e2:26:4c:34:51:ed:
52:9f:60:e8:a9:ab:d6:a7:83:90:51:0b:d8:ca:bf:
46:28:57:c8:58:d0:85:1d:7e:17:44:90:c7:a9:52:
e3:38:a6:79:4a:57:13:81:b0:e0:a7:25:72:12:a5:
e7:28:9e:8b:00:d5:d7:16:32:51:00:43:c7:97:58:
7b:73:f3:75:5b:d0:3c:60:51:35:0b:22:9a:35:ba:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:79:BB:4A:77:B5:5E:B4:7A:ED:FE:AA:A0:1B:BD:DA:DC:78:26:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/dfa9232d-6c79-3853-aab5-6832a640c2c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
X509v3 Authority Key Identifier:
keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
sbgp-ipAddrBlock: critical
IPv4:
104.171.22.0-104.171.31.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:bf:40:7d:3d:1c:ec:6e:75:9a:b7:93:20:e7:ed:a4:de:6d:
57:0f:7a:ff:a2:ec:a7:e9:b8:17:2c:83:c0:5f:5d:9c:2b:aa:
d4:9d:2b:1c:a1:4c:cc:c9:cd:80:42:58:4e:b8:f4:aa:8d:75:
1e:49:da:17:e3:a3:db:7e:6d:c3:83:b6:46:95:fd:8a:d2:42:
e8:3b:11:66:7a:9e:6c:ff:66:35:31:e1:86:ba:8b:72:a6:c8:
30:9f:f4:be:1f:84:ff:bd:68:b1:0d:17:41:ef:f3:05:e2:51:
04:47:39:c8:1d:ef:2e:8d:f7:00:75:78:f5:5c:fa:40:62:59:
82:ff:2f:5b:e0:44:87:f6:2c:2c:2f:5c:93:23:30:7b:33:31:
27:7f:6d:cb:50:f9:59:dc:9d:ba:ae:70:93:1e:2a:21:18:86:
b2:43:e0:61:f9:e8:2c:c7:5b:15:6d:11:67:9a:ac:5d:40:8b:
67:8b:45:10:e3:76:bf:fb:22:ca:a2:6d:50:43:44:e3:2f:f4:
f4:3d:77:e0:2c:9f:d4:ca:75:1e:80:bb:dc:6b:2b:0d:55:df:
ce:76:e2:fa:bf:34:e7:4d:2a:9f:45:51:a0:5b:19:73:17:71:
9b:18:ce:03:a7:cc:d4:58:74:4a:f2:65:a5:df:e5:02:0f:89:
ed:e3:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 20:08:11 2024 by rpki-client on console-ams.rpki-client.org