Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/aa4140b9-d517-3137-af28-c99d398bcdd0.roa
File: aa4140b9-d517-3137-af28-c99d398bcdd0.roa (raw, json)
Hash identifier: Vw69FGRM1BtJdgDAjeDHBMpPtpsampC0aeAFbPGAemE=
Subject key identifier: 07:9A:9F:CD:73:A8:81:E0:17:6E:A7:69:22:91:85:B9:3F:A7:C9:3D
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F43285845174ADEE5D034269DED1EF100
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/aa4140b9-d517-3137-af28-c99d398bcdd0.roa
Signing time: Mon 04 Mar 2024 02:00:26 +0000
ROA not before: Mon 04 Mar 2024 02:00:26 +0000
ROA not after: Sun 02 Jun 2024 01:00:26 +0000
asID: 1239
IP address blocks: 134.202.176.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 14:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:17:4a:de:e5:d0:34:26:9d:ed:1e:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Mar 4 02:00:26 2024 GMT
Not After : Jun 2 01:00:26 2024 GMT
Subject: CN=2e3d9dca-66c7-48c2-b465-8fcf8fb3709e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:37:0d:d7:db:42:16:ce:6c:c7:64:0e:0b:
05:f8:d7:90:94:aa:3b:4e:65:0f:3e:25:53:11:66:
52:a7:05:d1:1a:c0:a5:f8:7d:8d:99:65:09:7d:30:
31:70:8c:7b:e3:4d:89:b1:b1:98:12:63:4f:09:24:
7f:57:ae:8e:9d:cf:66:19:5c:a7:d3:a5:77:a8:a5:
7d:c6:c2:c6:b5:18:17:17:af:ed:bc:e3:3a:36:f6:
7e:3e:27:c4:b0:04:5e:1b:e2:41:c0:34:46:05:ef:
fc:9e:34:18:5b:6d:5f:e0:01:10:73:9f:73:3d:ba:
72:0a:a1:71:f6:6e:d9:b6:0e:91:45:35:e7:0b:fe:
01:fd:1d:d4:51:f2:83:ce:d3:59:35:bc:aa:13:f2:
01:7d:6e:9f:f9:82:b4:d8:af:e2:23:bc:a9:0e:6e:
fd:3e:ce:cd:b3:bc:74:0a:e0:33:e2:60:c0:29:d6:
cd:eb:c4:b7:11:de:49:e1:c0:7b:b1:97:3b:64:dd:
58:d2:87:05:00:68:29:15:71:a4:d1:75:e2:d5:67:
c9:a3:64:0a:e3:08:fe:e6:5c:63:b5:d1:fc:1d:fd:
7a:b4:53:a6:06:a5:cf:d4:fb:e9:1b:70:54:ad:1e:
52:86:80:37:9a:ab:51:37:30:62:ae:73:81:88:9c:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9A:9F:CD:73:A8:81:E0:17:6E:A7:69:22:91:85:B9:3F:A7:C9:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/aa4140b9-d517-3137-af28-c99d398bcdd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:ad:7b:c5:fc:37:22:61:e9:95:dc:c1:f0:af:35:00:68:9b:
e8:9b:55:6f:a3:e0:fc:84:0f:96:7d:90:0d:04:45:cc:44:66:
bb:81:63:df:1e:4b:a7:bb:58:45:30:a6:7b:73:c4:42:61:b3:
a8:de:55:92:1c:e8:94:fb:af:c3:c0:f9:09:83:25:35:a6:ec:
bc:8f:45:5c:1c:2e:d4:b2:ba:8d:bb:c2:7f:80:af:f2:e9:cf:
e5:f4:c2:98:53:1b:f2:ef:86:21:a0:78:0a:44:88:41:13:fa:
5c:da:28:ab:45:80:e8:7d:9c:01:f6:06:4b:ba:33:a8:c8:0e:
e2:56:bb:14:84:ad:53:c3:bd:d1:cf:70:f3:ab:53:6a:d2:15:
f1:23:31:af:1f:49:42:b4:86:6c:df:26:c3:6e:a9:f9:5c:d4:
31:49:c3:44:62:9c:07:d4:3d:59:c1:bf:c7:7a:ea:0a:37:0b:
95:4a:7f:6f:e8:60:47:00:6a:e2:da:a3:04:9c:9a:27:fd:ed:
ec:9b:48:dd:7b:31:c8:67:fa:24:8d:9a:73:e8:7e:59:35:06:
52:e9:6d:f6:f8:0d:c5:be:cd:1f:a1:ab:03:f4:55:dd:33:92:
c4:8e:2a:e1:1a:04:15:24:a4:21:cc:cf:79:25:ab:b6:7b:06:
b3:a8:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 16:58:13 2024 by rpki-client on console-ams.rpki-client.org