Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5fadf983-2189-3dab-8704-9ab198349042.roa
File: 5fadf983-2189-3dab-8704-9ab198349042.roa (raw, json)
Hash identifier: wLlBL9iz3wjfUkJnPJ90EYyDTguqUITZocDYya0c3+Q=
Subject key identifier: FF:0B:9B:9F:1B:60:4C:A0:2B:7F:12:5D:4F:52:9B:0A:9D:CD:1F:F6
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A11028A1591CC13704C20E0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5fadf983-2189-3dab-8704-9ab198349042.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:11:02:8a:15:91:cc:13:70:4c:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b1d8c3c8-db51-4295-87ff-0d656c9b6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:b1:f6:44:1f:f5:b4:8f:3e:83:90:a9:d6:
7e:24:cf:29:b7:0d:e1:83:27:7c:49:ac:43:39:4a:
d7:9b:f3:fe:0b:a5:78:00:27:63:4c:73:26:34:69:
2d:04:38:2c:ae:01:bf:20:24:4b:ad:a3:34:ed:1c:
4a:4e:91:93:ef:34:07:d3:95:f1:6a:69:6e:45:8d:
dd:86:94:9e:4f:1d:56:8f:e6:68:76:ba:ad:bf:1e:
46:4a:85:05:bc:db:6c:67:c2:b2:dc:d0:ab:de:34:
aa:0b:db:41:d3:1a:14:c9:68:d8:d4:6a:4e:d8:07:
ef:04:83:a3:9d:ac:e6:16:32:97:af:37:1c:e7:5a:
50:5c:4f:cc:bf:4a:33:a5:64:65:28:fd:98:29:9b:
13:45:6b:45:27:7e:b0:4b:1f:75:db:53:34:83:eb:
ca:ba:35:38:95:3e:02:b8:a5:27:3d:92:d4:f7:c6:
2d:7c:a1:a0:63:5a:fc:5b:d5:7f:36:1d:f3:50:1d:
ce:fa:f5:29:2a:55:6d:0b:85:0c:8c:55:38:44:eb:
dd:3d:8f:1a:ed:61:6d:79:2b:8a:54:f5:e0:2c:af:
de:21:63:9c:40:66:ba:09:60:16:28:31:5d:75:5c:
8e:e9:8b:36:a9:09:76:19:1b:0e:3d:21:dd:de:e0:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:9B:9F:1B:60:4C:A0:2B:7F:12:5D:4F:52:9B:0A:9D:CD:1F:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5fadf983-2189-3dab-8704-9ab198349042.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ab:8e:b3:4c:a3:fb:9b:2f:5f:6b:4b:21:f1:9d:db:df:5f:
68:72:8d:cb:73:f5:63:7a:43:ef:96:18:d3:86:35:2a:bb:0e:
f2:2f:87:44:8c:23:60:9b:b4:7d:5f:23:fd:4e:be:24:bb:55:
c9:3d:1c:31:60:3b:f0:d7:f2:5b:50:c5:17:2d:fe:b5:1d:00:
13:e6:1f:23:5b:53:1b:81:87:92:5a:a8:0c:c5:69:cb:9d:f4:
93:62:fe:ac:6d:2a:91:d3:54:83:75:d5:3a:99:de:d8:ea:9f:
54:71:d6:16:98:3c:75:58:16:d8:0a:96:41:c8:f1:2e:24:91:
f9:12:26:ac:0a:da:86:c6:9f:ee:0b:17:f2:5c:b0:38:e3:a1:
4e:13:a6:0a:e0:b2:49:13:28:1e:3b:d6:bb:64:9d:ab:86:6c:
82:b1:b2:bb:34:28:30:09:6d:1c:65:ea:91:60:3e:77:36:e4:
22:1f:3c:f7:bd:5b:6a:96:85:49:4e:ab:44:a1:01:73:68:7e:
ca:29:02:d5:86:c1:96:4d:e2:ba:8d:57:53:b4:1d:d0:77:67:
63:67:a1:98:64:b1:7b:5f:68:c7:2e:36:63:07:5e:b8:f9:dc:
18:cd:79:5f:1f:a6:5b:1d:df:82:2f:d2:16:4d:61:da:0c:bc:
91:66:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org