Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/83ef2fb3-c328-35dc-9829-c5df44c0185f.roa
File: 83ef2fb3-c328-35dc-9829-c5df44c0185f.roa (raw, json)
Hash identifier: 1p400XPOFZcsUWsjhTdkE39SXyG9f8uFBEWc96E4NIs=
Subject key identifier: 24:F0:41:3B:FD:BA:A3:96:29:7B:DB:A1:E6:AF:93:2D:0C:52:F4:46
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A10CB57AE327FAA73E04860
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/83ef2fb3-c328-35dc-9829-c5df44c0185f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:10:cb:57:ae:32:7f:aa:73:e0:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=48c6c876-bdb9-408f-aa60-17d9c57f6d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:60:cd:3c:f4:a9:e8:71:9c:88:39:ac:36:bd:
53:c8:61:30:96:68:ba:61:36:4c:13:78:16:46:f9:
86:e4:ad:9d:2b:95:5f:32:5d:d1:89:71:c1:01:59:
4d:b9:3d:6d:12:c4:8b:12:ab:7a:50:95:86:31:29:
48:89:d4:84:1f:38:c5:63:16:ae:c6:bd:08:82:f7:
37:3f:7b:c0:50:6d:87:71:5c:f3:b2:7a:6d:82:39:
bd:9d:f3:33:b7:7c:33:25:dd:b9:1d:da:23:dc:ce:
2d:41:53:ab:19:28:37:81:e3:a9:71:6e:d7:dd:d1:
0f:df:f0:07:e4:6d:ae:ad:6e:3b:34:50:69:01:94:
68:09:09:56:dd:11:af:22:5d:8a:32:bb:51:c1:a4:
23:e6:b2:45:3b:4f:9f:3e:d1:f7:fc:50:28:f4:44:
9c:2f:d7:d6:13:b4:12:44:6f:fb:4e:b7:12:00:f7:
c6:9d:cb:48:20:17:f5:55:8a:bf:d9:b1:66:22:b0:
bd:fb:3f:da:4a:0f:4c:ce:fb:bf:a6:13:ef:c8:9e:
8c:14:43:9f:ca:f1:ed:33:0d:9a:39:b8:8d:08:c7:
a6:eb:4f:5a:75:0c:c2:f3:67:5f:bd:7a:c5:d8:fd:
a6:7d:78:a0:f5:26:60:10:ea:c6:a2:33:91:76:7c:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:41:3B:FD:BA:A3:96:29:7B:DB:A1:E6:AF:93:2D:0C:52:F4:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/83ef2fb3-c328-35dc-9829-c5df44c0185f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:4d:95:65:e3:8b:ec:6c:85:36:e1:1a:20:01:c4:66:ab:95:
5c:28:83:30:eb:cf:ca:46:9f:ff:e9:71:31:fb:20:cd:4c:26:
cd:a7:3e:64:8a:6f:82:84:4c:3e:38:52:1b:83:e7:f4:91:aa:
ba:23:e3:69:ee:3a:37:1d:8d:18:88:81:f3:fd:ef:dd:bd:53:
14:46:f6:4a:86:50:bb:85:7f:ea:03:84:1b:a5:b0:7a:29:ee:
ef:c5:29:31:36:98:35:e5:39:cf:a0:98:5a:23:cb:8f:98:13:
5a:c3:9e:61:15:50:9e:34:b2:13:c8:bb:a9:60:1f:1e:33:a6:
57:f6:42:38:0d:6f:58:11:ac:9a:e0:fb:3d:be:3e:c4:08:e0:
cd:f0:0b:2f:f2:50:3b:c3:c0:15:cd:a6:2d:7c:2b:96:0a:34:
6b:e6:1b:cf:6d:91:8e:f5:bc:c7:85:9b:d6:1d:47:a3:7a:28:
25:48:22:12:95:53:fe:f9:40:3e:f6:31:89:a4:09:ac:6c:a1:
11:8e:d2:7f:48:18:6d:14:a8:f7:e5:8f:ec:99:f3:d9:49:9c:
84:6b:14:e4:10:8f:41:bc:17:76:0b:3e:14:32:06:58:d3:2b:
e1:8c:27:91:99:ab:f1:96:97:15:bb:b0:ac:e9:4a:c2:e1:73:
e6:da:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org