Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a673bfdf-b935-3e00-9456-7d7e2a15155a.roa
File: a673bfdf-b935-3e00-9456-7d7e2a15155a.roa (raw, json)
Hash identifier: 4Uqg/vA4gem7DEmXVRuZhbyFXL8mAypDMw6oSR++HnY=
Subject key identifier: AC:F7:90:C5:E0:3A:44:EA:D7:DC:E2:96:5F:97:74:73:77:11:D2:51
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A23696BCF079F3E3A522FA0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a673bfdf-b935-3e00-9456-7d7e2a15155a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:69:6b:cf:07:9f:3e:3a:52:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ec35d83e-d246-4a3e-9f2b-f792cbf5299e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:2e:37:0b:93:d3:15:68:38:04:36:01:ef:
78:31:bb:51:dd:ac:d4:d0:34:34:53:a0:45:b2:e9:
33:cb:b4:d7:32:1c:90:c6:6b:29:38:c5:5e:e3:44:
19:b2:b6:e1:64:41:57:ba:ac:67:c0:c6:10:ae:e5:
c9:55:42:4e:73:3e:b5:31:bb:e5:99:42:8a:3c:0e:
81:cd:d7:6f:a4:1c:20:58:a0:20:9d:60:cc:11:80:
87:64:9c:8e:a5:6a:f9:5c:88:7a:25:c9:0b:4b:f5:
1e:d4:f9:39:0e:e1:a1:8a:d6:bf:aa:15:75:72:24:
98:d5:dd:d1:e4:59:32:c1:ee:fa:f1:bf:4e:39:16:
63:b9:1e:74:a9:d2:c5:d6:6f:dc:7c:97:62:e9:93:
19:32:e0:fc:c5:03:f5:b2:3e:7e:c1:da:21:71:7e:
35:8e:e4:3f:0e:9b:53:2a:3c:3b:e7:4e:61:46:90:
c5:b9:57:cd:49:dc:0c:93:2a:62:8f:ef:a9:b4:4e:
ba:d6:ca:39:70:a3:66:2c:e4:9c:f6:9a:cc:84:a0:
43:bf:06:16:be:b7:cd:bd:26:5c:b3:85:76:fc:d9:
e3:79:3c:72:f0:62:0e:67:d5:13:78:e6:da:2b:90:
c9:6d:f3:53:bf:29:b1:68:33:b5:75:0c:46:48:81:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:90:C5:E0:3A:44:EA:D7:DC:E2:96:5F:97:74:73:77:11:D2:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a673bfdf-b935-3e00-9456-7d7e2a15155a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ed:8a:6a:8f:ea:a7:f2:ac:7e:f1:80:5f:b9:13:c0:0e:5e:
1c:d9:e8:ad:00:89:e9:22:66:35:c5:2b:92:96:6e:66:a1:3d:
65:6e:73:a7:e4:c8:77:f8:c2:f3:1f:86:55:be:0f:c0:93:ef:
6b:29:b2:66:10:5b:ee:d3:85:9a:2f:7c:d7:cd:c6:a9:8d:3a:
b4:ae:14:a0:5a:e0:46:54:47:c6:8e:83:aa:75:23:b2:c1:b2:
c6:41:07:2c:2e:27:15:24:bb:5c:c2:d3:cf:40:4d:e4:d3:36:
20:88:1b:1f:23:ad:8e:a1:bd:d4:96:87:0e:be:c2:25:f6:28:
24:49:9b:6d:10:12:b6:7a:8f:1d:13:1b:e8:dd:75:54:0b:f0:
44:54:b9:dd:32:0d:1b:f9:bf:16:99:c9:44:3c:eb:60:a8:fe:
7a:09:00:e3:cb:99:4a:c0:b9:17:33:82:d1:52:c3:9f:ed:56:
b9:e5:2a:db:76:4c:71:07:db:1e:be:0b:16:78:a6:97:e1:9a:
10:a2:a7:14:83:2f:40:da:99:58:02:6a:47:bd:2e:4d:3e:83:
83:27:98:82:e0:23:ce:3a:91:7d:dc:39:f9:a3:ce:9a:90:de:
cc:93:ec:1b:a4:cc:21:fa:bf:6a:02:ec:1b:c2:21:4d:da:e8:
a7:ea:1a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org