Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a9daa7fd-c911-31c7-a7c9-a46099fd2df2.roa
File: a9daa7fd-c911-31c7-a7c9-a46099fd2df2.roa (raw, json)
Hash identifier: BofFsiJpZo8Njy5oWEWC/z8gTFIFPtaJ8oWzCBqgAEc=
Subject key identifier: EB:AC:CE:56:E6:C0:10:6F:F1:92:09:1B:E7:50:DF:AF:83:7C:F7:BE
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A16925C00D84FE4B2851AEA
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a9daa7fd-c911-31c7-a7c9-a46099fd2df2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:92:5c:00:d8:4f:e4:b2:85:1a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=86da05a4-47b0-4e14-ae94-2950457fd828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:05:e7:7d:ff:e7:aa:ea:c2:5d:e7:92:22:
47:f8:c6:dc:3d:a8:ed:4d:2a:84:f3:e4:6c:b9:dc:
84:0a:5a:e9:b9:0c:4f:56:c2:ec:08:ed:ec:29:34:
c2:7a:75:e4:f7:98:41:29:5d:a8:c0:82:ce:32:92:
ed:73:3b:5a:c0:be:f0:a1:30:65:fe:8a:24:34:18:
49:c5:89:37:17:dd:34:55:ae:e8:3d:a2:df:af:fb:
34:b3:7c:e7:92:3d:f4:53:6d:bc:e8:ec:b5:75:27:
c2:f2:23:34:f4:91:9a:b4:c1:6f:b3:96:4a:c2:88:
19:0f:38:4e:8b:2a:4f:94:ea:ca:82:9b:f2:0b:f0:
22:a6:53:e1:c4:aa:81:51:fb:37:47:1b:c9:0e:a0:
78:90:71:73:b6:16:1a:63:16:7a:eb:96:f0:a0:e7:
f5:66:70:70:1d:9b:6d:0d:73:f3:e7:ad:c6:0d:40:
6d:a4:55:06:18:ca:60:50:51:73:e6:ce:74:d1:c3:
7b:d2:8f:65:c7:63:c9:c1:66:30:33:11:f9:9b:28:
c1:40:5d:d2:45:e3:8b:d4:2e:bf:f6:7a:e4:5e:4c:
4b:fe:e7:ac:88:b4:23:6f:12:11:18:84:5e:c3:c7:
fd:3e:82:4a:c0:85:a8:eb:3c:cd:37:4e:ec:54:45:
7e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AC:CE:56:E6:C0:10:6F:F1:92:09:1B:E7:50:DF:AF:83:7C:F7:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a9daa7fd-c911-31c7-a7c9-a46099fd2df2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:07:b6:8d:82:50:c1:c7:e6:c2:b7:6d:dd:7b:31:18:54:2e:
9c:d0:22:00:5f:d8:a6:b6:91:a1:09:7f:29:00:69:dc:6f:95:
00:7f:fc:b7:98:c0:35:36:c9:bc:17:33:59:fe:46:47:9e:51:
00:56:6b:e4:69:7e:de:40:31:14:47:b5:38:f2:92:4c:06:09:
e9:21:7e:7b:7e:f8:2f:47:b4:06:e9:0b:b4:61:aa:b1:f3:53:
48:f0:3a:42:5f:ad:b9:33:26:ff:62:90:ee:c3:eb:cf:70:1e:
2d:ce:ca:c4:08:4c:95:e6:1d:02:ef:ae:1f:ca:02:24:97:56:
4c:ae:3d:f6:9f:e8:4c:e6:45:9c:88:d3:e7:e5:98:b7:d0:2a:
82:9f:4b:e2:39:0c:ae:70:64:fc:bc:be:22:e5:23:8e:f4:f2:
32:f8:55:0d:76:b5:66:41:16:ea:e7:cc:95:f7:a6:15:df:fd:
51:86:53:94:51:8e:57:f8:33:95:c0:12:c3:e5:8e:c6:60:91:
28:66:7d:97:a2:c2:f7:9d:4c:02:69:46:91:ab:0a:c5:71:41:
97:a9:2a:87:71:49:1e:d0:76:2d:7d:23:d6:09:1f:7c:35:28:
1c:ba:e2:de:63:1d:25:a9:97:87:1e:3c:02:08:9c:34:5a:e0:
b2:70:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org