Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c81d6554-092f-38a5-998a-d2c0b0264656.roa
File: c81d6554-092f-38a5-998a-d2c0b0264656.roa (raw, json)
Hash identifier: 3KZHxbsn2gYZgGghqy8CIUyVeVJBu4JBqdjs06eP+Ac=
Subject key identifier: A7:68:76:73:92:D4:BE:24:02:B5:1D:BB:7F:0C:41:66:AF:AD:3B:89
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A21895E92534617B7C557F0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c81d6554-092f-38a5-998a-d2c0b0264656.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:21:89:5e:92:53:46:17:b7:c5:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bb58be88-d0f3-49d5-aad7-a8accc091b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:ba:87:81:eb:8a:dd:87:64:ce:20:c4:8e:
be:55:13:f0:e9:3f:fa:24:91:7f:c4:ec:ab:6a:d7:
c9:0a:7f:35:89:e6:fc:e6:91:d9:a3:18:6e:3d:0b:
1d:d9:70:7d:15:1b:a2:9a:fc:26:6f:60:02:3e:1e:
08:28:0c:4f:e0:f9:12:2f:3f:49:70:93:e9:3b:46:
80:c5:fb:06:9c:8b:23:5b:db:eb:72:be:a1:b6:0c:
83:ed:9c:0b:19:c5:15:3b:bc:a2:8c:30:8d:e2:08:
fc:08:71:cd:d8:d5:0a:fe:1a:c7:25:40:2d:dd:76:
94:4f:53:a5:20:d1:0c:03:6d:99:8d:26:ed:7d:73:
3b:eb:2c:07:79:36:ca:af:d3:24:e8:01:91:3f:2e:
3b:f5:c1:06:93:e2:74:0c:29:b6:6f:a3:e1:fd:73:
1e:87:6c:54:77:ce:a6:6b:90:32:9f:c7:fb:04:4e:
83:20:40:8e:d7:a5:53:ca:c1:26:2a:92:f6:34:4c:
67:61:4c:2b:32:15:e7:27:a5:d2:cc:33:69:40:4e:
14:f5:b5:d5:da:4a:d0:8b:ff:26:74:db:f6:e0:4c:
68:7b:73:75:b6:05:91:ef:8f:45:45:a2:9a:74:8c:
65:a1:62:98:01:44:a9:b7:1c:5d:1d:f0:17:1b:b1:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:68:76:73:92:D4:BE:24:02:B5:1D:BB:7F:0C:41:66:AF:AD:3B:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c81d6554-092f-38a5-998a-d2c0b0264656.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ff:f9:87:bc:fb:63:0a:86:de:f6:83:38:f1:88:1b:f3:de:
fc:8a:3f:1f:38:a5:6b:6b:5d:d1:b5:08:30:0a:ef:02:0e:ab:
0c:a8:51:6a:f6:be:3f:51:5e:82:80:69:7c:4b:75:03:19:1e:
81:ba:9c:73:71:0e:b7:68:76:3a:4e:2b:a2:bd:a6:5c:a5:6e:
5f:6c:72:e1:05:99:28:2d:e7:4e:56:d8:20:15:1a:e3:08:ec:
61:21:69:47:7b:15:f6:89:90:5c:9f:c8:5e:28:84:f3:56:c3:
6b:68:33:ff:3c:45:06:7d:11:d6:c2:1d:47:1f:7d:b3:c4:a5:
62:67:da:c9:c9:5d:39:71:02:22:10:30:9e:10:51:6e:b3:fe:
f2:e4:b1:15:31:ec:d2:36:64:16:f6:bd:9b:15:90:c1:d0:19:
19:72:25:16:f8:f7:cb:16:1f:f2:1a:a9:6b:e3:94:10:67:38:
10:42:f6:ba:97:c5:be:8b:27:48:ca:8c:72:4e:0b:e8:8a:ce:
7d:65:48:ba:ba:4a:3e:fd:6e:8a:16:91:e5:67:8e:46:d0:14:
2d:85:b1:8a:7e:cf:df:f3:a2:2b:89:fa:d3:b1:dd:47:07:77:
0d:73:f2:50:9f:56:2a:23:44:f5:84:f8:dc:91:82:78:ca:f0:
92:d9:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org