Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/8fe048e2-3b53-3bf5-b286-7e60ac69db3f.roa
File: 8fe048e2-3b53-3bf5-b286-7e60ac69db3f.roa (raw, json)
Hash identifier: 8niHlqsgUE97tzFKUDRGowC4aw6Rj6QDJlwJCc7g0Wo=
Subject key identifier: D2:15:6E:8A:5F:48:82:91:D3:CD:45:EA:0F:9A:04:71:A6:32:93:0F
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285842C4894FEE3C09BC294492EE00
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/8fe048e2-3b53-3bf5-b286-7e60ac69db3f.roa
Signing time: Fri 04 Aug 2023 01:00:17 +0000
ROA not before: Fri 04 Aug 2023 01:00:17 +0000
ROA not after: Thu 02 Nov 2023 01:00:17 +0000
asID: 55154
IP address blocks: 104.223.126.0/24 maxlen: 24
104.223.122.0/24 maxlen: 24
161.129.69.0/24 maxlen: 24
104.129.28.0/24 maxlen: 24
104.223.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c4:89:4f:ee:3c:09:bc:29:44:92:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Aug 4 01:00:17 2023 GMT
Not After : Nov 2 01:00:17 2023 GMT
Subject: CN=9bdf4198-a0d5-410b-a373-dbdb9b5e5790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5c:a0:da:00:ca:28:da:d9:6f:80:cb:68:e9:
98:87:3b:fe:da:fa:92:cf:33:67:ae:f2:41:ef:58:
88:cf:35:18:99:4a:2e:6e:09:a0:e9:65:ae:6e:35:
39:4b:21:83:b5:47:21:0a:5c:39:26:74:74:da:cf:
16:f5:5a:67:a5:62:23:9d:65:43:e3:5a:c7:b3:50:
42:7f:e1:cc:57:c3:f7:dc:86:98:7a:b2:35:4c:87:
28:13:1a:38:30:45:47:17:6c:3b:0a:cd:33:78:6e:
aa:13:24:00:80:57:07:06:30:4b:13:7b:e8:3b:55:
23:8f:18:2c:85:ea:da:88:59:10:81:8c:bd:b1:4b:
76:ce:7c:82:cf:15:8c:8b:b9:b9:0d:df:ca:20:81:
01:de:1f:27:6a:74:51:4e:67:84:2b:61:68:6f:8d:
01:51:a9:67:c2:85:c2:22:cf:72:f2:58:b4:43:5e:
6c:60:1d:30:a6:1b:90:81:f1:38:fb:e9:77:12:4f:
c0:11:50:a2:aa:31:f5:55:e4:fb:a9:39:6a:d5:76:
95:c8:2a:e1:32:e8:5d:03:3d:58:66:d4:f1:47:d8:
f6:e5:0e:bc:eb:64:47:27:38:0f:5c:f1:18:f9:cf:
53:15:d1:79:88:44:34:b9:e8:75:ab:7f:35:b4:5d:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:15:6E:8A:5F:48:82:91:D3:CD:45:EA:0F:9A:04:71:A6:32:93:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/8fe048e2-3b53-3bf5-b286-7e60ac69db3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.129.28.0/24
104.223.12.0/24
104.223.122.0/24
104.223.126.0/24
161.129.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:31:a4:4d:01:87:30:09:90:3c:88:7a:2e:0a:22:bf:2d:48:
db:8b:d6:e6:b3:db:99:32:57:6e:ed:39:5f:b2:a7:b8:9f:e0:
6e:12:b9:ef:c4:9d:28:12:84:f3:41:9f:76:bf:68:61:09:16:
fa:c3:58:a8:34:3d:e0:46:44:03:7b:7d:81:d1:9a:e1:cd:ad:
79:3c:bd:3b:9a:e5:55:5e:51:75:d1:8e:03:b9:19:d4:fa:a5:
6d:08:2d:1f:e1:1a:00:70:3f:1d:17:3a:d5:d9:17:a6:62:57:
b3:e4:10:3d:56:83:18:13:89:34:87:d2:5a:e6:80:4d:db:00:
33:84:98:1e:ec:c0:2a:78:f0:b7:fa:73:96:d3:31:f1:f9:14:
54:72:8a:47:7b:99:8a:a0:1f:14:5c:e9:10:a1:f2:40:a8:51:
70:bc:c3:f3:63:49:e6:6f:e7:aa:4f:40:d7:21:ea:a7:92:26:
f6:89:c7:5d:3a:b5:f7:34:db:f2:aa:2c:15:b8:2f:6a:a6:2e:
b6:dc:98:4c:b4:66:00:5b:cb:e5:5d:70:6c:c9:74:ed:67:6c:
61:72:00:8d:5c:67:36:3f:58:13:01:dc:fa:c3:da:1a:a1:cc:
8b:18:13:2c:96:2a:e2:92:7c:3d:69:40:64:83:7e:df:fa:2e:
17:d8:ab:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 29 03:41:25 2023 by rpki-client on console-fra.rpki-client.org