Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/faefcd34-d57e-3384-b4c7-41d2a36c5495.roa
File: faefcd34-d57e-3384-b4c7-41d2a36c5495.roa (raw, json)
Hash identifier: YLq/wYaZDzy+2z8mAULLrbzRRgF2GmhukjYD4ivMWAo=
Subject key identifier: 21:F3:E3:11:0D:31:95:9B:5A:25:5C:8E:41:1E:86:93:38:7A:C7:04
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F4328584137873EC02F9058A1ABBDB3C0
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/faefcd34-d57e-3384-b4c7-41d2a36c5495.roa
Signing time: Mon 13 Mar 2023 12:00:00 +0000
ROA not before: Mon 13 Mar 2023 12:00:00 +0000
ROA not after: Sun 15 Jun 2025 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:37:87:3e:c0:2f:90:58:a1:ab:bd:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Mar 13 12:00:00 2023 GMT
Not After : Jun 15 04:00:00 2025 GMT
Subject: CN=5c9836e6-6ae6-41e7-80bd-1f84228432d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:22:64:e6:20:b8:86:a1:33:86:17:8b:d6:
7b:b1:8c:cc:f9:30:2e:ee:e9:d3:a6:40:cf:1e:57:
ff:a5:03:4a:d5:9a:94:e4:fc:1d:4f:27:68:e1:71:
94:4c:57:bc:2b:5e:15:f5:54:fc:ca:86:98:ea:98:
de:07:87:b5:c5:c0:93:31:cf:29:2e:6a:70:95:a4:
92:5e:44:88:3e:9d:12:19:7b:4d:0d:81:41:a4:51:
13:7c:69:79:d5:58:7f:8e:84:03:e4:b1:bf:ea:ad:
b6:26:ce:04:bf:c4:ba:d9:ba:a6:89:6b:75:46:79:
a5:16:7c:b9:b5:15:68:ea:b9:2b:3b:53:e1:0c:be:
e9:47:a4:8b:6a:53:b4:15:d0:b1:38:d4:35:58:aa:
b6:5f:00:db:3a:91:cf:42:3e:ed:96:e2:d5:6a:d9:
b7:49:70:52:3b:49:56:b4:b7:30:a1:44:46:87:38:
7d:0e:26:2d:a5:1e:9c:48:3e:f5:43:35:48:6f:d8:
05:1e:69:67:41:5a:3b:5c:ac:cf:eb:90:65:c7:92:
53:f5:a1:1c:5a:54:d1:d9:70:a7:8f:0f:b2:4a:b9:
35:3d:d1:3b:7a:c1:7f:fc:aa:43:90:31:73:1e:ee:
a6:5d:b1:b3:f9:62:b6:a3:81:00:91:92:12:e7:b4:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:E3:11:0D:31:95:9B:5A:25:5C:8E:41:1E:86:93:38:7A:C7:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/faefcd34-d57e-3384-b4c7-41d2a36c5495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:57:ad:f3:02:f3:74:37:84:39:ca:54:f3:03:99:be:ba:5c:
4f:78:c8:c3:2f:80:c3:b0:72:42:dd:09:db:33:9b:8b:21:ea:
4f:c7:2e:82:af:66:1f:28:53:cd:2f:93:17:f7:02:90:e1:d3:
fb:77:74:d0:d2:ca:99:45:56:96:5e:93:96:44:d4:80:96:7c:
b9:35:47:68:c7:28:0e:32:4b:03:b1:74:98:53:3c:2d:19:b0:
68:62:b5:a1:fb:d1:76:07:8c:06:4d:69:08:f9:b1:22:9b:3c:
a4:e7:96:1c:ee:4f:a3:b9:af:bf:21:37:a5:db:7c:6b:40:69:
7c:50:00:6e:78:15:9d:ef:88:cb:0b:fb:c6:4f:ea:59:16:a6:
a6:92:ad:ec:5c:2e:0f:62:74:44:90:cf:aa:40:38:7f:06:21:
c8:70:47:1a:3b:e5:48:8e:80:42:2d:84:90:ba:f7:f6:c8:5d:
c8:80:e5:f0:30:3f:c0:47:92:a2:4e:78:35:cc:13:ea:63:88:
45:ef:ff:7d:55:2b:03:e9:e0:dc:a7:ee:7c:cb:b1:a7:77:f8:
72:64:65:5b:6e:df:a1:e1:6d:ef:e1:80:3a:ba:5c:c4:2a:2b:
3a:cf:b1:3e:09:ab:3a:5a:97:09:54:41:c3:10:96:1f:1d:18:
d0:33:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:23 2024 by rpki-client on console-fra.rpki-client.org