Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/86a38905-0485-31a7-82ee-ca316747dc72.roa
File: 86a38905-0485-31a7-82ee-ca316747dc72.roa (raw, json)
Hash identifier: I8y3IBZKOPdXvSV+Nvu2oziaR8P7A2zbJD94/bg2dDw=
Subject key identifier: 95:00:55:B1:35:9C:7B:F5:64:37:B5:A3:61:87:EC:28:5F:14:34:06
Certificate issuer: /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial: 010D0C9F432858471F725D64812CD1512A371990
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/86a38905-0485-31a7-82ee-ca316747dc72.roa
Signing time: Fri 06 Sep 2024 09:40:26 +0000
ROA not before: Fri 06 Sep 2024 09:40:26 +0000
ROA not after: Thu 05 Dec 2024 10:40:26 +0000
asID: 7719
IP address blocks: 74.122.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 14:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1f:72:5d:64:81:2c:d1:51:2a:37:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
Validity
Not Before: Sep 6 09:40:26 2024 GMT
Not After : Dec 5 10:40:26 2024 GMT
Subject: CN=81d19dea-b75f-41f1-83a6-7985ddfec746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:d4:6d:de:3e:9d:b6:eb:70:9c:e3:c8:6e:
5a:b2:5b:58:38:b3:c9:27:23:95:14:fc:1d:26:7e:
e8:2e:51:d1:32:37:53:db:84:eb:e5:5d:2d:51:51:
6d:24:74:57:c4:da:98:8d:c1:ca:21:ca:a7:72:02:
d0:ec:7d:0a:bc:7c:02:da:52:75:3b:40:18:9e:09:
82:81:11:2b:19:5c:02:25:78:64:89:f6:76:11:d8:
88:1e:8e:9b:49:26:d7:1b:9c:ce:1e:09:9d:7c:79:
0d:05:db:82:8c:b2:3f:4d:85:a0:ed:e3:e6:1f:d7:
6b:fe:29:6e:97:8f:22:92:b9:dd:f8:ac:c8:40:a2:
f2:0f:0f:a3:0a:6a:47:6f:fb:ef:e6:7c:dc:98:57:
94:33:9a:d4:b9:ee:b9:ef:c9:f3:dd:60:1c:a8:e3:
e8:35:3c:f9:88:38:62:ef:82:33:a1:a8:ed:0f:0a:
16:f0:ef:0c:35:8e:0e:1e:d2:d9:26:98:e7:f2:cf:
27:c7:2a:1d:48:76:4e:61:d2:42:cc:da:a3:e5:1f:
5e:cd:74:71:0e:ee:67:6e:5f:7e:0c:b5:6c:11:58:
03:09:2c:e3:d6:ab:0c:19:04:a6:c1:ed:ca:2d:db:
3b:6a:6b:9a:48:21:f1:4d:04:3c:0e:3f:99:60:cc:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:55:B1:35:9C:7B:F5:64:37:B5:A3:61:87:EC:28:5F:14:34:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/86a38905-0485-31a7-82ee-ca316747dc72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
X509v3 Authority Key Identifier:
keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
sbgp-ipAddrBlock: critical
IPv4:
74.122.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:f1:c3:b0:1f:52:73:b0:3b:a2:13:96:88:fc:bd:60:14:82:
ac:c6:03:96:2b:97:8e:76:a4:ac:71:3e:0d:c8:27:52:de:eb:
90:65:14:f0:41:e0:9c:8e:29:61:b6:72:71:65:cb:6b:5a:15:
4b:fb:01:dc:62:01:52:eb:bc:57:19:a7:a3:ad:f4:a3:86:e4:
93:f3:6c:dc:fa:c8:82:59:b2:82:65:6f:36:37:48:5a:8f:f8:
db:19:b7:fa:80:e4:7f:29:95:26:87:d4:d2:50:c9:14:08:b8:
e3:cb:f4:1b:3b:aa:63:19:37:d5:a4:79:2d:e1:67:4c:45:85:
3e:19:b3:dc:4e:fa:5a:ba:a7:11:11:5d:5e:c7:09:4c:15:ee:
43:4e:81:a3:bd:95:35:3f:eb:29:58:94:b8:3b:23:0c:fe:ed:
66:45:b9:9a:72:c7:ae:83:bf:71:5d:8a:d4:85:df:a7:df:3c:
3e:75:3b:ed:fc:b6:4a:37:a6:49:5f:74:85:38:e7:4a:96:ac:
60:c4:26:af:e9:3c:65:4e:33:e2:3c:4e:e2:7e:95:95:89:62:
60:5e:32:49:f2:7e:81:f1:1e:7c:a5:14:a9:fa:35:61:18:42:
7e:14:c8:2f:d3:84:5c:ed:72:66:6b:93:a8:a7:af:2b:9d:ad:
2f:f8:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org