Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/736c63a8-4872-3750-abbf-14a6655956e0.roa
File: 736c63a8-4872-3750-abbf-14a6655956e0.roa (raw, json)
Hash identifier: w7yNLwCnkaSQSWqeY6E63QZmH8PCzcxkeNxnQH4sLdg=
Subject key identifier: 75:D4:92:D7:DE:27:AC:0B:88:C2:AF:AD:82:B5:F2:55:8C:2F:63:22
Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial: 010D0C9F432858424E60CC5462193AAC61D26D00
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/736c63a8-4872-3750-abbf-14a6655956e0.roa
Signing time: Wed 21 Jun 2023 12:00:00 +0000
ROA not before: Wed 21 Jun 2023 12:00:00 +0000
ROA not after: Sat 09 Aug 2025 04:00:00 +0000
asID: 9823
IP address blocks: 168.146.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 15:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:4e:60:cc:54:62:19:3a:ac:61:d2:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Validity
Not Before: Jun 21 12:00:00 2023 GMT
Not After : Aug 9 04:00:00 2025 GMT
Subject: CN=10389848-8bb4-4dee-a886-d4717d3e31dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:ae:c1:14:d5:8f:fc:8c:5e:1d:00:10:20:
d3:d8:83:3f:1e:13:f7:19:4b:86:44:5a:67:f8:70:
ee:34:aa:4d:bb:55:64:b3:9e:ca:bd:c2:04:ce:a5:
d0:cd:cf:b7:94:18:df:73:9f:92:b2:8e:66:9a:e5:
2c:57:5f:1e:36:69:44:0a:9c:38:2f:71:1a:a2:13:
00:47:dd:1b:ae:ce:07:19:0c:dc:ac:f2:51:1a:e3:
e5:48:85:2f:f6:00:0a:9f:e4:9b:34:2e:d5:42:e8:
d7:cc:dc:87:9b:92:79:c1:b2:d9:18:9d:80:95:e5:
3c:32:52:77:c2:5d:29:0a:67:84:b3:31:97:db:04:
f1:d7:9f:d2:c8:c8:33:42:34:f6:5d:7a:a2:ba:63:
8d:e7:f3:f4:2b:f3:fb:90:de:d4:d9:e6:ca:be:9a:
7d:c5:31:71:0f:31:42:b5:64:23:8d:75:c7:b3:a8:
43:12:2a:4e:26:a8:fe:f8:e9:67:80:32:8c:45:26:
ee:5f:ea:39:3d:9d:84:04:b2:a3:fb:b6:89:10:2d:
d5:05:ae:6b:6e:8b:4c:10:f0:b3:24:15:ed:82:76:
40:a5:3e:d9:22:fe:29:72:e9:da:f4:f8:5a:cb:c0:
64:e5:54:3f:31:f6:ab:5e:bc:9c:cb:31:05:36:3c:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D4:92:D7:DE:27:AC:0B:88:C2:AF:AD:82:B5:F2:55:8C:2F:63:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/736c63a8-4872-3750-abbf-14a6655956e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
X509v3 Authority Key Identifier:
keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
sbgp-ipAddrBlock: critical
IPv4:
168.146.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:b7:bc:12:2f:0d:7a:fc:98:f8:7f:0b:39:c0:f9:98:cd:a1:
8d:c7:24:7e:97:69:ed:41:48:71:0a:e8:14:f4:4a:db:4f:e9:
1c:ed:ab:e7:fd:65:47:5d:d5:77:61:85:69:71:d9:3f:ad:1a:
98:dd:e5:b6:ed:a6:89:0f:56:c7:2f:18:f4:68:66:27:9d:7b:
6f:e4:80:d8:ad:c5:dc:c2:ee:8b:81:36:51:70:f0:ea:7a:00:
5b:9a:13:9d:4e:3d:38:06:93:30:40:0e:40:9b:81:9b:53:38:
f5:85:c9:08:b5:51:ba:b0:f3:fd:be:0d:d1:4c:87:74:8d:4f:
9a:cf:fb:26:76:a4:76:d6:b2:5e:31:ac:fc:ed:6f:3c:d6:d2:
99:3f:98:1b:7e:60:74:35:26:03:c0:2e:d4:27:88:5d:df:69:
cc:99:0b:4b:03:03:9b:62:a1:30:ae:01:f8:4d:d7:39:79:31:
a9:01:c4:86:9d:7b:a8:31:1a:e0:1a:12:c8:c0:5d:55:ac:55:
0c:43:01:62:bf:b9:45:28:a7:17:f9:b8:83:90:71:25:61:75:
ec:dd:80:51:82:19:15:9d:be:cf:56:7e:41:e8:40:fc:78:a4:
63:57:69:f2:89:2e:e8:fc:2f:ea:5d:90:70:b6:a0:ac:b4:01:
44:29:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 20:26:25 2024 by rpki-client on console-fra.rpki-client.org