Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01d56551-bb60-39f1-9b65-fb3795527752.roa
File: 01d56551-bb60-39f1-9b65-fb3795527752.roa (raw, json)
Hash identifier: JNkRFc38WCdkDK9mzpo+m11VS+AxyhUzeFzZwcqYjSA=
Subject key identifier: 88:25:9D:6E:E2:6B:D5:CA:EB:40:8D:1A:C3:72:77:21:4A:60:42:56
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A08BC52E97436AC0343C5E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01d56551-bb60-39f1-9b65-fb3795527752.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:08:bc:52:e9:74:36:ac:03:43:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=850fe21f-afd9-4dff-a656-672bccf40c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:f9:46:f0:6f:28:fe:8c:d9:e8:de:94:0b:
c2:a6:9a:4b:46:ae:37:ef:a1:4e:f5:9f:8d:43:28:
35:fa:8e:6b:74:13:3a:10:34:01:c9:34:65:65:41:
df:74:42:49:2b:a3:95:4c:14:28:7d:43:69:d6:bd:
33:01:95:90:3a:08:52:3a:46:c5:9a:47:12:8d:64:
c3:75:c2:31:e5:a9:04:43:c7:34:08:8f:19:04:ff:
ba:2b:0d:fb:db:52:53:0b:8a:ef:a8:f3:88:be:47:
b1:0c:2e:f0:e0:80:b4:02:dc:7b:43:4a:39:f7:ea:
c1:05:1d:0c:73:2a:1c:5f:0c:8a:6b:c7:ca:c1:13:
6b:ed:af:3a:55:91:77:75:21:d4:67:0a:91:7a:61:
09:4d:04:bf:82:c2:0b:0c:9c:03:0d:7f:f1:d0:b0:
4c:2c:03:84:7e:78:06:f0:4f:ce:04:bd:fe:63:4f:
c9:56:7e:07:74:b0:1c:2b:5f:4b:be:55:ff:d5:70:
17:ff:fe:2d:7c:b5:51:f8:5c:8c:29:38:66:b1:7b:
1e:e2:d6:b7:1e:78:70:36:de:94:b9:eb:73:bf:0e:
f3:6c:15:6c:f5:b0:b5:1c:b0:eb:2c:1f:16:52:3c:
c0:65:39:97:ff:5c:75:02:49:2a:6c:eb:f7:b0:25:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:9D:6E:E2:6B:D5:CA:EB:40:8D:1A:C3:72:77:21:4A:60:42:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/01d56551-bb60-39f1-9b65-fb3795527752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:d0:37:a2:ff:f6:68:68:6d:96:9a:fd:a6:92:12:d1:7e:88:
30:d3:84:1f:8d:5c:06:f1:01:03:af:61:6e:07:23:25:03:25:
1a:41:6c:69:44:d8:f0:90:21:59:99:e5:92:68:00:82:14:05:
c3:5a:0f:82:00:a8:86:90:78:36:3d:a2:4c:a6:36:2e:ea:c0:
18:08:fb:77:82:40:dd:85:73:36:6a:08:d1:2e:98:d7:2b:c5:
b5:ab:36:65:a5:1b:03:45:53:45:82:fc:3b:b4:5c:c2:ad:9b:
17:0c:a4:b1:53:f9:68:78:27:17:7d:74:4a:b4:15:26:6d:45:
16:94:7c:1a:2c:86:ca:09:f8:ee:4e:41:6f:8e:2c:bb:9a:2a:
01:8a:20:81:16:6e:11:ef:a7:e6:44:fb:3d:3e:ce:82:46:88:
d6:2d:aa:d9:da:ae:e1:be:df:db:62:15:56:11:96:8e:53:09:
50:69:54:cd:8e:65:26:9d:45:da:33:f2:1a:e9:bb:92:f7:6d:
d0:6f:8c:ed:16:a2:84:a5:cc:a0:84:1f:9f:37:d9:3f:d3:a1:
97:fe:4a:2e:d2:b0:a8:ee:74:aa:7a:71:52:b7:e4:0a:2a:52:
d9:d2:6e:53:6a:38:d2:34:c5:00:78:60:db:30:27:45:88:16:
92:d6:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:23 2024 by rpki-client on console-ams.rpki-client.org