Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/036e37e5-a717-34fd-bbfe-89e2aff28baa.roa
File: 036e37e5-a717-34fd-bbfe-89e2aff28baa.roa (raw, json)
Hash identifier: Dk/i7e4vIxgV0hDN4A2p0WafVkqH9I3X2miqBggng1Q=
Subject key identifier: 4B:09:01:8B:BC:54:EF:ED:53:D4:B3:32:7F:0B:EC:50:46:E0:55:F0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309F9E649993DD9DBDA2DB680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/036e37e5-a717-34fd-bbfe-89e2aff28baa.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:57:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:e6:49:99:3d:d9:db:da:2d:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=be32d728-9211-47fa-b05a-87f0b94b92f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:df:b0:86:62:47:ab:13:12:d7:3b:7b:ae:
3d:0e:20:62:5c:c7:56:a1:dd:af:e1:02:4c:07:ae:
61:ce:fc:89:ad:4e:62:74:7a:cb:ef:74:26:10:35:
63:d4:90:4b:c6:62:ca:40:12:eb:68:bf:91:09:b9:
b0:39:dd:1e:5b:36:2f:da:7a:17:bd:74:78:a0:1b:
7f:1e:4b:4a:fa:34:a4:93:38:34:8d:08:7b:77:69:
4e:71:1f:d7:34:d6:53:d1:35:12:99:bc:c1:25:f9:
3a:9b:c1:33:a8:95:1f:a5:37:b6:8e:e7:2f:71:1e:
d0:2f:9c:e3:28:fe:8e:b1:33:f1:50:c6:87:24:94:
c1:da:4e:83:a4:95:cb:43:7c:12:c1:66:73:78:22:
f7:bf:56:99:72:4d:2a:b1:b2:53:a5:40:ab:3a:5a:
f2:86:74:44:e6:27:c1:fb:ec:fa:1b:6a:08:ec:27:
80:9c:9c:1f:fc:74:4f:74:6f:9e:10:22:bf:14:86:
f7:21:85:2b:41:ab:e7:f4:08:4f:06:4e:75:8b:d3:
24:5f:5c:0a:e0:88:b7:22:15:64:64:8f:69:07:27:
46:db:4f:4f:84:b1:e6:26:44:e5:4f:ea:a7:4c:c4:
49:51:30:34:a0:aa:dd:53:70:62:62:93:6d:3e:21:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:09:01:8B:BC:54:EF:ED:53:D4:B3:32:7F:0B:EC:50:46:E0:55:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/036e37e5-a717-34fd-bbfe-89e2aff28baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:a7:fd:2a:4e:3c:24:f4:38:1a:9c:24:07:b7:49:10:43:da:
99:dc:f8:af:52:69:5b:ea:57:89:9a:17:40:1d:70:3c:f9:d5:
1f:48:84:a1:1f:c0:76:38:aa:e1:61:60:07:29:31:79:c5:31:
3c:a9:27:18:58:63:73:10:54:01:50:a2:03:75:21:1c:12:fd:
f4:44:84:3e:68:75:27:b3:ac:9b:c2:59:e8:48:c4:96:56:34:
c3:76:ba:d7:17:49:d6:50:ce:a2:87:f7:cf:16:bf:4f:a2:f2:
d4:d2:5c:77:c0:24:ec:50:dc:a1:63:ce:6e:76:b4:fc:47:fb:
70:cb:85:dd:8a:55:a9:9f:12:65:4c:ca:48:bb:ba:da:d4:7d:
d6:7d:a2:cf:99:68:2b:3e:0c:2e:bd:5c:17:2e:07:be:f4:3a:
b2:d1:81:c9:77:7c:4c:11:15:c0:4a:92:0e:a4:05:49:e6:b4:
26:f1:4b:71:08:dd:82:3c:70:40:dd:cf:18:8b:05:44:3f:b9:
7c:c7:7e:8f:a3:9f:af:07:64:d0:b6:0e:be:57:24:97:72:01:
96:4f:41:5b:80:63:e5:c8:35:cb:e1:51:f6:73:88:74:d5:6e:
35:1e:d9:ef:b8:6c:13:a9:11:1a:83:05:ed:74:78:0a:62:fd:
19:06:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:22 2024 by rpki-client on console-fra.rpki-client.org