Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/070b882f-ab3d-371b-9df2-240c13f0681e.roa
File: 070b882f-ab3d-371b-9df2-240c13f0681e.roa (raw, json)
Hash identifier: ejDmH+v6ROqXB4wPdNS7TR+/tHi0Ubg9es2mBFk2vlA=
Subject key identifier: 42:64:1D:C9:92:42:94:6B:6A:CA:3E:28:A5:1E:7B:D4:B3:31:32:9B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A04650F247CD9D50DB66980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/070b882f-ab3d-371b-9df2-240c13f0681e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:65:0f:24:7c:d9:d5:0d:b6:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b98887e7-dd31-44e5-b246-b42b392ca5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:2a:fa:cf:68:9a:b7:05:74:57:75:61:5a:
52:13:fd:ee:86:e1:05:8d:6e:8c:f2:20:46:2c:7b:
f7:27:a5:25:d0:93:43:15:7c:2e:65:25:3b:6b:fc:
e3:e4:4c:76:35:e3:ef:b9:6e:27:67:3c:f3:68:08:
69:71:1e:25:e9:ed:ff:7d:87:2a:36:21:dc:70:50:
be:52:17:7a:07:0c:ce:cf:ce:fd:f0:39:d4:90:1e:
dd:dd:b8:ac:b1:c8:67:73:cd:83:72:71:29:7d:84:
87:6d:33:d8:5a:2d:62:56:e3:53:91:9a:0a:e8:45:
77:ac:87:27:db:5b:b6:03:25:26:ea:74:9c:9b:7c:
1e:01:e9:79:bc:82:76:fd:22:d0:05:69:66:8a:6f:
87:f4:dc:a8:e0:99:74:ef:00:9d:94:69:d2:2b:7b:
f8:b9:c8:29:9a:ef:3c:7d:88:7b:6a:5d:98:5c:cd:
b5:01:c7:6a:6d:18:b2:50:96:45:b8:7c:48:e5:11:
75:02:29:fd:06:37:60:67:ca:34:e6:94:1e:e5:81:
52:cd:56:df:22:1a:70:f1:7a:39:a1:98:ee:52:7b:
73:df:42:e6:7f:09:c3:37:7e:e7:ba:bb:ad:13:3b:
d5:e2:d5:ef:9a:01:b3:3e:62:20:af:0b:77:73:1e:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:1D:C9:92:42:94:6B:6A:CA:3E:28:A5:1E:7B:D4:B3:31:32:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/070b882f-ab3d-371b-9df2-240c13f0681e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ea:6c:b7:82:af:eb:08:b5:95:6e:ae:d4:17:a5:43:fa:72:
85:b1:3b:c6:4d:84:82:c6:ad:0d:2d:3f:d0:f9:89:e2:cb:9f:
b6:31:c1:0d:6c:b7:89:f4:97:5d:d4:83:5e:6a:3e:11:9e:84:
ba:7e:46:30:57:dc:ed:21:f3:cd:7a:0b:d8:8b:a0:ee:60:fa:
16:99:48:72:39:50:cb:96:ce:3a:6c:13:ba:22:d3:e4:11:8d:
39:e2:60:69:90:df:96:22:98:b2:b3:70:fe:43:1a:47:b0:c2:
2f:2c:80:31:89:a4:d1:d4:73:a1:08:7a:b2:55:45:4e:94:63:
a9:25:fe:00:3d:2b:b1:40:1e:00:24:23:47:82:54:79:bb:f8:
63:b7:b7:69:43:30:a6:2f:24:76:1c:40:4c:11:56:7c:c1:32:
f1:df:44:33:3f:ba:1d:86:99:2a:e4:da:b2:67:e0:07:f8:ca:
a4:94:df:a7:17:59:7d:00:23:ac:ef:b6:15:9d:77:30:f3:43:
94:51:91:41:01:85:45:61:bb:26:62:0e:64:63:8a:22:08:06:
cb:37:05:dd:5b:78:de:c5:81:2d:be:72:3b:65:9a:b3:df:e1:
a5:42:ec:77:fb:13:9e:5f:2d:49:65:e7:d2:5d:bf:58:d6:f3:
b8:db:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:24 2024 by rpki-client on console-ams.rpki-client.org