Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1cbb3485-8544-3828-ab55-04bfc044aaa9.roa
File: 1cbb3485-8544-3828-ab55-04bfc044aaa9.roa (raw, json)
Hash identifier: EGDIuaXfXzQSKQa/+Jzk/BRbkTu4G/zeIllDoUBTCIA=
Subject key identifier: 78:C4:44:0C:3B:EE:03:28:91:F1:EE:FE:74:E9:F8:88:EA:89:93:D0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A042BE48AF05D6E0CFD4800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1cbb3485-8544-3828-ab55-04bfc044aaa9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:2b:e4:8a:f0:5d:6e:0c:fd:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2deaf08b-1e55-4f28-b109-65b564a0d483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:12:e9:32:6e:9d:64:32:31:90:ac:ef:33:
b4:41:53:8b:d0:8e:bb:e6:ae:df:66:bf:06:1e:8c:
dc:15:50:fb:c2:86:0c:e8:9e:44:c2:44:66:ac:fe:
65:3c:64:1c:7f:38:8b:cc:3b:c2:63:98:3e:d8:fe:
60:db:a2:9a:3a:cb:f6:40:48:d2:6b:fd:d6:8b:62:
c6:66:a0:e5:fe:4a:3d:29:f1:c4:f0:44:89:09:05:
b5:b1:3a:2a:cf:1e:59:7f:c1:c4:17:03:29:f8:7e:
eb:7a:95:47:df:cf:ac:d6:c9:57:43:6c:df:17:b5:
ce:5c:5d:47:51:c0:2d:9a:9b:23:ed:24:a3:c3:22:
e4:24:1e:4e:31:5b:e3:0b:9d:0d:cb:13:2c:41:7c:
62:b2:35:4d:17:82:d9:8b:a7:2b:70:16:e2:2a:82:
5d:a7:70:d3:e7:00:49:db:f5:79:d6:e0:f2:7a:f4:
95:a8:64:1c:de:d2:7b:30:9c:cb:8e:f8:42:6c:a5:
88:76:93:e7:e2:d1:66:e1:1c:c3:bb:a6:c5:e0:05:
47:23:d4:a9:73:4d:8b:50:95:47:b1:d0:ba:c9:64:
24:35:6c:5f:17:5b:a6:60:53:ed:4b:a9:48:12:54:
2e:88:bc:b2:bb:c2:de:1e:23:1b:74:dc:38:f6:3a:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:44:0C:3B:EE:03:28:91:F1:EE:FE:74:E9:F8:88:EA:89:93:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1cbb3485-8544-3828-ab55-04bfc044aaa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:49:67:6a:57:89:ae:c3:a7:c8:5d:d8:b2:56:9d:91:bb:42:
56:3f:b0:c2:26:13:77:c9:e0:95:3d:40:72:99:3a:d0:80:35:
c5:d9:c8:cf:55:c7:c1:5d:bc:94:4f:6c:21:91:66:7e:ea:a1:
e1:f0:f0:73:6a:ae:d0:f7:23:4e:17:b6:bd:fc:fe:3c:61:39:
2d:14:79:bc:fb:9a:79:de:ed:69:53:68:aa:d9:43:7f:76:ce:
38:1d:33:7c:fe:09:04:09:cf:9a:9e:c7:11:d9:85:9e:7e:3a:
75:c4:66:a9:54:9e:35:6c:48:5a:be:be:30:0f:00:f0:8f:74:
7c:d1:e9:25:48:ba:07:d8:dd:e1:92:39:d9:40:46:80:e1:4f:
77:8e:86:7c:8c:e3:5c:5f:40:a5:36:d1:34:a2:6f:68:48:a7:
15:bf:9b:fc:e6:58:4e:df:ec:62:a8:d3:e0:a0:e0:45:9f:fb:
ef:39:d8:e3:54:2f:a5:ed:d2:77:f7:97:31:c9:76:fd:c0:18:
b6:27:f8:41:48:bb:72:60:46:41:46:59:b6:72:54:53:2c:60:
7d:de:ef:53:af:c5:bf:8f:a9:50:20:68:e2:1d:f6:8c:35:60:
ea:f4:5a:53:91:e3:c5:04:b5:b4:e2:33:b0:65:e9:b1:02:ea:
15:69:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:23 2024 by rpki-client on console-fra.rpki-client.org