Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b88f139-3392-3a7e-bcfd-7d04826de3a7.roa
File: 2b88f139-3392-3a7e-bcfd-7d04826de3a7.roa (raw, json)
Hash identifier: Y7Ba+Ef4FH9KkQcnwTPuLImGQz2TGmKntZIWiIGsAlk=
Subject key identifier: 9A:E9:7B:F7:50:BD:DB:39:B5:AB:22:AC:D4:9F:3D:BE:B6:8D:CB:68
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A06624F5DE4A1C8893FD380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b88f139-3392-3a7e-bcfd-7d04826de3a7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:62:4f:5d:e4:a1:c8:89:3f:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a29165c0-58f1-4c6c-8161-51b46c8f13d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:23:34:8c:65:24:1d:e0:84:16:aa:bb:20:30:
23:a6:9e:82:85:fc:81:a8:d8:1c:e3:2a:a7:85:91:
d5:57:35:e5:5e:cd:28:c7:75:bb:93:c5:79:65:16:
c1:50:a3:19:8f:92:17:65:96:a8:56:51:83:69:5c:
28:80:ee:b6:63:bf:d2:08:57:4a:51:3d:13:3f:73:
0c:4e:cf:92:c6:8d:9d:9b:f9:6f:31:18:11:30:dd:
2a:8d:d9:6e:ea:c3:c9:8c:31:16:3e:21:8e:28:0c:
92:99:d2:c1:cd:7e:5b:dc:cc:b2:ae:c7:08:bd:e2:
82:48:97:d5:df:bf:ce:9d:d6:cd:6c:6e:b2:b2:01:
68:0b:f8:19:77:44:c9:63:93:78:c3:57:7d:ae:f6:
86:d5:2f:c0:6a:55:0f:9e:41:36:15:04:93:3b:ab:
0d:04:ea:ff:1b:44:09:c4:a2:c5:19:40:6f:cc:7c:
72:89:e8:e2:74:de:2e:08:eb:49:c6:83:a1:db:0d:
bc:a7:3e:b0:79:b1:89:ac:6a:ee:bd:67:f4:50:d8:
f2:71:46:c2:36:bf:bc:c6:b7:4d:2e:8d:d3:4c:4c:
eb:7f:4d:04:05:98:4a:e9:50:ce:c8:92:a9:de:87:
f8:40:3d:63:65:f4:89:be:ee:4c:50:a5:17:07:d3:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:7B:F7:50:BD:DB:39:B5:AB:22:AC:D4:9F:3D:BE:B6:8D:CB:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b88f139-3392-3a7e-bcfd-7d04826de3a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:5d:e4:ca:4e:83:d3:af:3c:7b:31:22:86:07:f9:1c:19:cc:
95:87:25:ba:91:e9:e1:15:56:31:2d:00:12:fe:da:9e:53:79:
28:20:11:61:87:e7:5c:c5:84:5b:ce:48:18:2b:53:15:01:51:
1b:85:b2:a9:36:11:f2:77:b8:4f:5a:85:7c:f9:f4:95:8d:e3:
84:24:70:2e:59:09:98:24:77:77:92:be:f1:f7:56:1f:39:2a:
e6:f7:78:4f:99:94:b4:d7:d3:bd:5d:b9:89:d8:d2:e7:6b:6b:
6d:b8:62:64:ae:b3:0b:4f:0c:69:aa:b3:fa:97:15:94:ce:3c:
7d:27:2c:7f:f1:48:bc:85:fb:e4:f1:8b:d0:2c:52:17:e7:89:
5a:e7:02:56:67:6d:83:31:d2:4a:e3:9a:ba:14:d1:fc:e5:67:
92:6f:c3:bf:25:98:fb:9d:7b:1a:23:55:ac:1b:7e:50:1d:b2:
53:e1:b0:83:d2:b0:b6:45:05:fe:3b:7f:ba:da:e8:fb:0a:1a:
b8:7c:24:a2:87:28:60:5e:a0:f3:0c:b9:ba:2f:c3:f8:b7:e4:
32:36:af:43:aa:86:29:0f:00:a6:43:a0:f1:ba:dd:ca:7b:6b:
2a:50:43:43:1d:64:ee:18:08:32:d9:6f:96:52:c4:b3:55:5f:
16:ec:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:29 2024 by rpki-client on console-fra.rpki-client.org