Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3320d6bf-d479-3ccc-ad5e-b604d3950506.roa
File: 3320d6bf-d479-3ccc-ad5e-b604d3950506.roa (raw, json)
Hash identifier: HklBL+7f0Vjj1O/tfIQ3iRTmMeofrirWkr8Jl4XsWxo=
Subject key identifier: CE:9C:25:E5:E4:64:D5:3D:F3:07:F6:48:7E:01:E3:31:77:92:5F:8F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A1C0E6DC906BE68E5EC5E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3320d6bf-d479-3ccc-ad5e-b604d3950506.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1c:0e:6d:c9:06:be:68:e5:ec:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c5d705f0-9a47-4c4f-9382-8397d9a624bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:73:da:35:fe:bd:a3:a5:4d:d5:96:0f:0a:
22:f9:23:e9:89:06:74:f6:50:06:2a:b6:c1:c1:6d:
9b:8f:fc:ac:01:cb:a3:af:3d:84:a2:f2:6e:64:30:
d6:7a:c0:08:4e:8a:ab:ab:32:bc:ff:57:bb:f6:47:
8a:2b:d7:38:ec:a8:15:ea:ec:99:c0:85:ce:28:b0:
0e:e4:b6:26:5c:6f:37:40:39:85:2d:0c:b6:34:63:
9f:ef:e9:34:b1:1f:ea:cf:dc:3e:cb:60:13:b0:71:
c9:aa:71:9c:7c:cb:ec:db:ce:21:37:25:a9:df:42:
09:7f:6c:37:2b:1a:2a:52:70:40:3d:e6:2d:2a:b9:
fa:59:80:85:fc:2a:7f:26:56:3d:a4:61:64:f8:9b:
3b:d7:2c:ef:02:7c:e7:fe:01:69:46:c1:a7:15:2d:
8c:41:f7:5a:3d:84:6a:d8:33:59:b1:78:1d:13:ce:
41:9c:a4:22:df:26:42:4d:d4:1a:e6:dd:c8:59:cf:
00:73:b6:7c:87:f6:90:d5:30:ca:97:a1:0e:b0:df:
61:ea:d5:a6:65:fb:a6:d6:dc:c8:ac:13:d2:81:64:
51:f8:40:3b:be:d2:20:aa:6b:10:a1:b9:66:e1:9a:
51:80:e2:87:24:f1:3c:50:b3:01:6a:98:de:0f:08:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9C:25:E5:E4:64:D5:3D:F3:07:F6:48:7E:01:E3:31:77:92:5F:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3320d6bf-d479-3ccc-ad5e-b604d3950506.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:53:14:79:78:dc:2c:26:c9:64:55:f2:b6:10:7c:25:7d:7a:
dd:7c:a6:94:e5:fe:af:86:6f:ce:45:8c:7b:6f:1d:b2:73:ed:
18:94:de:4f:4b:5d:70:23:5d:5c:a5:a5:85:32:77:d3:16:7f:
8f:a8:75:cd:e2:a9:30:42:96:8e:9d:de:c1:3a:77:d5:1b:5a:
a4:33:6c:c7:53:e0:c1:4e:0f:54:33:55:b3:2d:fe:ee:7c:14:
cf:9a:27:28:c1:95:84:a3:56:6d:10:b7:52:e9:ec:8a:34:32:
b6:58:48:41:22:d1:14:74:a2:56:54:90:d3:d4:f2:85:20:d5:
b9:b9:bb:b1:cc:7c:ba:a6:ee:78:ed:12:1f:8d:1d:8d:e8:78:
3c:fe:e3:9d:91:b3:02:30:0e:34:f6:54:fa:9c:3e:a7:1f:61:
fb:31:b9:0d:af:81:f0:86:38:a7:d4:c7:c5:6c:80:8f:9c:3c:
0b:13:79:0e:c1:10:26:0b:e2:94:77:f3:fa:ad:ef:50:5e:dd:
c9:c5:e8:bd:00:bf:af:17:40:74:f8:40:9b:38:b4:32:ad:bb:
89:b5:ca:09:5c:f7:a5:34:ae:2a:fe:b4:43:a3:a9:fe:8a:67:
0b:81:06:fb:6a:e5:1f:0b:46:69:8d:d1:77:f3:9b:af:00:a7:
e5:03:c5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:24 2024 by rpki-client on console-fra.rpki-client.org