Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35d5d9ee-1595-3985-adac-f71b72178e1e.roa
File: 35d5d9ee-1595-3985-adac-f71b72178e1e.roa (raw, json)
Hash identifier: 5jcYDSKMCizhHhEAdokkszior9Y7U8IS8/aP9qdDQ+U=
Subject key identifier: D0:4A:16:0F:84:D5:75:C1:2C:A0:F0:40:ED:94:51:5F:7D:21:B6:57
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844A3A12143BCC2BA1967470500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35d5d9ee-1595-3985-adac-f71b72178e1e.roa
Signing time: Sun 21 Jan 2024 12:00:00 +0000
ROA not before: Sun 21 Jan 2024 12:00:00 +0000
ROA not after: Wed 04 Jun 2025 04:00:00 +0000
asID: 36383
IP address blocks: 104.135.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a3:a1:21:43:bc:c2:ba:19:67:47:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 21 12:00:00 2024 GMT
Not After : Jun 4 04:00:00 2025 GMT
Subject: CN=382277af-d07a-484c-bb0e-11118a25f480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3a:34:b0:b3:95:ed:3c:3f:bf:bf:2e:b2:92:
81:9a:f5:d0:3b:77:9e:db:87:a2:40:0f:b9:84:9f:
05:e5:08:42:ff:1d:00:8a:69:38:bc:b2:ae:3b:bc:
dc:f2:6b:19:d4:03:3c:02:59:76:f6:43:3d:12:e0:
7f:e1:e3:6f:b2:45:0b:98:0a:83:8d:2e:94:fa:26:
c2:42:a8:27:e8:92:a2:62:d1:d1:d7:dd:98:95:94:
02:73:58:15:66:13:9d:7e:5f:7a:93:7b:84:e3:aa:
6d:c8:8e:3e:0d:8e:8f:c2:a2:88:4a:f0:69:e0:14:
1a:ae:57:6b:18:1a:2b:3a:53:d9:d2:26:a3:60:9a:
fc:36:d7:0e:7e:17:64:12:ac:11:8c:fe:59:bc:45:
bc:33:e1:55:e3:4d:36:73:3c:d0:7f:c1:7e:ae:43:
51:b6:56:ec:b5:cf:ae:00:35:d2:88:c7:96:ce:12:
49:ce:b4:b3:5c:82:bd:ef:95:f2:04:3c:0e:39:02:
94:b0:3d:bc:c1:df:ba:3b:e4:49:09:8a:58:43:61:
43:95:d3:d3:04:42:c8:cc:3a:01:35:bc:81:fd:ec:
67:b3:a8:95:90:8a:6b:17:5e:bd:c5:19:72:54:df:
ec:d1:ee:5b:0c:12:29:0b:c4:83:da:01:0c:81:c1:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:16:0F:84:D5:75:C1:2C:A0:F0:40:ED:94:51:5F:7D:21:B6:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35d5d9ee-1595-3985-adac-f71b72178e1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:96:be:82:52:89:a6:68:cd:5c:fd:62:cb:6d:1f:2b:b0:89:
dd:93:70:68:33:d2:13:b9:b0:c1:9b:82:10:d1:89:91:02:a9:
c7:f1:ee:c2:f1:37:82:55:0d:89:77:0a:13:de:54:e2:7e:52:
bf:3f:f8:db:e4:7b:64:a4:78:bd:1d:85:18:a3:63:be:19:ed:
c6:b1:f0:a2:7e:6a:24:11:de:66:2f:44:fc:d9:2c:d7:ae:99:
51:86:4f:0e:04:22:09:b6:e3:f7:78:9b:58:db:2d:a0:6a:ac:
44:de:3f:52:be:a5:b2:14:76:4f:43:ea:ee:c6:0b:48:91:ab:
0e:d7:47:a6:7e:74:60:0e:9e:25:08:4a:78:3a:7f:fb:c0:f5:
65:e2:3b:b1:ea:6e:73:35:ba:18:23:73:fa:d3:b1:0e:7a:72:
41:b3:d4:ca:0d:c2:11:d4:8c:fe:1f:20:9a:81:1b:44:a4:31:
c4:33:40:9d:af:ff:85:e9:c4:9c:58:b0:e7:e1:db:0f:98:51:
5f:68:a6:44:ea:12:4d:5e:21:0f:35:a5:ef:37:6a:32:07:c7:
59:18:44:10:06:f3:0e:f4:86:87:00:ec:2b:6f:f5:9e:3e:37:
31:74:89:15:bf:25:dc:78:b1:72:39:44:33:83:0b:50:ce:63:
03:29:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:01 2024 by rpki-client on console-ams.rpki-client.org