Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3708ab56-5b74-3dbc-b64f-9605fd0ad896.roa
File: 3708ab56-5b74-3dbc-b64f-9605fd0ad896.roa (raw, json)
Hash identifier: eAkLVeCCcSJC7vPEYGQ2LnREw7M2zabqSPqRgsiLu2I=
Subject key identifier: 91:BA:6E:97:D3:99:01:B1:1F:8A:8A:36:E6:31:9F:2A:D1:3E:9C:80
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858412C7A4C3B636DE46A75462A20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3708ab56-5b74-3dbc-b64f-9605fd0ad896.roa
Signing time: Thu 09 Mar 2023 12:00:00 +0000
ROA not before: Thu 09 Mar 2023 12:00:00 +0000
ROA not after: Wed 11 Jun 2025 04:00:00 +0000
asID: 41264
IP address blocks: 104.135.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:2c:7a:4c:3b:63:6d:e4:6a:75:46:2a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 9 12:00:00 2023 GMT
Not After : Jun 11 04:00:00 2025 GMT
Subject: CN=5cbedc60-fcbe-44ef-bc9f-6fa5f8d3ddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:8b:48:23:e4:31:22:94:87:1c:14:ab:72:
75:d7:42:dc:20:24:55:cc:00:f4:30:d9:24:cb:bf:
23:e2:32:ba:89:fd:e3:1d:72:1b:e5:92:25:11:04:
36:7c:b7:75:66:f6:01:57:ff:65:97:65:d6:bb:aa:
74:11:e8:21:d3:76:66:56:a1:70:a9:30:b0:3c:e9:
5c:93:e5:62:81:59:2c:4f:5a:b0:e6:27:57:6a:87:
e4:47:53:21:6b:b3:e2:d3:27:36:f8:95:29:3d:02:
d9:0b:1e:f3:22:c0:c2:f5:93:21:8d:b5:68:47:77:
a8:b3:ce:3a:fa:8b:73:34:2e:e5:59:7e:ed:1f:bc:
0d:c9:59:22:d8:ba:f8:35:35:15:5d:d6:8b:7a:4c:
0d:e9:3c:02:6f:7d:a3:29:e2:c7:1f:48:4a:ff:95:
4b:82:14:4a:3e:a7:a3:b1:fb:e1:2b:da:41:ea:15:
62:cf:5f:7c:75:08:d8:b3:67:e6:e0:c9:df:13:17:
bd:56:97:9f:18:dd:26:41:81:70:d0:ee:79:13:40:
31:f4:a6:c1:20:45:bc:76:2d:55:07:51:ad:2e:2c:
16:1a:2d:43:d6:6f:ac:b9:05:f4:ee:2d:f4:28:2e:
c5:82:f8:d4:19:e0:4e:40:64:39:87:2e:1f:22:39:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BA:6E:97:D3:99:01:B1:1F:8A:8A:36:E6:31:9F:2A:D1:3E:9C:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3708ab56-5b74-3dbc-b64f-9605fd0ad896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:91:54:d9:0b:46:e6:ac:f5:e8:58:6e:59:e8:5e:21:3a:61:
b7:52:5e:6f:07:1a:c0:71:23:03:18:da:8d:20:a6:22:dc:eb:
0a:80:e5:8f:4d:29:51:39:8b:b5:92:ad:b6:2c:f7:34:dd:cb:
56:50:54:4f:fe:42:21:08:c2:90:4a:61:2c:79:81:20:fb:35:
98:ca:9c:20:06:b5:05:44:f7:91:46:18:95:c1:b4:c6:47:be:
f0:f5:31:0c:5c:bb:9e:e0:f3:31:52:3b:27:92:87:92:9b:7f:
2e:68:86:a7:bd:91:8e:5d:99:89:58:16:1f:09:c2:cf:74:37:
8c:9c:1f:5b:51:b6:19:bc:e6:c5:42:d8:5e:8c:c0:63:e3:89:
db:f6:41:fc:83:1a:c2:a7:79:10:69:95:fa:56:ae:63:2e:f0:
d0:d3:23:37:ff:16:3d:23:0d:90:ba:6b:df:17:57:38:3f:9a:
71:a2:ec:1e:b1:3e:99:fc:49:14:d0:e9:e6:92:c0:b6:d8:bd:
1f:1c:7f:0a:86:b3:64:70:e0:6d:d2:77:f2:73:ec:56:e6:74:
6d:7d:67:b1:34:15:b8:e0:0c:5b:d5:64:ee:be:39:6a:db:2c:
67:81:54:b8:9a:54:9e:8e:86:f9:50:52:b9:91:07:60:50:5d:
d7:6e:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:25 2024 by rpki-client on console-fra.rpki-client.org