Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aa28a19-4afc-355c-afbd-d3612667dcec.roa
File: 3aa28a19-4afc-355c-afbd-d3612667dcec.roa (raw, json)
Hash identifier: vzPWEYnMXB+X9EDkvMpFxwGvl6l+wzmGFL/PUjG8kC4=
Subject key identifier: D7:02:A9:D3:9E:39:AB:91:16:94:F6:56:C4:9E:52:47:64:67:05:46
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309EB66E9C11E70BF09657480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aa28a19-4afc-355c-afbd-d3612667dcec.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:66:e9:c1:1e:70:bf:09:65:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2f57692e-156c-4ad0-94ab-2e6303ed9d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:b7:26:40:5a:b2:0a:ce:e5:16:9a:70:c5:
43:cd:b0:79:f0:5a:03:63:ae:c6:9d:01:3d:f3:1a:
5d:9d:8b:f3:e4:f9:e2:d5:7a:ba:a2:93:6e:38:17:
67:46:c4:ea:ad:a5:82:97:32:3c:da:d7:6b:9e:be:
f1:3a:41:75:17:2f:bc:36:41:66:d9:46:c4:0e:3b:
76:0f:a0:9a:b7:4d:43:57:5b:7a:ea:7c:85:66:ee:
f0:d0:3d:c5:f9:fa:08:79:d6:dd:59:49:4e:4d:80:
9b:f4:0b:02:32:64:e0:f2:b3:f4:0e:37:9e:58:2d:
9a:7b:fa:bd:0b:e7:eb:9d:85:13:87:2b:43:07:03:
57:48:97:de:7d:9a:b4:f5:0d:b7:0f:27:f7:ae:89:
fd:ce:fc:69:3d:fa:8f:b8:49:48:4b:71:52:3a:6e:
90:85:f7:71:9c:8a:46:da:62:69:f3:ee:c3:88:de:
50:5e:85:d0:f9:be:51:7d:bb:a1:a9:cb:e8:16:3d:
c2:20:24:46:99:8b:d8:1e:0a:df:b8:5f:7d:18:df:
76:52:2b:1c:3b:0c:f1:50:13:b9:3b:ac:de:42:12:
99:1d:17:69:77:4f:b6:18:34:c9:ce:8e:83:68:9f:
04:96:ac:bd:da:0d:3c:95:6b:ff:86:fb:04:9f:ba:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:02:A9:D3:9E:39:AB:91:16:94:F6:56:C4:9E:52:47:64:67:05:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3aa28a19-4afc-355c-afbd-d3612667dcec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b3:bf:7e:d0:e6:5f:94:f3:f9:ed:85:c0:29:89:d6:c6:14:
fe:9e:46:09:ab:44:ac:c6:32:65:bc:19:cc:7e:77:a4:19:84:
e1:be:b9:41:cc:a9:67:b7:78:f6:2e:9c:a7:af:40:eb:32:1c:
45:43:80:b2:74:b2:c4:00:d6:99:ca:0b:fc:3b:e9:8c:c1:2e:
14:2b:a3:4a:bb:a8:08:6e:4a:d4:3e:3f:71:a2:a4:cb:0b:0e:
49:55:c5:67:ca:e5:9f:65:c4:46:ad:94:85:47:4e:10:59:0d:
5b:94:5d:65:f5:c9:9f:4b:3c:ed:90:be:0e:b7:02:47:a2:bf:
12:75:e7:32:ea:a4:f3:40:6e:dd:9d:ca:fe:7f:1c:2a:e6:1d:
a1:f5:9d:a9:66:f6:f5:65:ac:3c:da:c2:a1:a0:88:18:8c:d1:
79:9c:2f:00:b4:73:84:7a:4a:17:4e:da:7f:4f:40:6f:7e:71:
ce:f0:3a:a8:42:64:c5:7a:4f:1b:13:75:9c:20:6d:82:4a:dd:
1d:f2:be:d8:98:33:8c:cd:fd:05:97:ee:5c:53:32:39:9a:38:
83:51:c5:20:07:b3:da:9b:54:8c:4b:c1:92:f6:73:12:ac:f4:
4e:7d:2d:6c:f6:11:07:8f:75:d2:47:85:74:12:0e:fd:4f:3f:
8d:c5:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:31 2024 by rpki-client on console-fra.rpki-client.org