Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b24f5c5-d2fc-3ffc-a679-3659205dcc41.roa
File: 3b24f5c5-d2fc-3ffc-a679-3659205dcc41.roa (raw, json)
Hash identifier: 0yynbCQI1EMdLQuMxqF1StUD0xumoZVy6jb8+tQ9sKI=
Subject key identifier: C0:A4:AF:EC:6C:33:DD:30:DE:08:08:C5:5A:FC:D8:70:8F:5B:33:72
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A1FCA60A8B5784321490B00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b24f5c5-d2fc-3ffc-a679-3659205dcc41.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.132.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1f:ca:60:a8:b5:78:43:21:49:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6b17adf9-ff33-4715-b96a-7d6fbd4cbf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:70:d7:14:25:39:95:c5:31:7e:a6:92:0f:
67:d0:63:48:b1:72:a4:38:64:c2:ad:c8:17:39:8f:
67:52:85:0e:d8:19:14:8e:3e:e4:06:b4:d4:6c:5d:
ba:a1:66:c4:5a:61:79:31:23:75:27:54:f5:72:6a:
9c:33:dc:50:69:22:95:9a:88:64:c5:19:40:39:31:
c1:38:d2:48:56:e1:dd:4c:5e:7f:b0:f1:ac:fa:36:
5f:80:9d:29:fb:d0:36:62:7d:97:05:cf:b2:2e:83:
ae:0e:60:69:f0:94:16:36:29:f8:02:68:71:57:91:
ff:15:38:f4:24:62:80:45:72:28:88:7a:cd:8a:92:
b6:86:ef:6e:31:4c:d1:c0:61:87:9b:79:98:33:51:
a7:64:f3:f2:e3:a5:b0:b1:3b:14:4d:8a:10:c6:5a:
e3:20:59:96:5a:61:ce:e1:6f:e8:52:80:1d:97:a3:
5e:2e:de:80:14:64:5d:43:b2:b0:9d:73:bd:93:e0:
64:1d:d5:d8:4d:f9:59:6d:41:d9:28:1c:db:a3:76:
4c:60:19:61:53:ee:8b:b7:2a:37:10:d2:ab:35:c4:
c6:9d:b5:5c:27:ad:53:94:63:34:d3:04:e0:3d:c4:
73:94:12:96:e3:a7:fb:b5:3d:cc:75:f4:58:00:22:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:AF:EC:6C:33:DD:30:DE:08:08:C5:5A:FC:D8:70:8F:5B:33:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b24f5c5-d2fc-3ffc-a679-3659205dcc41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:ed:5b:b4:e9:3d:06:c7:85:66:54:de:ad:e0:ba:5c:ac:55:
71:c7:81:55:87:86:9f:df:8e:a4:a8:75:0e:e2:98:f7:a1:ca:
09:e1:c5:88:f6:54:20:3c:bd:17:69:98:84:d9:01:98:b5:83:
e0:97:be:c7:04:19:64:48:5d:b1:62:1e:3a:f8:2a:fb:6a:62:
05:cd:e9:fd:6e:8a:48:fe:64:18:9d:73:da:5c:50:14:d0:03:
d5:9a:61:f3:4b:e4:18:78:ed:62:d8:1d:ba:81:cd:59:bf:a4:
83:6e:fa:95:c9:e7:d0:bd:98:35:14:51:e0:4c:ce:e5:9b:a5:
07:aa:82:fa:a7:71:d9:97:7e:58:fb:2e:07:ad:00:98:9d:66:
20:74:5b:e6:7c:81:72:4f:b3:d7:14:70:07:64:e0:7d:8d:b8:
6f:a7:42:0f:b1:78:3c:63:ba:9b:f0:14:20:b2:02:65:8e:c7:
a3:d3:cb:d2:c9:c7:85:d6:e8:d4:23:6f:a9:f8:73:84:e8:a8:
96:a2:1a:a7:e7:e2:ea:10:b5:83:2f:be:72:81:82:d3:ca:bf:
05:0a:ed:3a:ca:4a:40:6c:d2:7d:bb:e1:76:fd:2e:9c:e8:83:
86:6c:a3:57:89:ab:4d:7b:0f:4f:27:e2:7b:3e:66:61:11:ac:
cc:c0:a8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:26 2024 by rpki-client on console-ams.rpki-client.org