Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ba7501f-67a9-3feb-97af-7512e17775b6.roa
File: 3ba7501f-67a9-3feb-97af-7512e17775b6.roa (raw, json)
Hash identifier: G9QbrK3qrZmUdW0aSlwGPDI4Etkc7rcqfIrclkwhMoQ=
Subject key identifier: A8:FE:AE:72:84:7C:4D:00:84:9D:9E:0A:CE:23:3F:4E:39:FB:23:FC
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844720B3DC048AD86BC93977940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ba7501f-67a9-3feb-97af-7512e17775b6.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0b:3d:c0:48:ad:86:bc:93:97:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=1481a782-da1a-4e0f-83c3-63cfd5612d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:e4:a3:e8:b8:fe:ee:79:f7:4f:b8:70:64:
b6:2d:0d:10:ac:13:8d:84:ab:0e:7b:11:1d:ab:6f:
77:80:2a:d3:9e:58:20:0c:33:ff:d2:7a:f3:fc:73:
38:17:99:01:66:52:0a:a1:69:54:81:84:bf:93:7e:
16:22:ea:76:d8:a1:9b:bd:d6:9b:c8:cb:b0:5c:06:
7b:70:31:72:03:0c:4f:b1:72:7d:4f:fc:9e:11:64:
3c:0b:ed:99:ee:91:57:4e:f4:d6:26:42:bc:93:46:
a8:52:b2:2c:e1:fe:1e:55:97:75:de:c6:c6:6d:09:
72:3b:f7:32:1e:f5:88:5b:c3:a3:d3:75:c4:88:9d:
f0:a5:57:50:bf:b4:e4:9e:d1:b6:8a:21:03:bd:7a:
36:0c:c3:3a:3b:e1:6f:eb:e4:2c:33:d8:3a:ee:00:
45:68:5f:5b:a5:c5:47:51:9a:0d:37:2b:b3:9b:7f:
10:32:5b:62:7c:79:10:fa:11:86:35:0f:48:b8:81:
46:ec:0c:3c:80:96:50:cd:e4:09:11:94:46:b3:a1:
dc:4c:22:df:6a:74:54:c8:73:73:8d:da:88:f7:2e:
26:d6:ac:99:2c:06:40:c3:c9:c7:30:d4:93:c2:ca:
6d:91:cb:3b:03:83:89:06:79:c8:cb:b3:1e:32:11:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:AE:72:84:7C:4D:00:84:9D:9E:0A:CE:23:3F:4E:39:FB:23:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3ba7501f-67a9-3feb-97af-7512e17775b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:e2:3d:8b:60:90:89:e2:18:c4:bd:4f:75:56:99:1d:ea:83:
5f:69:bf:50:53:01:bf:10:45:58:f8:0c:09:ac:fa:4c:45:aa:
6f:a7:9f:1c:9d:c1:f8:65:4b:11:0b:25:5f:fb:1e:6d:8f:27:
c2:a4:6d:8a:a6:d1:e4:28:68:b0:09:cb:71:74:40:15:d0:c7:
72:3c:46:9f:23:e9:37:c6:c7:2a:f3:43:f8:de:59:ca:58:b0:
23:96:ec:ad:a1:70:3e:b7:8f:88:07:17:ce:fd:55:6f:89:c3:
7d:e8:a7:aa:82:4d:68:3e:08:cf:d7:ce:f6:5e:31:d0:26:66:
13:72:f2:20:f3:5f:e4:9e:98:ab:b2:54:91:e1:c0:f3:d8:e2:
f8:36:f8:2a:70:b1:5d:06:cc:8f:db:ce:4a:de:f1:bc:e8:29:
53:88:8a:ba:b4:f2:65:4b:cd:f4:d5:e1:72:13:f3:7a:5a:39:
7c:44:bb:1e:74:40:0c:1b:cd:95:d9:e4:48:c0:2a:e3:d6:35:
9e:ff:de:25:66:38:b4:db:8b:eb:f5:ba:e5:04:78:a4:37:df:
a9:ac:f8:13:51:b7:c6:59:77:ed:d3:ac:89:7c:f2:a3:b4:14:
95:04:4e:c2:88:78:d7:53:cf:b0:26:5c:49:70:9c:92:c3:89:
2a:36:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:25 2024 by rpki-client on console-fra.rpki-client.org