Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3f72217d-212d-3f3c-8c4e-810641e0f42a.roa
File: 3f72217d-212d-3f3c-8c4e-810641e0f42a.roa (raw, json)
Hash identifier: QSFO8x/Jke3hLB1oefQTuAsu0/76hE8DBurgA2b0ofs=
Subject key identifier: 31:5B:46:02:AC:39:79:51:9D:BE:5D:BC:3B:E1:5B:14:A8:09:C8:1D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844720A65DA5CD6FAF3C5FAA4C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3f72217d-212d-3f3c-8c4e-810641e0f42a.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:65:da:5c:d6:fa:f3:c5:fa:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=869aefa0-8ad2-41f9-9fb1-58ce7c789f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:e0:ce:c4:7c:5c:c3:e2:bf:3b:c5:5d:55:
65:02:27:a1:58:55:88:d4:ee:b9:86:a0:75:27:d3:
93:78:b2:fd:16:d3:43:95:72:13:d2:70:e6:73:0d:
25:f6:c5:db:0a:c4:4d:ac:e6:e2:fa:5d:5a:07:a9:
16:b6:5a:06:e0:07:9f:f2:38:a4:4d:88:6c:67:7d:
8d:a4:0c:de:da:62:da:92:fb:a2:4d:aa:82:96:00:
88:9b:9b:6f:20:41:86:26:49:4e:f1:7b:a0:48:d3:
e0:4c:a2:8e:be:d6:cd:3b:1a:6d:b4:e3:65:c4:82:
af:64:87:b6:cc:84:59:46:77:dd:ba:a4:95:83:c8:
86:3f:ff:5d:f6:ec:50:80:f4:5c:fe:ab:2d:39:66:
55:e4:8a:f6:ed:cf:9e:d8:e9:6b:7a:57:f5:e6:8a:
b7:c4:a6:e3:c2:c7:2e:2d:74:20:d4:0d:55:9b:8c:
8e:df:7f:e0:3a:b7:d6:6e:c6:91:65:cb:97:c0:e9:
cf:b0:b6:6b:11:e1:d6:8a:0f:fa:4d:5e:99:9d:51:
da:10:1f:b0:4c:58:71:ee:c2:11:d1:4a:2f:e7:05:
55:43:67:37:4b:b7:6f:7d:a8:a1:6e:b9:8a:5d:4b:
ca:61:7a:18:0a:b6:74:94:8e:53:7b:16:2d:8c:15:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5B:46:02:AC:39:79:51:9D:BE:5D:BC:3B:E1:5B:14:A8:09:C8:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3f72217d-212d-3f3c-8c4e-810641e0f42a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:57:c3:d4:e2:1b:16:46:74:fd:a8:fa:37:5c:77:aa:90:5c:
f3:3d:80:44:c2:74:e4:0c:d9:75:b5:62:1f:43:88:96:cd:70:
47:3f:13:88:9b:16:b9:1d:fe:20:61:f6:c3:a3:2d:bd:d9:24:
6b:24:83:11:1d:42:18:d0:fb:ff:d4:68:4f:53:c2:a5:fd:6a:
cb:cd:31:93:e9:da:9b:c9:55:30:75:e2:2a:21:d6:ac:f4:fe:
2f:96:56:d7:6f:b9:c3:40:64:5f:29:30:19:74:f3:91:43:a1:
60:12:ec:58:33:e6:d0:e4:eb:f7:3d:b9:25:6a:b1:c1:1b:a1:
6c:48:47:c6:22:21:7c:87:73:16:32:a7:31:3b:83:d6:aa:c9:
80:e0:ca:32:a2:19:bb:52:ed:be:ac:bc:f6:b2:27:1b:0e:4e:
0a:a1:55:60:43:6d:30:9a:b8:b0:2f:89:a4:83:29:49:1b:aa:
ee:4f:ae:83:ba:88:b8:a4:a6:f4:d6:99:db:57:ac:18:29:75:
d7:97:56:75:cf:18:74:eb:19:dc:9b:8c:17:c2:2a:5c:5e:52:
36:8d:75:eb:58:8c:cf:71:79:46:c6:5a:64:68:c3:b3:b9:92:
4c:1c:02:b9:5c:ab:01:aa:db:e0:4b:26:c7:ef:3e:7b:10:bc:
5c:5a:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:26 2024 by rpki-client on console-ams.rpki-client.org