Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/443dc7ca-c8f0-30af-9386-fbc2933f7c37.roa
File: 443dc7ca-c8f0-30af-9386-fbc2933f7c37.roa (raw, json)
Hash identifier: P/Q54DW6RCQBXknC7mhXeCsiBHVzAcbC6wCEoBaTf8M=
Subject key identifier: D5:8B:07:B9:49:A4:0D:36:D5:B9:A0:A5:FA:AA:FF:CF:21:32:DE:CC
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844720AA53C9181A43FD9D4DF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/443dc7ca-c8f0-30af-9386-fbc2933f7c37.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:a5:3c:91:81:a4:3f:d9:d4:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=c1d31d42-46f0-49e2-a7d7-a255afeddab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:c4:bf:30:20:d4:1e:67:b7:29:64:47:e1:
5d:28:1f:54:58:b7:bb:2f:f5:91:40:b7:41:fb:a9:
89:ee:bf:03:58:3e:99:bc:9b:e6:13:df:42:99:c8:
0f:d7:e8:c3:dd:4e:12:76:5d:f8:9a:4f:d1:f2:5a:
d0:eb:0a:55:33:2b:40:35:92:6a:53:78:52:1f:13:
0f:1d:5f:dd:1b:26:ef:cf:63:09:a9:11:d2:6b:6d:
09:ca:d1:e5:ec:ac:33:16:ec:ff:3f:38:2c:2e:18:
81:f5:69:3b:19:7a:2b:44:4c:32:14:fd:c2:6b:9e:
e5:d0:8d:f9:16:82:73:66:28:a3:48:f9:20:cb:f9:
65:f0:01:6a:de:0b:a1:14:31:12:a3:42:14:dd:d8:
41:d1:92:08:7e:61:db:50:49:34:df:5d:3d:52:9b:
14:c8:b0:37:d5:2a:9d:e3:72:dc:56:07:bf:78:84:
ff:00:5f:b8:e1:21:c1:0f:42:a1:48:52:f4:60:fd:
da:d9:f8:35:83:7f:ee:16:75:77:70:a8:85:46:0d:
af:18:9b:33:af:da:e0:8d:6d:f5:b8:f1:19:d2:ea:
3f:f8:76:ca:c7:31:01:7b:34:0b:47:07:a0:b8:bd:
9a:75:46:a3:d2:24:05:95:03:fb:92:ee:38:11:40:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:07:B9:49:A4:0D:36:D5:B9:A0:A5:FA:AA:FF:CF:21:32:DE:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/443dc7ca-c8f0-30af-9386-fbc2933f7c37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:e9:32:94:60:03:02:fd:37:bd:6d:b3:72:0a:96:14:23:22:
a7:fb:b6:57:5e:ab:9c:dd:38:38:7e:43:5f:21:4e:84:eb:d1:
99:b9:24:e2:bd:4a:72:0b:54:48:85:e5:2d:32:1d:c9:64:8c:
01:55:e2:35:dc:17:4d:13:eb:f9:5f:40:8e:3d:11:73:08:e0:
1f:08:ad:3d:a1:5c:94:08:47:db:60:e5:80:5e:b3:6b:2a:cc:
3c:63:f0:ae:dd:44:96:33:91:72:e2:57:c5:29:a0:75:15:2e:
f7:a9:10:09:34:7f:6a:17:2a:3a:c9:9d:81:09:21:1f:c6:b9:
3d:5c:12:23:9e:a9:6c:03:ac:d6:7e:e2:c7:ad:02:f4:7a:a7:
76:98:bc:8d:3b:e0:db:5d:c3:26:2c:35:9c:89:bd:93:54:c3:
7a:87:18:71:b1:48:18:c6:fe:7b:9b:90:cf:c5:1d:aa:23:02:
08:dd:44:a6:67:74:1e:94:d1:a7:d2:1b:e5:d0:df:38:ea:3c:
db:af:e1:05:c2:4a:ad:04:83:e6:c7:65:23:83:a5:6f:44:b1:
6b:e6:db:e0:43:b1:d6:1b:95:7e:a2:f5:b7:aa:e7:ac:a4:ef:
84:e6:e8:a6:6e:67:49:de:7f:c8:a1:0f:06:4d:9b:76:42:d6:
41:ef:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:26 2024 by rpki-client on console-ams.rpki-client.org