Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56ca7bb8-fd3b-3782-a40f-b269552f890d.roa
File: 56ca7bb8-fd3b-3782-a40f-b269552f890d.roa (raw, json)
Hash identifier: eT7WvioGi1e/Z2puJopDpJZnp0U0Z2F6QwJE+zViyNY=
Subject key identifier: D2:FF:DD:6B:B2:EB:BF:5C:83:1C:79:AE:47:CA:AF:84:0F:AC:DB:4B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A028FB4996DA3E4BDAF8100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56ca7bb8-fd3b-3782-a40f-b269552f890d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:8f:b4:99:6d:a3:e4:bd:af:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6560b288-3ace-4371-a5d2-fef235c59324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:48:c7:c7:e3:56:bd:96:0d:71:2c:0c:c1:
22:99:17:22:6c:1c:8a:3b:66:a6:c4:96:d2:5e:ac:
98:84:4f:25:5e:cc:6b:1e:c7:3d:b1:62:7c:f6:77:
65:c7:47:33:ad:a1:84:f3:71:9a:c0:88:f4:55:5a:
50:4c:b6:96:3c:c2:83:e4:c8:4b:26:9a:ea:a9:6c:
e0:b4:a5:6c:72:28:41:48:80:bc:f5:02:08:88:cc:
8f:02:e1:34:22:6d:5b:a8:e1:e7:0d:54:f7:81:a9:
6a:a2:4a:f3:5f:f6:31:a9:ea:3f:77:d5:24:28:73:
70:94:f3:68:f2:59:60:fe:4b:90:05:42:b9:e1:bf:
24:08:f8:09:0a:26:bf:9e:6b:9b:5f:23:fb:09:6e:
a8:af:13:20:41:c8:a4:4d:0d:b1:6e:6b:17:c9:98:
b1:b8:32:37:34:5d:a3:78:73:23:50:c0:80:ff:21:
d9:c4:9c:63:a2:bc:6c:83:7c:44:4a:e8:38:9f:6c:
f1:67:73:b9:95:79:45:9b:ed:88:4f:c0:fc:89:44:
13:a6:b9:4e:ad:36:da:3b:5e:e9:91:60:3b:33:16:
d5:d0:3c:ee:aa:7d:28:59:0b:9e:e0:c4:46:49:4c:
51:d5:3f:20:6f:17:a8:30:af:19:a1:55:83:f0:bb:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FF:DD:6B:B2:EB:BF:5C:83:1C:79:AE:47:CA:AF:84:0F:AC:DB:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56ca7bb8-fd3b-3782-a40f-b269552f890d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:9d:d1:59:32:61:15:2e:80:2d:d3:fc:c4:64:ac:97:be:15:
07:6d:ec:0a:96:57:54:b8:2c:15:cd:0e:3b:92:a0:70:24:25:
0a:7c:b4:57:63:29:b0:4e:c0:2e:19:16:97:30:d2:3d:24:7f:
92:c5:af:c1:a4:e6:2d:53:7a:54:2b:4c:72:cc:41:d3:d5:4e:
97:d4:7d:4a:13:b1:71:60:7f:b3:cf:64:7d:5b:20:bb:a6:a0:
7d:0e:e6:55:7b:a1:c6:73:a9:fe:38:fe:53:19:f6:99:c6:56:
03:9b:ad:01:04:b6:b6:de:09:1a:8b:a7:64:aa:1d:ef:d5:1d:
3c:ac:1b:f5:ca:95:89:fa:66:9e:3f:9a:46:b5:b5:c2:3c:2a:
2a:00:44:5c:53:d2:fe:50:3f:12:cf:23:ba:25:62:a6:fd:aa:
9f:0e:7f:29:3d:d2:8c:eb:55:1f:fc:df:b0:cd:91:93:b7:85:
71:b6:39:86:6f:e7:29:76:31:45:4f:3a:5c:c8:c7:1a:ee:87:
97:fa:4c:96:3b:fd:5e:a5:57:be:1a:01:18:5e:1c:3b:e1:30:
41:cc:dc:bb:9a:de:a1:1a:96:fe:09:53:63:60:e9:75:1a:07:
40:02:a4:47:6d:4b:5b:a5:02:b6:d1:60:a7:f5:6b:c4:84:81:
47:2e:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:26 2024 by rpki-client on console-fra.rpki-client.org