Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/591deae1-2a1c-3b85-b868-54922f30829f.roa
File: 591deae1-2a1c-3b85-b868-54922f30829f.roa (raw, json)
Hash identifier: kLCgHVZuQUbFeBxGbrGOnt0GXUALYKzbpYBWM+YxLIM=
Subject key identifier: 41:D2:71:1F:27:20:46:03:D2:FF:CA:66:C5:20:A5:F1:1D:C1:CA:1F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309F1822098CF6086FDE73100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/591deae1-2a1c-3b85-b868-54922f30829f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 395973
IP address blocks: 104.134.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:82:20:98:cf:60:86:fd:e7:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c6c6019a-d49e-43d8-821e-960d7e742422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:05:bc:02:a7:54:77:1c:72:60:47:83:a7:
3a:cd:09:43:57:32:79:2d:ab:94:de:ad:a1:89:71:
28:d0:a5:b6:e1:c0:5f:7b:24:f3:ea:5b:03:d1:c0:
d4:f5:32:83:13:04:2c:c1:63:e1:86:8f:7c:c4:af:
b4:5d:fd:91:f3:6e:86:02:18:98:23:40:07:23:be:
20:df:03:c8:db:8d:e9:eb:19:0a:09:0b:bf:5a:35:
6d:ca:5c:49:a8:a7:93:b7:45:a3:37:fd:23:58:89:
7c:39:3b:c7:65:46:e9:f4:1f:22:78:00:58:4b:39:
07:5d:b0:b1:18:0e:90:bc:01:af:2d:50:b2:47:82:
6e:76:3f:0b:c1:04:9c:c0:b2:ad:fd:ee:49:12:94:
3e:db:f4:dd:1e:e6:ad:11:b7:4e:78:3a:69:62:bb:
84:d0:3e:a2:60:c8:db:4f:f8:6a:1b:de:c1:a6:38:
f8:11:e7:f6:6e:02:5d:e5:c6:f2:06:81:73:02:67:
f8:a9:59:a2:24:13:7f:1f:9a:e9:ea:96:98:09:38:
07:32:98:f0:e6:f5:d8:75:5c:9e:80:ab:a7:9d:13:
95:4e:07:0c:46:13:1e:c5:9d:a5:39:7c:5a:26:79:
33:57:04:9a:54:46:9b:88:31:d7:f0:c7:07:e9:b0:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:71:1F:27:20:46:03:D2:FF:CA:66:C5:20:A5:F1:1D:C1:CA:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/591deae1-2a1c-3b85-b868-54922f30829f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:3b:56:1e:aa:87:46:27:4b:d8:a8:d4:2e:4d:33:d5:44:e2:
0d:77:5a:46:a1:b3:b9:05:a0:e7:c3:6c:8e:8b:35:c0:15:70:
65:e1:c6:27:05:85:e1:9f:4b:69:23:be:4e:0b:0a:9e:a1:6c:
9b:89:bb:3b:9c:60:02:89:21:db:50:2c:b6:e3:de:a4:69:76:
c2:f2:35:2c:50:8e:c6:47:76:d8:54:a8:01:a4:8a:61:ab:9f:
62:5b:d8:cf:99:da:27:a6:2f:c4:2c:80:cf:6f:9f:d0:48:6d:
db:5e:5b:a6:17:77:33:b9:ab:91:12:53:6d:33:4b:c4:7d:b6:
e7:7b:c3:a8:67:5b:79:95:9b:d0:10:3c:05:1f:e7:fb:36:18:
fb:e9:a5:17:b0:b0:95:3b:e1:f5:13:63:7b:1b:48:af:46:7a:
d1:8c:7e:9f:a9:d0:aa:ac:b0:1e:fe:00:28:c2:cf:b7:68:d3:
f9:ed:7b:e3:77:15:e7:db:5f:1e:18:e1:88:83:49:5d:fa:01:
50:d1:66:3c:5f:ab:dd:71:d1:5a:d7:b1:80:d7:fe:83:34:eb:
b7:64:a5:83:17:13:87:8f:28:4f:73:35:34:80:53:02:5d:1b:
ca:61:27:4f:fc:6f:4a:ff:45:ae:7d:7d:b3:01:e3:96:c8:31:
39:95:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:26 2024 by rpki-client on console-fra.rpki-client.org