Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/616799e7-a4cc-34ea-87f0-83a7e4296c7a.roa
File: 616799e7-a4cc-34ea-87f0-83a7e4296c7a.roa (raw, json)
Hash identifier: 6HfMIE00tI8A4Sr1MRW5RDX+DRXtBOQwJ01o93SotIQ=
Subject key identifier: CA:77:E6:D5:03:C9:1B:CA:CE:91:48:E7:F7:8F:58:5F:45:AD:D9:42
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844720A36A0FE9F12B460735F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/616799e7-a4cc-34ea-87f0-83a7e4296c7a.roa
Signing time: Wed 03 Jan 2024 12:00:00 +0000
ROA not before: Wed 03 Jan 2024 12:00:00 +0000
ROA not after: Wed 29 Jan 2025 05:00:00 +0000
asID: 395973
IP address blocks: 104.134.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:72:0a:36:a0:fe:9f:12:b4:60:73:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 3 12:00:00 2024 GMT
Not After : Jan 29 05:00:00 2025 GMT
Subject: CN=8838ef31-5a93-43d2-ac79-f7d10d0d676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:f4:a4:2e:c4:2a:3b:08:05:10:cb:64:55:
86:1b:cf:aa:07:7d:db:a1:47:dd:68:66:b5:5e:10:
69:3b:30:1f:6b:a7:81:9f:6b:63:15:51:b8:00:f6:
c4:b1:d1:75:7b:b9:2b:64:8d:66:ce:f5:11:e5:44:
6e:31:d8:98:8b:03:19:43:68:b1:84:4f:f8:35:d5:
b6:2c:ae:6f:1b:bf:e8:69:e4:fd:64:e0:8a:44:f2:
d9:3f:3c:70:8e:00:1b:d2:63:e5:4f:4b:85:17:fc:
39:eb:61:51:95:12:76:7a:b6:6c:c3:23:cf:01:1f:
06:f0:26:21:3b:84:93:be:ea:99:a2:cc:8b:73:2f:
1f:a7:d7:0a:a1:ad:44:c0:03:f2:99:77:b5:eb:73:
c0:04:65:02:1b:33:8a:75:2b:98:06:e3:73:75:21:
78:7b:36:27:52:b7:88:0c:d4:1e:a0:60:b2:0d:eb:
62:42:c1:dc:c1:c4:43:b3:71:2e:18:a2:f1:cf:26:
56:a0:2b:d0:63:bd:b0:32:15:4f:4d:c1:10:17:31:
59:48:b8:a7:fb:7f:11:82:d4:12:0a:9d:d8:ee:88:
93:5b:53:3d:dc:84:0e:be:7b:2a:90:5c:11:2a:06:
90:39:52:5d:cf:17:c6:a2:ea:1b:1a:cd:7f:0c:03:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:77:E6:D5:03:C9:1B:CA:CE:91:48:E7:F7:8F:58:5F:45:AD:D9:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/616799e7-a4cc-34ea-87f0-83a7e4296c7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:35:d7:e3:a2:fb:0e:5f:1b:6f:21:90:5c:5e:b5:36:7d:f6:
c9:9b:01:b7:ee:96:08:c7:cd:a3:bf:15:3d:78:db:f2:25:05:
60:3e:35:2d:45:72:22:0d:31:45:9b:0c:25:fe:59:ca:60:cd:
8b:5e:da:3a:bd:eb:59:6f:01:0b:0f:5e:68:8e:3c:0d:9b:8b:
cb:b2:b9:d9:1f:ef:45:83:62:8b:da:21:6c:6f:a1:d5:76:5d:
2a:f3:db:06:a1:c7:e3:e6:c3:1e:11:31:8f:41:d3:83:26:d3:
4a:fb:c1:86:e5:4f:2c:72:3d:f5:86:81:52:93:26:2c:3a:48:
af:87:5d:f2:3d:4d:31:42:c2:f6:e8:de:81:a8:00:92:16:db:
c9:dd:bd:03:e3:03:55:c9:c4:c6:ab:20:32:cc:a6:c6:47:f8:
cb:50:34:f2:0b:12:a6:dd:9e:1b:9e:91:07:5e:4d:e8:91:53:
2a:cb:28:c1:83:45:ef:38:40:f0:c1:8e:41:ae:03:0d:0a:ad:
11:94:37:ba:1b:cd:5c:de:0e:74:8b:37:bc:0a:37:6e:e0:47:
dd:dd:ab:09:8b:d5:28:bd:19:5d:71:ef:8e:bc:cb:f2:bf:7b:
69:87:77:4f:d9:a2:80:c0:e9:0b:0d:10:55:d6:f1:6b:36:0e:
d2:b9:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:27 2024 by rpki-client on console-fra.rpki-client.org