Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61f7bcff-162c-35cd-a4d0-be946c544699.roa
File: 61f7bcff-162c-35cd-a4d0-be946c544699.roa (raw, json)
Hash identifier: IKl+yS4e7j9g5QX1htOaoaMc3hmD57SoQ+v2njxYnaA=
Subject key identifier: DC:C7:0D:F1:F1:6B:94:5D:1F:85:4C:03:7D:69:B4:A9:D1:CF:F5:71
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309F0AE17FD4912A670889000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61f7bcff-162c-35cd-a4d0-be946c544699.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:ae:17:fd:49:12:a6:70:88:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=152a86c2-5e8e-4c95-9b38-36da49a8045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:91:6c:89:9c:98:04:c9:c1:0e:f5:57:07:
ca:2e:b6:23:c5:16:3b:0b:34:be:f0:f2:1c:7f:51:
85:8c:73:32:55:04:3e:dc:a8:e4:d8:db:38:26:60:
64:c6:e8:e0:00:00:63:8c:39:8f:3c:17:1c:3a:84:
51:3b:0c:22:e3:5c:14:38:46:74:8a:1c:43:ea:c6:
1e:cc:6f:17:94:9c:14:7d:df:ae:86:cf:85:6c:8c:
91:90:5d:6a:a0:20:f4:df:01:80:09:c9:d1:84:69:
c5:09:40:c0:84:7c:5a:f5:71:e9:37:75:f9:c7:30:
fb:fe:a4:e3:da:77:a0:5e:40:2d:51:1f:22:4b:1b:
aa:2a:0f:45:3d:89:83:a2:c6:5f:e6:f3:b5:f8:f9:
c0:44:35:2e:14:fe:28:ef:03:16:44:21:bf:80:d5:
e2:36:cd:cf:99:e7:9f:4b:1a:db:fb:92:51:75:35:
fa:0f:b1:e4:d0:d6:9b:2c:05:b0:c5:9e:ff:16:38:
cc:ce:b4:fd:55:c7:8c:3f:bd:6d:8e:5d:10:cf:18:
2a:63:0b:41:4b:89:c5:40:51:44:4e:5c:ec:2b:37:
61:17:32:18:3b:1c:b9:2d:32:cd:41:bf:ab:57:cb:
72:a9:0b:7b:88:0f:8c:b0:d1:ed:45:66:99:56:a6:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C7:0D:F1:F1:6B:94:5D:1F:85:4C:03:7D:69:B4:A9:D1:CF:F5:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61f7bcff-162c-35cd-a4d0-be946c544699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:2f:36:8a:bf:c2:52:19:d7:14:78:2c:e9:b7:9d:f5:7e:4b:
8d:8e:35:74:46:d4:a5:b5:72:a1:71:00:96:72:6a:ac:86:6e:
88:ac:fd:d5:1e:52:c3:2b:75:5a:d2:2e:d1:e5:1c:3d:6f:b9:
4f:7d:10:5c:0c:b2:d9:c0:3a:9d:2e:ca:88:34:01:e4:18:46:
e3:3b:0c:0e:57:52:0b:1c:e9:05:3c:25:fd:a9:12:a7:9d:ba:
f5:80:20:3f:9d:16:67:7c:e0:51:5a:9f:fa:40:6c:3a:68:46:
c2:c1:a1:be:25:2f:b1:d2:29:26:8e:cb:fe:af:8a:58:00:d1:
05:6e:54:94:63:bd:ec:be:88:f5:03:8c:57:9b:aa:6f:78:3e:
b7:67:ce:69:4b:28:a0:e7:59:30:bf:35:a2:c6:1a:82:99:44:
f8:2a:c2:0a:53:74:68:9b:f9:a7:4c:69:7a:5c:51:02:f2:84:
5b:f8:7d:8c:1b:48:81:ad:f2:7f:cd:c6:f8:71:aa:3d:71:7e:
2a:f7:be:d3:94:ff:62:7a:b1:f9:cb:c6:23:a8:7a:05:84:97:
f3:00:42:2f:a8:2d:06:dd:78:c9:d7:41:f2:1a:02:11:55:54:
0e:58:63:74:c4:f4:c8:dc:1b:20:eb:c1:d5:4c:27:09:fc:57:
73:1c:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:28 2024 by rpki-client on console-ams.rpki-client.org