Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6fe24c02-b750-3caa-860e-f60304325a3d.roa
File: 6fe24c02-b750-3caa-860e-f60304325a3d.roa (raw, json)
Hash identifier: g9NCQfmONt0sgXVHttW2Y3PJDYiJIv6r7QyTT+J5XL8=
Subject key identifier: EC:9D:2E:C1:EC:26:56:BD:D2:04:73:01:3D:EE:77:E7:DD:AE:33:7A
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285841383A48B029A31BBE17AF50B0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6fe24c02-b750-3caa-860e-f60304325a3d.roa
Signing time: Mon 13 Mar 2023 12:00:00 +0000
ROA not before: Mon 13 Mar 2023 12:00:00 +0000
ROA not after: Sun 15 Jun 2025 04:00:00 +0000
asID: 41264
IP address blocks: 104.135.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:56:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:38:3a:48:b0:29:a3:1b:be:17:af:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Mar 13 12:00:00 2023 GMT
Not After : Jun 15 04:00:00 2025 GMT
Subject: CN=134dcf5e-dc2b-440d-8ef4-a7fd9b155872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:2f:5c:93:78:4b:80:da:d0:16:c5:8b:cd:
58:45:f9:3f:01:6d:91:44:27:38:94:3b:92:29:98:
54:07:ca:67:10:d8:3f:63:c7:6e:0e:32:db:ed:df:
ef:54:5f:22:aa:30:57:74:29:ed:b5:9c:10:2c:f3:
1b:be:c0:bc:33:d3:a3:b7:12:d3:85:fa:c0:c3:ab:
82:a0:23:ec:2f:87:a6:5b:87:88:29:e3:d0:85:8d:
2f:61:ba:7f:51:9b:da:cf:26:94:ad:a7:1f:6d:ad:
d5:c7:e0:b5:63:b7:ad:48:90:20:7c:ac:49:e5:c7:
07:e2:e2:6b:be:03:42:17:64:e7:fe:88:b0:cc:6e:
be:a0:74:6d:80:21:bd:9d:4b:62:a1:63:af:5e:80:
4c:72:91:e9:45:3c:d9:4e:06:06:84:94:87:f7:f7:
97:51:11:1f:f0:f7:d5:af:a0:81:7a:d4:d9:f3:26:
be:a3:49:63:6c:4b:1d:76:bb:4b:eb:f2:61:2a:e1:
31:4d:c3:3a:b2:8b:9d:de:f8:5a:19:1e:81:f9:80:
ef:21:27:3c:c2:20:6d:3a:92:64:38:96:a9:cf:6c:
ac:71:80:9a:c1:99:98:49:d4:04:3b:7c:e8:4c:3b:
f2:cd:3b:63:cf:4e:89:81:c4:e5:30:2f:49:c5:a3:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:2E:C1:EC:26:56:BD:D2:04:73:01:3D:EE:77:E7:DD:AE:33:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6fe24c02-b750-3caa-860e-f60304325a3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:38:f9:70:b3:8d:68:e4:70:bf:98:7d:e3:aa:51:69:37:54:
1b:ae:21:4c:4c:80:ba:4b:a0:c7:d4:de:3f:5f:3d:ab:f2:f5:
ba:62:80:ee:fe:05:4e:7b:0d:e0:ba:35:de:e8:27:88:92:d8:
1c:12:99:ff:a9:03:b4:31:e7:66:8c:f0:81:21:64:fb:84:10:
6f:40:e4:1a:8b:f7:28:c7:93:2d:c7:07:f3:a9:70:f8:c0:30:
0b:a1:04:eb:66:bd:24:ca:02:45:e4:07:b5:3b:b2:55:94:fe:
94:b1:57:e4:31:db:c6:68:ab:3a:89:81:e2:31:d9:1b:86:69:
09:81:da:e3:10:41:f4:29:74:72:39:d1:c6:74:b7:6a:62:d7:
03:d0:0b:70:d2:8a:ce:cf:08:b7:a9:95:79:ce:58:05:dc:b8:
90:4e:ff:0d:b4:cb:cd:27:89:86:8c:ea:11:75:2f:23:c8:6e:
91:12:73:ac:0b:57:96:ad:c6:ed:8a:1f:ad:70:46:01:fc:16:
c0:bc:c2:ae:a5:5b:cb:ec:b2:f5:37:c7:fc:63:f0:46:33:01:
54:4c:ed:fe:ee:2b:0f:f3:00:e2:97:e8:b1:d5:74:36:4c:9f:
ad:27:ff:f6:7a:43:c6:f0:a7:a9:da:d4:ee:9b:78:cd:6c:81:
ca:d5:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:28 2024 by rpki-client on console-fra.rpki-client.org