Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74dff767-ff21-38c2-8c56-f9f15453cb6a.roa
File: 74dff767-ff21-38c2-8c56-f9f15453cb6a.roa (raw, json)
Hash identifier: PKkqKxJLS7OmSgaucNj5tKDeSiJtfaWDdCd6oGcSmzE=
Subject key identifier: DC:B4:8E:7F:06:82:87:3D:40:7E:04:AB:E9:08:02:85:B4:E5:5B:BF
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584275C97D5FE8DC2F08ADD87680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74dff767-ff21-38c2-8c56-f9f15453cb6a.roa
Signing time: Wed 05 Jul 2023 12:00:00 +0000
ROA not before: Wed 05 Jul 2023 12:00:00 +0000
ROA not after: Sat 16 Nov 2024 05:00:00 +0000
asID: 36383
IP address blocks: 104.135.202.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:75:c9:7d:5f:e8:dc:2f:08:ad:d8:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jul 5 12:00:00 2023 GMT
Not After : Nov 16 05:00:00 2024 GMT
Subject: CN=9bf8ea96-4c44-4b7e-a3b4-0bee66d0d8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:22:0b:d8:7e:7e:7c:95:0d:59:a1:74:dd:
1c:9f:00:b2:68:14:1b:96:8c:21:6a:cb:c5:ef:d9:
45:7b:28:ff:37:ed:49:f7:27:44:db:da:53:20:bc:
1a:64:c2:55:55:96:20:88:be:08:23:f9:7c:3c:6d:
a5:81:0e:a7:0a:fc:2c:7a:e6:73:b1:08:77:d0:89:
6b:93:e8:f0:75:f3:46:ba:7d:fa:9d:d9:17:dd:f8:
ef:ab:d6:37:f4:dd:d3:13:96:cf:17:db:48:1a:fb:
c9:95:43:5b:cb:3b:2d:64:94:68:d5:1b:3c:5b:cb:
00:5e:f9:47:c4:dd:2c:d8:8c:3f:70:4b:d1:b5:f2:
75:8d:89:15:49:8b:11:7d:d3:ba:2b:08:77:7b:e1:
ea:29:9f:33:51:d2:22:6a:67:f3:23:2b:76:95:b2:
d9:3e:46:bf:6f:cb:36:1d:ff:55:04:9d:b0:6b:f9:
67:45:82:7a:a1:8f:aa:cd:a5:ec:4b:98:8a:fc:ee:
26:04:ab:cd:e6:b8:fc:8e:a5:4b:98:71:9b:a3:82:
e1:80:5b:95:fb:0f:66:1f:ea:b4:56:a6:8d:12:be:
9e:4e:08:7d:35:a6:db:3c:d9:32:4b:45:6a:91:cc:
de:4d:39:af:a7:c3:ef:3a:d0:18:95:48:9b:aa:91:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B4:8E:7F:06:82:87:3D:40:7E:04:AB:E9:08:02:85:B4:E5:5B:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/74dff767-ff21-38c2-8c56-f9f15453cb6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:96:99:2d:43:f7:f8:27:24:bb:78:a1:99:59:fc:ae:8c:ef:
db:d0:08:29:fd:75:8f:39:0e:ea:fb:7f:a9:77:9b:af:b8:e2:
8e:fb:9d:3d:1b:30:7a:c4:8b:51:f9:db:10:5a:93:4d:f0:11:
88:e4:fe:f8:7a:70:55:83:4e:44:cc:2b:64:8c:dc:da:84:2a:
ed:5b:0e:f1:a0:49:3c:a5:f7:49:a1:28:60:54:a5:83:77:c4:
e1:e8:c7:a4:29:eb:32:f2:50:a7:33:9c:58:6d:0e:b3:c8:a0:
42:55:54:6f:73:31:9d:93:f9:95:97:d5:9e:62:df:b1:20:f9:
d2:97:a7:23:51:8c:23:4b:d0:0a:dc:ed:5a:b4:0f:73:99:06:
1b:4f:86:54:ac:37:e8:1d:84:7a:07:9a:0e:e3:0f:0b:f1:bb:
f1:c3:eb:cb:e5:55:cc:c4:7e:72:53:f4:55:8b:be:8c:0b:67:
6d:6b:1b:5b:b4:38:01:fc:96:25:c4:b9:fb:2d:4e:ce:ac:6c:
c6:16:11:b1:63:e3:a0:a0:d1:e6:38:24:bc:9c:ce:da:e2:c4:
3a:1c:8f:8d:34:a3:b1:94:bc:4e:ed:3c:5b:29:d7:29:ed:4a:
ec:06:15:6d:12:90:f5:9c:6c:3a:d8:48:9f:a6:7b:dd:64:5c:
7e:36:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:28 2024 by rpki-client on console-fra.rpki-client.org