Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bb732ae-1618-3272-a6d9-648480f6bee3.roa
File: 7bb732ae-1618-3272-a6d9-648480f6bee3.roa (raw, json)
Hash identifier: Q7gqtuIxrKfZQ27Aib08y4DOmV6eIZDfG3zVbhKjUuU=
Subject key identifier: 40:65:D1:E4:9B:CB:DE:A2:6D:23:B8:AB:A3:D4:CE:FC:1E:35:DB:2F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A038674E843DBBB89AB9900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bb732ae-1618-3272-a6d9-648480f6bee3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:86:74:e8:43:db:bb:89:ab:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a17102db-6956-4780-baad-373896e113bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:f8:3b:f1:97:eb:3c:72:84:90:a0:f2:aa:
70:7c:37:fe:8a:19:fd:a4:e8:be:94:2c:e1:da:97:
f1:0d:a7:73:a7:50:1b:24:c1:31:84:fa:db:bd:03:
3f:5e:e5:d5:41:c0:7e:f4:d0:aa:20:01:d7:3b:5a:
33:28:8b:d2:6f:9d:66:0a:d9:d5:4e:4b:0d:07:06:
6f:db:25:f3:7b:e9:1e:e6:a2:a0:d3:ab:91:20:e7:
14:e3:45:fd:4d:21:47:43:2c:23:44:6f:b6:9e:48:
c1:8b:84:32:19:4d:b7:cd:44:0d:26:4e:e4:e2:8b:
1e:b9:df:3e:50:3d:51:1e:a3:80:88:40:52:07:1b:
96:4b:63:58:44:e6:90:68:2a:b6:c2:8b:e4:d8:cc:
2d:38:2f:d1:04:2f:98:f5:4c:e9:05:88:fb:f9:9a:
43:6d:67:0c:84:b8:9c:ee:24:53:0b:17:47:53:55:
88:60:37:c7:ee:e8:5f:06:c1:71:37:b0:f3:df:59:
4c:44:00:ef:74:9c:6e:ba:66:86:59:44:b3:1b:92:
c8:fc:26:38:a4:81:45:a8:d1:22:20:3e:6e:7e:6d:
b0:e8:18:96:4c:a6:a0:75:02:4c:5d:76:a6:5f:9d:
32:96:92:33:dc:7e:52:e0:71:f0:b6:0c:56:e2:9d:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:D1:E4:9B:CB:DE:A2:6D:23:B8:AB:A3:D4:CE:FC:1E:35:DB:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bb732ae-1618-3272-a6d9-648480f6bee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:4f:69:91:36:2e:0a:46:b7:39:84:cb:fe:18:5a:38:15:a8:
6e:21:5c:ce:9f:7e:1a:a7:78:37:5c:58:9e:9f:ca:be:0c:a8:
08:7b:bf:b2:e2:45:9a:7b:fe:72:a6:94:a1:9d:70:10:3b:a3:
d8:bf:2d:db:e0:7f:1b:47:a6:09:3b:24:61:77:dc:9f:3a:14:
76:dc:90:cd:f5:1b:b1:9c:d4:72:3d:ca:72:46:f5:70:97:0e:
90:7f:89:da:15:7f:aa:99:2c:ed:cc:4d:f3:6b:63:4a:0e:6c:
96:a2:ab:5f:94:b3:c1:a9:4d:05:e0:f2:c9:94:14:f9:89:d3:
50:87:72:c6:82:d7:b9:da:fe:71:62:8b:66:f2:9a:02:20:03:
ef:8b:cb:8e:2c:95:ee:aa:b9:d6:cb:92:4f:78:4c:87:9c:6c:
01:60:d9:7d:f5:ed:e7:25:6d:8d:62:4f:8b:5a:5c:d3:44:98:
c2:4b:15:c8:31:c6:ec:9d:b9:a5:0e:ba:20:b4:4f:67:49:a6:
93:9f:17:65:ba:aa:41:36:35:ad:9d:0a:95:ea:b5:0b:23:6b:
2a:3d:ad:55:ae:c4:b9:7e:7f:93:d2:5b:7c:cd:66:15:44:02:
f7:01:dc:88:89:62:32:f2:3f:a2:0a:9d:96:a2:81:06:b6:01:
5f:02:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:28 2024 by rpki-client on console-fra.rpki-client.org