Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca6f55d-b21f-332e-a5b7-aac24a1edfdd.roa
File: 8ca6f55d-b21f-332e-a5b7-aac24a1edfdd.roa (raw, json)
Hash identifier: ZWjpoyX+yZVB2/u7qpq9K49RIbHhap9FTaHOgzaR6Js=
Subject key identifier: E0:95:D7:52:78:D3:90:4B:4E:0B:FE:D3:50:E5:B8:7B:14:BF:8E:27
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A0366B6D40EDBDE2F84F480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca6f55d-b21f-332e-a5b7-aac24a1edfdd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:66:b6:d4:0e:db:de:2f:84:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=aab2ffc4-45c3-4d11-871a-507becf953c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:a3:6b:d5:87:44:c7:05:8e:67:a4:04:0a:
e1:b6:95:c3:4f:33:7b:fa:11:23:8d:33:d8:24:c1:
0a:5a:24:ad:3c:70:70:13:eb:a0:02:46:98:e8:a4:
18:a3:76:5f:8e:b0:96:a3:e3:79:f2:7e:37:f9:2c:
3b:19:18:9d:dc:9d:68:c4:cc:53:3c:fe:0d:51:0c:
8d:63:b0:f0:56:6b:c0:f2:14:69:a6:9b:c5:7d:7e:
50:4a:7f:81:1e:6c:56:20:7f:dc:cb:ab:35:12:7e:
fb:34:ba:ed:5c:48:51:ce:6f:d8:75:e3:22:05:39:
ce:f5:4c:87:27:6d:5a:df:04:98:f6:0a:58:9b:a7:
08:59:22:ca:1b:0c:c1:3b:c0:ed:98:ac:86:b9:a6:
34:c5:91:d5:e8:78:0d:e2:6c:5f:6b:6d:93:7a:8d:
b3:9a:76:d0:9b:f9:41:ac:56:ac:a7:f4:01:6d:b1:
20:48:04:11:4e:7c:e1:22:be:76:85:58:70:96:28:
ee:7c:59:8d:39:9a:80:3d:cb:91:5b:78:ab:ca:d4:
e3:38:24:ff:d7:43:5a:74:e8:87:ea:30:fe:7f:a1:
2f:6e:03:36:37:79:ae:17:0f:fa:e5:51:25:63:e4:
57:87:db:f1:ff:62:49:ac:a6:da:cb:c4:3b:70:f4:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:D7:52:78:D3:90:4B:4E:0B:FE:D3:50:E5:B8:7B:14:BF:8E:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca6f55d-b21f-332e-a5b7-aac24a1edfdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:42:17:d5:4c:66:85:e6:56:a7:a5:4a:2b:94:36:89:60:f3:
5d:1f:1b:d0:3c:22:ab:87:5c:da:29:e9:1c:fe:1f:0a:61:a0:
91:d6:b3:a6:89:dd:b1:04:a6:11:e1:a3:d4:ea:40:f2:7e:40:
c5:31:5e:54:ff:68:be:2c:df:60:68:34:51:8e:6d:db:a9:fe:
40:78:f7:99:84:48:8d:0d:5d:69:bb:19:a5:50:04:28:8e:f8:
3d:66:48:95:97:a8:85:3a:79:65:c0:72:0c:75:15:78:fe:17:
97:c4:78:02:0a:86:ec:64:74:e8:91:e6:2f:64:f1:ce:56:a8:
90:d1:f3:81:68:da:dc:ab:b5:e6:d0:81:66:a2:8c:b3:9b:0f:
b7:35:7b:8c:99:7d:3f:24:a1:8a:47:f0:3c:4d:6e:06:28:d7:
19:35:7e:b4:15:2e:d4:08:c9:ee:9b:93:13:e0:25:3a:f2:44:
e6:58:65:18:68:fd:9d:dc:86:cd:44:83:d4:71:4d:3d:d7:74:
3e:3f:9f:22:85:80:75:78:bb:a5:79:5e:71:21:58:2e:a1:73:
41:77:c5:91:c9:0b:51:ff:ad:aa:ec:2e:22:50:f5:6d:aa:98:
2b:93:37:99:3c:2f:d4:48:1e:ae:46:5d:e0:ef:75:d4:81:e7:
9b:06:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:29 2024 by rpki-client on console-fra.rpki-client.org