Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a041f4a5-13fd-3aa6-b80f-a9c47c576e16.roa
File: a041f4a5-13fd-3aa6-b80f-a9c47c576e16.roa (raw, json)
Hash identifier: PZBcE2XO2Me7/f+OR/mtjd+gcRNqvK13LBNO+69biY8=
Subject key identifier: EB:A2:63:DD:36:52:C8:04:F6:49:33:C2:48:47:3E:31:69:CC:5D:CF
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309ED94B408C7204ACA3E0DD0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a041f4a5-13fd-3aa6-b80f-a9c47c576e16.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:94:b4:08:c7:20:4a:ca:3e:0d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9640b46a-be5b-4d60-b234-3a754f25efb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:8f:4a:50:08:ed:7c:18:82:ee:e2:2e:8e:
30:b2:5d:be:45:0c:2c:3d:51:d9:7f:67:26:f3:7f:
62:4c:a9:79:65:32:67:ca:18:fc:4e:7f:38:45:44:
3f:c4:ec:44:3d:e5:15:b1:53:b0:7e:36:01:05:68:
a7:e8:6c:ba:98:b8:da:a7:1f:be:f6:09:72:e2:64:
42:49:f8:bf:49:56:e8:0c:c9:1f:d7:a9:34:83:b1:
0b:e8:4c:ca:6e:f3:48:e1:11:fc:a7:5e:ae:a2:0a:
d1:0e:ce:cb:68:87:a9:1a:c9:b4:bc:4a:c5:f0:f0:
b6:85:60:53:66:e7:77:f5:d4:1a:34:94:bd:2b:da:
c3:53:76:5b:6c:fb:9e:53:0d:06:c6:78:8c:89:38:
fb:82:7b:a4:14:14:a8:3b:fe:7a:38:df:57:0b:4d:
e5:db:ec:8d:c4:66:c3:ea:ed:69:60:7a:bb:0f:cc:
d6:2c:8e:c6:99:86:15:a9:91:ba:15:5f:bd:c9:fa:
3f:94:fe:30:ca:66:18:6c:92:c8:93:17:5a:64:ef:
ca:40:4e:58:75:5d:fc:c4:0e:16:4c:09:5d:0f:be:
37:67:58:75:e0:ee:0c:d8:43:99:c9:22:12:50:ee:
84:11:09:21:37:17:60:a4:3b:92:75:91:a7:9a:73:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A2:63:DD:36:52:C8:04:F6:49:33:C2:48:47:3E:31:69:CC:5D:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a041f4a5-13fd-3aa6-b80f-a9c47c576e16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:ba:fc:50:a0:0a:43:ca:b2:24:9f:09:97:86:d0:f5:74:0b:
01:6a:51:f9:22:de:e4:cf:a8:e0:44:80:91:d3:3e:01:2e:7b:
b4:73:9d:93:d1:81:7b:e8:d9:5e:88:8e:26:ac:35:07:5f:a7:
03:fe:c8:59:27:71:7e:e6:0a:97:c9:f9:5b:35:84:85:19:32:
99:e9:cf:0e:0e:85:ee:58:2f:fd:15:d3:cf:4d:f9:28:02:b0:
f3:ba:a7:ea:72:33:1a:0b:e6:de:58:fa:2f:48:40:2d:8a:73:
ef:48:fa:1e:9b:32:f3:b1:df:7c:28:35:ac:81:c2:4b:f9:ca:
d1:31:46:1b:6c:66:a0:3b:ac:6c:1b:9f:f0:96:68:08:2c:39:
b5:45:68:6d:dd:8d:59:a3:41:2c:d1:1a:39:21:8d:46:28:9c:
7f:7f:53:dd:e5:ee:79:13:3b:0a:ec:aa:dd:b0:7e:ae:a7:b0:
b0:5c:69:fc:42:70:c1:76:ad:06:83:c0:2b:36:6d:df:15:f7:
f3:85:79:9d:3a:49:47:6e:ea:7f:10:d5:d8:48:49:f4:e2:16:
e1:8d:8d:0b:2f:ef:69:74:57:09:c2:71:05:92:21:52:02:cb:
9d:f3:73:4e:0a:aa:ac:d6:0d:8c:92:6b:f9:b7:3f:ee:87:8b:
72:af:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:30 2024 by rpki-client on console-fra.rpki-client.org