Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a3ebafc0-2f97-3263-a4b2-6d4a403282f2.roa
File: a3ebafc0-2f97-3263-a4b2-6d4a403282f2.roa (raw, json)
Hash identifier: cM6w9LwEvvPLi+GZXT8idOwuz6c/G1c7US06/YUBQnI=
Subject key identifier: 86:C8:0A:86:0E:48:B1:88:58:13:84:71:EA:24:FA:59:7F:3D:17:CD
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844A3A138D6E892243E88691010
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a3ebafc0-2f97-3263-a4b2-6d4a403282f2.roa
Signing time: Sun 21 Jan 2024 12:00:00 +0000
ROA not before: Sun 21 Jan 2024 12:00:00 +0000
ROA not after: Wed 04 Jun 2025 04:00:00 +0000
asID: 36411
IP address blocks: 104.135.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a3:a1:38:d6:e8:92:24:3e:88:69:10:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 21 12:00:00 2024 GMT
Not After : Jun 4 04:00:00 2025 GMT
Subject: CN=a58e1e16-0193-4ae5-ad74-c416ca612dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cb:5c:47:15:c9:ae:c0:29:ae:9d:24:bf:a1:
ba:e0:1a:70:ba:6f:ca:c8:61:71:49:d2:f6:56:61:
17:43:a3:9b:66:57:c2:31:55:65:61:1a:fb:af:28:
66:dc:7f:bc:f5:e6:fb:44:5b:44:5a:06:f5:10:c1:
4a:3f:08:9c:40:43:5c:08:34:1d:d9:bb:ca:27:85:
65:ba:74:e0:45:b4:0b:5b:bc:5a:db:45:b5:af:e3:
02:cb:d2:b8:ae:c9:61:13:03:5d:b8:f8:f5:86:5d:
e4:d0:9e:ff:62:2b:fa:cb:b9:a5:7c:ad:fd:0f:c8:
41:6f:7a:07:4b:2d:a4:8e:ef:bf:84:5b:e8:0f:1a:
be:bc:52:2e:64:a7:5d:37:aa:40:a9:11:b0:3e:47:
58:76:c7:36:24:80:c7:59:a7:ba:88:98:27:a1:1a:
80:65:b8:af:3a:35:17:64:01:1e:6d:07:16:e0:b6:
54:b5:a1:5d:01:d0:b9:69:48:54:88:2b:75:de:5e:
64:bc:96:9c:ba:77:8d:ce:98:2b:74:92:dc:8c:6a:
a6:1b:fb:a8:e2:cb:6f:a2:a5:28:32:20:45:30:df:
9a:28:c3:56:0a:49:dd:fe:ea:a9:67:e3:39:7e:50:
0a:b2:25:b6:37:3b:7f:54:f2:d3:55:52:9f:21:a6:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:0A:86:0E:48:B1:88:58:13:84:71:EA:24:FA:59:7F:3D:17:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a3ebafc0-2f97-3263-a4b2-6d4a403282f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:0e:0a:65:56:74:84:d2:c8:c6:cd:5f:52:65:ea:34:16:db:
52:d8:24:ca:4d:d3:af:c1:fd:cf:0b:7b:54:64:5b:8f:00:55:
ef:ac:90:22:da:57:4f:9a:f4:7c:e6:eb:09:ce:1f:c4:ab:0a:
c0:da:5e:7a:38:79:73:f7:40:83:56:88:a5:da:ca:40:bd:49:
27:31:17:58:43:71:60:3f:a7:39:d4:ea:1d:64:b9:77:d9:2e:
58:17:5d:15:d5:a1:8e:64:c8:04:64:4c:fd:0c:79:1a:bc:27:
84:dc:f4:9f:56:fd:63:ae:fe:0f:a8:b3:ae:32:d0:c4:c5:9c:
43:57:ad:e8:fd:b4:c7:3f:7b:e7:c9:d4:55:07:1c:4d:a9:de:
00:7c:29:8c:be:bb:01:72:6b:4f:e6:0c:5a:b9:42:8a:fa:55:
e2:81:29:af:ee:c9:de:4f:31:cd:f9:a1:cc:c9:ac:b2:db:52:
a3:a5:13:92:b7:90:a3:40:58:50:f7:8f:59:7d:34:56:e5:a0:
08:30:39:f8:c7:05:8b:a8:3d:94:28:45:e4:be:2c:86:b1:82:
f2:97:04:e9:97:8f:fa:21:52:28:93:c0:8e:e1:08:4a:c8:a6:
87:4b:1f:16:8d:76:37:9a:52:86:19:17:bb:c1:15:16:1e:dd:
f8:a3:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:10 2024 by rpki-client on console-fra.rpki-client.org