Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8cdbef5-b5f9-3ad7-8499-202944374671.roa
File: a8cdbef5-b5f9-3ad7-8499-202944374671.roa (raw, json)
Hash identifier: WsIzch5/0RaIaRTsR/p2kWk2fckrbvN2O0OfiC3C58A=
Subject key identifier: 81:62:8F:A8:D0:5E:CB:38:39:53:BC:32:20:DD:F4:B6:97:48:39:22
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A26E9ABBFC62636FC34DCC8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8cdbef5-b5f9-3ad7-8499-202944374671.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:e9:ab:bf:c6:26:36:fc:34:dc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f5ffd977-0681-4b75-a4bf-000cdb03428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:7f:f7:fa:37:2b:2c:3b:85:fa:af:9b:1e:
76:20:38:1e:7d:c1:6a:6b:62:dc:56:87:b0:c2:87:
96:80:ae:0b:e0:ea:11:a4:42:3e:33:be:89:72:91:
0f:04:e4:32:20:84:64:26:b9:d5:38:17:b3:f4:99:
bd:24:09:e7:8b:f6:16:0e:c6:aa:14:a6:16:3f:07:
7c:65:a2:e6:c9:98:0f:af:9a:7d:e7:40:3f:5f:c5:
c3:30:64:38:46:8e:53:c4:04:d3:49:8f:7c:59:bb:
7d:01:27:a2:5c:32:7d:4a:8d:bc:56:2a:fb:9c:9a:
96:e1:44:76:30:d4:70:31:72:30:56:99:ec:47:0d:
41:11:73:63:8b:9b:7b:0c:51:26:6d:d5:e4:73:45:
35:16:2b:d4:43:94:67:92:5d:b7:e1:3c:df:be:07:
f7:a5:3c:40:da:a2:60:66:83:f1:0b:f4:c1:c3:11:
fb:23:24:55:bd:f6:b6:3d:bb:19:46:99:f4:5d:47:
09:ea:b5:ea:24:a0:23:e3:a4:97:96:19:86:c8:16:
d2:7d:28:01:21:db:3a:58:a2:35:24:99:6f:ae:2a:
1a:aa:76:f4:e0:ac:d2:43:95:ed:af:0c:d2:98:17:
c9:7d:71:39:a7:be:18:d4:27:af:74:63:71:cc:f3:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:62:8F:A8:D0:5E:CB:38:39:53:BC:32:20:DD:F4:B6:97:48:39:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a8cdbef5-b5f9-3ad7-8499-202944374671.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:13:1f:8f:f9:f9:dc:e4:3a:cd:71:b3:09:fd:f3:8b:95:bf:
3f:e3:22:15:5c:d0:a6:22:fb:81:0a:53:15:f1:e3:18:41:ef:
dd:fd:ae:e8:62:08:31:f0:fd:a3:55:87:8b:06:91:75:49:e1:
22:92:53:80:a7:c1:8c:3d:ba:89:7a:4e:85:f5:47:a8:8d:ea:
46:f3:42:26:2f:11:f9:4e:7a:ba:67:ed:cf:24:25:7d:53:f5:
b9:cc:d2:4d:bf:ec:2f:51:1a:68:b4:69:00:ef:a3:24:0f:38:
81:b1:92:39:c7:30:81:24:0b:f2:30:8f:fe:51:f8:8f:23:65:
32:7d:f7:2a:5d:93:a4:27:78:41:17:d4:af:4c:33:29:92:f3:
00:3a:50:2d:cf:67:59:12:26:c3:fa:2c:c3:fc:39:32:3b:c8:
86:3a:43:59:14:ab:bf:16:ef:e4:09:44:01:f9:a8:7e:bd:52:
a5:c5:5b:b1:5f:85:f0:52:1c:04:49:81:84:8d:ee:7e:7f:55:
46:99:ea:cf:8d:ec:fa:c4:e0:87:1f:c7:5a:03:0d:d6:ee:44:
36:c0:8c:0c:f3:f6:f3:61:11:fa:5e:1a:5b:f7:81:92:dc:1e:
91:e3:9a:23:d4:96:81:ab:b4:c7:8d:17:58:b4:16:aa:09:5e:
9c:3a:ea:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:31 2024 by rpki-client on console-fra.rpki-client.org