Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9aac5bc-327c-3397-b266-508164ad3cdc.roa
File: b9aac5bc-327c-3397-b266-508164ad3cdc.roa (raw, json)
Hash identifier: 8rYjGsFFV0GuqkJ/e+L6EkfFsgUZA3ulAaUCtB3jzBQ=
Subject key identifier: CF:8B:2B:C8:AD:43:39:F4:E5:00:1C:58:24:13:96:FA:CD:E6:2B:3C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309EE8FECBF967B887E4B91C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9aac5bc-327c-3397-b266-508164ad3cdc.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:8f:ec:bf:96:7b:88:7e:4b:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=87b7157c-1255-4091-bf7b-470833124f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:a4:d7:49:cb:7e:5d:0b:b2:55:99:e9:8d:
8d:58:3b:b0:b6:83:9c:fc:01:5d:f7:92:20:0c:ed:
1c:f8:54:2a:c4:41:2d:ce:c2:6f:f8:69:34:16:12:
58:01:3d:ed:46:1e:96:9f:c7:7a:80:09:1c:56:8a:
e3:20:d5:f7:40:4c:08:4d:00:fd:d4:e9:07:d4:84:
2f:4a:99:b6:55:04:85:11:a3:9e:4a:7d:fa:48:91:
06:15:18:c6:15:90:d8:9a:1a:31:fb:c7:d7:6d:8c:
cb:a1:ea:f4:cd:2e:b3:5f:00:63:02:15:94:3b:bd:
f5:27:18:58:a9:15:60:9a:5a:64:f7:e0:9b:44:66:
e6:4a:db:59:c5:15:75:45:37:31:40:65:b4:a1:7d:
53:83:89:60:17:8b:8e:f0:99:ce:6d:d2:ab:be:06:
09:96:ec:c9:e4:6f:53:d8:d5:1c:6c:4f:73:18:e8:
bd:f8:1d:28:34:6d:27:58:d0:f4:1d:39:27:b3:ad:
07:b3:82:78:3d:a5:5d:32:ad:5e:bb:af:71:d4:57:
9d:fb:6a:57:ed:7a:5d:bf:4b:33:47:d4:f8:6b:5e:
d3:f2:a5:f5:55:65:5d:14:ec:c4:6a:05:4b:45:20:
9a:fb:b0:ac:a0:d4:1a:06:96:1f:a6:c5:ca:55:2e:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:2B:C8:AD:43:39:F4:E5:00:1C:58:24:13:96:FA:CD:E6:2B:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9aac5bc-327c-3397-b266-508164ad3cdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:cc:18:5e:91:0b:f0:3e:8c:7d:9c:0a:33:3d:59:b0:33:2f:
ee:a3:c2:c1:a5:a9:d3:5a:70:20:4e:2b:aa:97:d8:57:2b:e0:
22:74:e8:44:13:8c:d6:64:65:db:c1:00:bf:56:a1:6d:15:fa:
c2:14:df:07:71:fc:52:b8:90:8d:89:01:98:9c:ac:70:63:de:
62:59:7c:19:7a:72:83:3e:db:eb:d0:7e:74:91:e2:22:aa:c7:
e2:a0:f3:4c:58:c7:1d:ad:e0:8b:b3:a1:dc:df:48:2b:5c:e5:
f5:91:66:40:3d:86:b4:6d:88:f0:76:0f:d2:e1:c8:68:14:c9:
65:04:4d:56:db:05:1b:5b:eb:8a:7f:51:7f:b4:10:7d:97:29:
84:15:0d:3e:81:64:d6:f7:07:ff:dd:d4:91:55:14:e3:2d:26:
2c:7e:54:1e:73:84:6c:50:ed:17:68:d7:ca:6f:e3:66:45:ed:
da:01:be:94:b0:4a:2a:36:70:17:56:ed:b4:47:19:13:8b:d7:
d4:1f:d1:9a:20:ee:94:33:79:bb:5c:e4:87:65:5c:37:e8:34:
5a:a1:96:98:d0:b1:44:b3:82:e1:9a:a3:fb:4e:be:3a:9b:5b:
cf:22:79:69:32:1a:5d:b2:0f:0a:99:a2:a0:f9:90:94:d3:5d:
f8:58:ba:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:32 2024 by rpki-client on console-ams.rpki-client.org