Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bafa6ae9-c07c-36b4-b0da-deb40832e97b.roa
File: bafa6ae9-c07c-36b4-b0da-deb40832e97b.roa (raw, json)
Hash identifier: u3adQNZ3xyw+nMH37YypBYi8Y6nZkF5fG7gUupswNiY=
Subject key identifier: 9C:47:D7:4E:83:4B:3B:43:9F:EE:F2:19:CB:5C:B5:AF:CC:4C:B1:F7
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309EAEED3352EC6E92BAADB80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bafa6ae9-c07c-36b4-b0da-deb40832e97b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ea:ee:d3:35:2e:c6:e9:2b:aa:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7888b8d4-da11-48bd-a103-1fffb952046d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:66:30:ed:b6:42:b8:40:27:fd:41:b3:52:
b5:aa:1d:c8:60:43:09:c1:8f:e1:47:c6:fd:41:92:
ee:dd:dc:55:cb:ec:e3:24:70:29:13:92:ad:fe:46:
ee:0a:8c:a6:95:37:e1:b7:bd:10:f2:2f:28:a9:a9:
8d:00:87:62:b8:e1:92:47:6b:9c:50:ca:36:54:7d:
4d:37:aa:e7:2e:0f:d5:6a:c6:94:2f:88:0e:b7:2c:
1f:2d:40:cd:e2:80:cb:08:81:e5:4f:4d:08:37:1b:
df:58:00:5a:9c:ee:60:18:c4:d6:48:f8:2e:f9:bf:
cf:29:f3:d0:60:3b:84:ac:df:e0:65:51:9e:e8:b4:
62:e3:cc:6a:7f:35:1a:a8:f3:29:3b:a4:2c:15:c3:
dc:49:e9:53:6a:fe:29:bb:0d:78:5d:07:e7:49:58:
80:df:94:f0:2f:9e:9e:4d:19:f3:0c:a2:48:4e:94:
f1:06:c7:37:30:00:d9:be:7d:a6:42:28:0f:a7:70:
bc:ea:18:4b:bc:68:e4:16:45:16:e7:f2:48:36:1c:
64:a5:10:9e:ff:5d:ef:c3:af:19:ee:bf:47:34:a6:
de:c0:46:b5:3d:7f:50:ca:13:ce:59:b5:cb:2f:e7:
69:8a:4f:8d:31:5d:6a:b4:85:74:f7:2d:96:87:79:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:47:D7:4E:83:4B:3B:43:9F:EE:F2:19:CB:5C:B5:AF:CC:4C:B1:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bafa6ae9-c07c-36b4-b0da-deb40832e97b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:17:cc:e5:1a:5a:f7:20:b4:ae:38:fb:71:92:9f:41:12:44:
49:65:a3:17:de:b4:83:90:57:b8:67:a8:b2:4a:bc:ae:c1:ff:
c3:cd:2a:00:0d:c5:6a:6c:ed:f7:65:a1:ea:2a:c4:a6:0b:e5:
5b:12:1e:90:f7:11:77:80:2b:eb:53:55:43:63:fd:45:1d:1c:
4c:45:50:4e:a2:b7:d8:4b:54:9d:a5:58:c7:69:41:9f:ca:9b:
f9:2a:b8:5e:0b:3d:17:5d:9d:13:cf:9c:6e:00:9b:3e:c6:94:
fd:ec:fe:e9:ed:af:11:2f:d2:36:a2:b0:60:8d:8f:30:c7:f8:
72:e4:79:28:3a:c8:c6:ba:96:8b:49:7a:fc:8f:38:7f:2e:a6:
1d:9c:1a:c6:76:da:85:d7:28:7f:1c:5a:3f:12:fa:83:8d:64:
41:26:1c:7a:93:94:8c:66:71:71:d9:8e:d9:b1:11:2b:e8:78:
8a:53:f8:fb:90:9d:ea:c2:c2:17:04:6c:74:bb:2c:b7:66:43:
8e:1f:aa:c4:07:95:e3:e5:66:c2:23:05:34:33:a2:4b:34:b8:
fd:3e:74:04:1f:35:c8:4b:80:b6:d4:7b:6a:23:2d:bb:d0:81:
13:15:b7:2d:bc:f4:e8:ea:c6:c0:62:fb:6b:22:be:b0:d4:99:
32:e1:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:32 2024 by rpki-client on console-fra.rpki-client.org