Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9211f58-de5e-3614-8ab9-9968797f1aa9.roa
File: c9211f58-de5e-3614-8ab9-9968797f1aa9.roa (raw, json)
Hash identifier: C2ZDXY83JcCXNvdEw8EmuoBWUXtBG9/LjCoaZoUVizk=
Subject key identifier: A5:DD:2C:20:E7:22:BB:FE:FB:B1:6E:FC:34:81:93:94:0A:EE:E4:1B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F4328584309F42DC9E9A3CD6E1B3E7D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9211f58-de5e-3614-8ab9-9968797f1aa9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:2d:c9:e9:a3:cd:6e:1b:3e:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=609ff87c-efb9-4916-aa4e-4a137d6ff302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:55:43:63:ce:8c:d6:9c:c7:fc:46:db:2f:
be:c4:cc:4e:42:a2:4a:95:98:5f:d7:41:93:f8:eb:
91:4a:dd:eb:7f:7c:3f:a7:ef:29:e2:ef:2c:b2:62:
9b:8b:09:8d:36:ea:d3:b7:b3:d4:b9:4e:1d:86:63:
5c:9e:d2:ec:d5:72:5e:58:fc:3c:00:c0:fa:ea:95:
c4:23:80:8a:b4:3e:f3:f4:d1:cc:a0:a6:b7:0c:df:
d2:56:d1:34:11:4e:50:cf:e1:bd:45:f8:59:84:4a:
66:b8:c3:af:52:db:e9:f2:19:5c:08:c6:54:7f:39:
b3:2f:af:e4:52:1c:3d:f4:90:a3:ed:ef:cb:24:65:
d9:98:b3:a8:ab:9b:51:8d:60:c6:3a:cf:93:20:60:
3a:c0:ab:cc:66:e8:c9:74:3e:dd:8d:b2:5d:ba:ef:
63:67:4b:85:f7:f1:28:44:f5:85:fd:64:7a:32:80:
01:20:20:69:75:95:24:c2:3a:5c:67:91:f2:7a:a4:
e5:62:5a:f5:e8:d6:ad:ae:16:f5:05:a8:13:25:5c:
a5:5d:05:ff:ed:52:d3:d6:45:b0:fa:c4:ba:95:b1:
fc:1a:b3:e1:c5:83:b3:b4:e8:55:17:9c:f4:f4:16:
66:74:77:b5:f7:f2:88:4e:71:86:60:6b:6c:66:a1:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:2C:20:E7:22:BB:FE:FB:B1:6E:FC:34:81:93:94:0A:EE:E4:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9211f58-de5e-3614-8ab9-9968797f1aa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:b0:42:39:1d:cc:b3:59:34:ec:ee:97:0c:1a:21:be:e4:52:
ed:f7:47:ad:6a:fb:a7:87:75:76:85:f2:c5:1b:5f:44:d8:6e:
98:25:1b:c5:d1:2d:43:a8:70:87:8e:41:ea:24:7f:07:be:3b:
e7:83:ad:48:a4:d6:e2:5b:71:e9:f8:57:20:10:0c:82:2f:8a:
0a:b6:88:13:03:00:9f:b8:67:37:4d:9a:74:dd:a1:bb:45:c2:
37:3b:59:72:6d:78:b2:66:a6:e2:1b:6d:51:4a:9a:70:2a:44:
3b:c8:94:6e:0b:ff:ad:e3:99:df:ff:d1:40:51:34:46:30:f2:
16:a3:cd:19:7a:c8:4d:b7:50:63:42:48:8d:da:79:a7:e0:c4:
bd:a4:ce:f6:73:f7:3c:cc:57:9d:d6:99:d0:40:6a:fa:0b:ca:
d8:7d:f1:18:50:04:f7:b5:fa:96:c5:48:ea:83:7d:3f:5c:65:
26:04:db:5d:ae:ba:90:51:eb:29:ae:10:da:8b:9c:67:46:06:
66:0a:48:cd:59:25:8d:6d:9f:27:5d:30:67:68:de:c7:a0:be:
33:4a:de:20:54:af:a2:9c:15:b9:06:af:a1:41:ee:91:e3:62:
43:d7:65:ec:90:1d:a9:7c:ed:b9:78:5f:59:bb:15:57:0d:be:
4c:71:a4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:32 2024 by rpki-client on console-fra.rpki-client.org