Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb66fef2-995b-3446-8b0f-261f12e9dbab.roa
File: cb66fef2-995b-3446-8b0f-261f12e9dbab.roa (raw, json)
Hash identifier: kqQT9L9/ZdrRKIOAYWFfXKvNdlkyaU6nbLznA9w0iVQ=
Subject key identifier: 60:7E:D4:72:34:5D:40:0E:EA:BC:A7:88:34:A9:CD:16:CC:0C:42:47
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A0F8CFDDB9E8CB4630FD400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb66fef2-995b-3446-8b0f-261f12e9dbab.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 104.134.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:8c:fd:db:9e:8c:b4:63:0f:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=513a9070-b010-491a-b672-7232c7c891ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:dd:13:b4:3f:f7:50:32:2a:5f:46:d3:3a:
08:c1:b1:58:ae:37:42:ea:95:90:bf:32:cf:d1:12:
14:8e:6d:9b:6d:36:38:f3:e0:3f:23:5f:9f:ab:9b:
81:d3:3c:98:6e:56:a8:c4:08:59:1e:91:cf:12:a1:
21:c4:91:cf:a0:cf:d7:59:83:7e:fa:d6:74:69:83:
2f:74:bd:8e:ba:e9:d7:c7:82:2b:43:96:2c:c4:d8:
61:72:29:fe:af:60:8a:f8:51:0a:87:cc:e2:93:9e:
3a:2d:8c:89:e4:9f:23:8c:05:8d:42:46:f1:c3:19:
b1:ba:21:51:ea:2b:45:68:8d:90:e3:4e:19:da:ae:
e9:6b:9f:5c:4e:68:6d:6d:d0:f8:5f:ea:71:95:01:
0a:f3:81:5f:09:d9:6b:7d:95:79:90:a8:4d:0f:d5:
8f:dc:92:28:17:1a:f1:b6:e8:e7:9d:12:c7:61:24:
b7:e3:dc:4e:b7:5f:ae:5d:2d:71:41:a7:18:98:fc:
2d:c4:2b:d5:03:3a:01:ce:28:81:26:11:ee:70:6d:
4f:26:b9:46:c2:ee:05:01:63:61:96:54:94:63:02:
c0:4d:16:45:9e:3c:f5:e6:c7:83:6b:68:51:86:73:
c2:51:cc:b1:fd:f6:51:87:37:96:5d:f8:1d:6e:e2:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:D4:72:34:5D:40:0E:EA:BC:A7:88:34:A9:CD:16:CC:0C:42:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cb66fef2-995b-3446-8b0f-261f12e9dbab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:e4:8a:9d:5f:25:f0:62:04:ef:66:c7:db:f1:18:80:b3:0b:
fc:7d:bc:da:41:9a:f6:57:a6:c4:6e:b2:53:25:dc:d3:61:ef:
32:6a:71:10:9d:d9:03:d5:35:50:f0:5c:20:ff:be:ea:9f:0c:
27:c8:62:1d:96:73:89:bd:37:d8:15:2b:a9:10:d2:76:7f:ad:
45:60:22:30:11:41:27:77:63:ab:e8:8e:75:4d:cd:a9:9b:a9:
21:cf:5f:9e:78:a9:97:b0:ea:2a:2e:ec:ba:2a:5b:85:d4:c6:
89:67:b7:f5:19:52:22:7b:b6:fe:c7:4c:22:39:62:b0:18:37:
44:cb:bb:f3:12:5c:9c:25:4e:2f:9c:91:4b:d0:cf:e6:ce:72:
32:c6:c5:46:36:5c:f8:b0:78:1e:06:6f:b1:49:d0:57:d1:da:
e3:a8:11:df:3e:33:51:2b:91:3d:4b:23:a5:2e:5c:2f:da:9c:
04:25:cb:75:c4:d0:c1:68:4b:80:2b:a8:2d:e7:e9:ee:15:dc:
8b:25:33:da:4d:b2:2d:15:b0:f4:18:8a:fa:86:e8:aa:f4:18:
90:46:84:16:ff:03:31:ce:50:da:b7:85:a6:ce:f4:91:a9:ef:
9d:ec:3e:7f:58:f9:dd:2b:99:e5:64:59:08:05:26:81:96:f8:
76:c8:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:33 2024 by rpki-client on console-ams.rpki-client.org