Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dec4c234-d837-3aba-a22f-a62ef717b777.roa
File: dec4c234-d837-3aba-a22f-a62ef717b777.roa (raw, json)
Hash identifier: Xrn7rSekoQkt/4NEY7Yu8M4YxG0SjDJs8dKtVXp3CcY=
Subject key identifier: D5:1B:82:D9:FA:66:0F:0B:3D:D3:74:A4:56:CC:B5:53:41:7D:27:E6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285844A3A12AD9D10F2C44E55E0500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dec4c234-d837-3aba-a22f-a62ef717b777.roa
Signing time: Sun 21 Jan 2024 12:00:00 +0000
ROA not before: Sun 21 Jan 2024 12:00:00 +0000
ROA not after: Wed 04 Jun 2025 04:00:00 +0000
asID: 36411
IP address blocks: 104.135.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:a3:a1:2a:d9:d1:0f:2c:44:e5:5e:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 21 12:00:00 2024 GMT
Not After : Jun 4 04:00:00 2025 GMT
Subject: CN=8b579695-e47d-4395-9118-bffc78920fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:7b:ca:09:19:8d:c7:ca:88:c3:04:39:62:
c9:a8:67:cd:e4:03:85:fc:93:52:62:1c:76:c3:c2:
e6:7e:7b:68:3f:84:53:67:90:63:32:da:2d:ae:9c:
d2:9c:ae:1f:5c:0d:f3:ad:28:63:f2:4d:3d:32:37:
1a:65:a6:66:96:e4:28:97:bf:91:8a:67:a1:41:80:
d7:c0:75:6f:3b:9e:29:85:88:a9:26:7d:5c:b5:d8:
60:15:e8:60:0b:6f:6e:44:0a:0d:22:18:77:35:2a:
ba:1b:86:23:22:40:55:ff:6f:94:43:66:22:d4:59:
d3:18:55:81:e6:2c:b7:4e:9c:9d:b9:7b:1a:38:59:
c4:11:e9:e5:6a:81:1a:55:11:1d:be:d0:f2:09:16:
33:26:e7:d0:1b:ec:25:b0:a4:7e:e4:27:c5:c3:bc:
d7:2d:26:a5:ef:de:c4:2b:01:12:17:29:23:a3:61:
74:3a:d2:64:75:26:d4:7a:db:e4:c6:a7:3a:8b:28:
43:2b:65:bc:f2:fa:41:bc:20:90:8c:ac:fb:2d:70:
22:3f:11:a0:90:e9:e6:bc:b8:e4:0a:35:24:15:9b:
e0:4a:0b:d0:b0:9a:75:1f:d9:9b:e6:5a:0e:be:8c:
f2:20:45:17:df:bd:04:f0:36:a4:a9:3d:ca:ec:8c:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1B:82:D9:FA:66:0F:0B:3D:D3:74:A4:56:CC:B5:53:41:7D:27:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dec4c234-d837-3aba-a22f-a62ef717b777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ab:11:77:29:3e:4e:98:bf:58:89:c3:1b:9e:74:f6:ba:ad:
02:74:54:d7:1b:1e:86:ff:eb:2f:35:91:62:a3:49:ca:bc:f1:
d7:ea:d1:11:79:47:32:3d:0c:ef:ff:de:60:1b:ab:54:97:d8:
a1:cd:a6:5c:46:52:21:58:27:d7:12:f1:b9:5d:e0:0f:65:2f:
83:42:3f:9e:84:73:e3:fe:81:63:3f:a9:54:5e:4d:b6:38:d5:
15:c0:bf:1e:26:8b:eb:bd:c4:f0:df:39:9c:2d:dc:75:16:b9:
0d:a8:d8:83:e1:39:07:93:32:ac:9f:5d:20:2c:96:f8:11:fb:
f0:b3:5f:62:34:88:85:b8:75:a1:62:fc:5f:21:59:a8:e0:09:
02:06:29:b0:44:a7:45:ad:c1:c9:84:15:f8:c2:89:8c:1d:bc:
e2:4a:fe:ce:50:b1:cd:ed:d6:b6:9d:01:24:e0:a1:97:da:d8:
2c:01:70:e5:88:d5:2c:6b:a8:a6:fb:5c:1e:ed:f7:c7:d3:90:
cf:db:f5:b6:83:f4:f9:88:52:bd:46:a7:c8:dd:e0:56:c6:38:
9e:f4:a6:0a:44:8e:3c:25:46:42:40:65:ce:ff:2a:b2:cf:2d:
50:17:2c:c0:56:7e:09:c3:b0:f2:5f:84:5e:ea:4a:ed:c4:dc:
82:53:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:10 2024 by rpki-client on console-fra.rpki-client.org