Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ed874157-9bdc-33c1-9220-6d7ec40df83d.roa
File: ed874157-9bdc-33c1-9220-6d7ec40df83d.roa (raw, json)
Hash identifier: AH/cRmOI32Xdzylz3aFfgwDkhyCZH3sNqr3kBSj7Leg=
Subject key identifier: 80:47:06:20:CA:B0:1A:49:91:83:52:21:5B:43:DE:36:28:49:8F:70
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A00E8165EAAC6982D37F500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ed874157-9bdc-33c1-9220-6d7ec40df83d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:00:e8:16:5e:aa:c6:98:2d:37:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2e7636e5-b8fd-4a13-970d-4cd96c363104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:65:20:82:85:6d:50:55:fa:94:8e:e3:82:
28:52:a9:9d:7b:e1:69:7c:f4:9d:ca:f2:cd:4a:b9:
2d:24:3f:bf:aa:9f:e1:c9:0a:61:3b:6e:75:d1:5f:
df:3e:51:d1:43:a4:c4:cf:c7:0b:58:cf:d4:d4:16:
94:1a:25:7b:48:b2:7a:c7:e8:89:75:09:48:63:4a:
db:7c:b2:9a:00:ac:16:a3:ee:30:b9:de:f4:54:f8:
a9:f9:f1:08:2a:84:1d:65:8f:65:1d:10:e6:b5:61:
76:1d:58:95:9d:3e:94:d3:16:b7:92:00:6d:22:d7:
c3:f6:36:eb:ee:7b:13:06:1c:21:df:87:f0:56:82:
73:ee:71:4f:b6:9c:cd:96:6e:72:14:f0:a8:64:87:
fb:7d:19:68:9c:fe:e3:3b:9a:a2:cb:99:1f:fb:a1:
70:a6:5e:5c:9e:40:ff:51:e5:09:e3:25:e5:92:0f:
61:06:92:ff:80:b0:5f:f0:23:ae:d9:44:aa:9c:91:
38:b9:0c:07:4c:eb:51:09:38:c7:c1:fa:76:72:40:
65:45:ac:0b:22:92:30:59:38:46:1b:f1:41:68:28:
71:27:23:16:f0:f9:fc:cf:b9:a2:86:58:10:be:e5:
79:75:c8:76:23:2e:c7:4a:d0:52:f7:02:ee:40:0c:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:47:06:20:CA:B0:1A:49:91:83:52:21:5B:43:DE:36:28:49:8F:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ed874157-9bdc-33c1-9220-6d7ec40df83d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:53:ac:e3:2a:a3:ca:b7:b2:2c:1f:31:05:43:9f:22:41:e9:
b6:1a:59:45:ce:21:5d:ba:49:48:99:12:13:b6:22:3c:ca:5d:
99:e6:9d:f4:0d:b6:18:b3:b7:5e:cc:b8:02:5f:c2:6b:da:55:
1a:9b:22:1a:07:29:db:25:c6:2d:c1:03:d9:db:64:24:00:a8:
2f:7c:42:2b:02:4a:99:db:aa:7d:4f:21:9d:9b:62:49:71:a2:
b3:53:f4:d8:92:82:9b:fa:98:d6:30:d8:de:5b:f7:af:ec:cf:
90:75:42:4d:59:0c:11:bb:8c:e9:91:ce:7d:38:e5:52:47:57:
24:91:30:40:53:83:7a:43:ed:a5:1c:0d:45:2c:ff:39:2e:ad:
ef:16:20:b9:8a:c9:1a:fb:a6:21:23:66:a8:c8:1e:5c:e5:8a:
ea:77:78:cd:8a:7e:cf:3e:ce:ea:ad:00:cc:1b:6b:f9:af:6b:
36:12:1b:94:2c:91:86:d7:9a:12:cc:7d:69:f7:fc:4e:e1:23:
d3:34:a8:a2:46:29:b2:da:15:9c:bb:7d:0e:70:d1:b9:f6:50:
8d:ba:fa:49:56:38:f7:0d:91:6b:bc:25:45:27:5f:66:aa:c3:
15:5f:fb:c8:8d:97:d6:2f:0a:9a:16:7d:84:ed:29:68:8e:fd:
6d:33:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:35 2024 by rpki-client on console-fra.rpki-client.org