Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f263a509-04ae-391c-a544-eb77089454fa.roa
File: f263a509-04ae-391c-a544-eb77089454fa.roa (raw, json)
Hash identifier: PAILaMwHFufHHEkjE4RSysUih05Grnyy6hxhWpgU+d4=
Subject key identifier: FB:1F:D2:9B:7C:12:9E:4D:EC:EC:4B:42:16:0A:53:F0:92:81:AC:88
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858430A0725DD50498531BFA733A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f263a509-04ae-391c-a544-eb77089454fa.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 41264
IP address blocks: 104.133.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:25:dd:50:49:85:31:bf:a7:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=86058419-2bc7-4ee1-bc30-998b6e00ba22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:85:85:b4:aa:e6:a0:6d:33:c8:29:fb:9d:
e3:a1:90:4c:95:60:b4:32:1f:81:b8:ae:fe:47:dd:
71:74:36:d3:a3:e6:71:1a:28:4a:ac:48:0e:5e:4f:
15:6a:1f:24:45:6e:2a:d1:5a:7a:14:08:9e:e8:90:
24:46:53:ca:33:cf:6b:78:56:9a:d9:90:02:2c:1d:
25:d9:68:6f:2f:3a:91:73:2c:08:68:b0:d2:ef:4e:
9d:af:ad:9e:ab:a9:09:3b:9f:c4:be:c8:a5:37:9e:
66:08:f5:32:36:b7:89:aa:34:a4:52:af:96:a8:84:
f5:d2:97:0f:9b:8d:22:37:e0:bd:89:3a:cb:02:e6:
67:d5:fb:9d:3f:d9:09:41:59:07:4c:da:bb:5f:da:
5b:cb:94:19:08:64:62:03:9b:f1:b1:1d:8b:f0:52:
73:cb:92:29:b9:84:50:98:1d:e4:aa:6d:5f:c4:b0:
ee:4b:51:42:bf:96:3d:4c:c3:de:a2:91:60:78:9d:
c1:a8:4d:e7:18:dc:57:70:46:04:66:10:c3:e7:d4:
6a:60:c2:f6:46:b1:00:c9:5d:ac:32:66:87:d3:63:
e0:5c:72:08:c5:4f:a4:61:12:4a:d4:6c:67:c8:ba:
be:21:cc:19:5b:63:b6:1b:db:7a:0d:22:70:d1:df:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:D2:9B:7C:12:9E:4D:EC:EC:4B:42:16:0A:53:F0:92:81:AC:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f263a509-04ae-391c-a544-eb77089454fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:c0:19:a6:86:59:fd:a3:e7:02:5d:aa:f6:f9:f0:06:82:d3:
f4:9e:9b:2d:24:c7:b0:96:42:f3:cc:8f:5d:43:b3:ef:a2:4d:
38:5f:47:e0:bf:90:ce:23:3d:3f:71:06:f4:47:5b:53:dc:26:
40:8c:a5:cd:c0:00:f9:8e:ed:28:9b:4d:41:e9:54:e4:1a:5f:
9d:d2:cd:d6:81:3d:cc:c1:3b:c8:d8:a0:b3:85:8a:b5:d2:fc:
8a:d4:7e:9e:64:c3:8b:f9:7c:75:19:80:89:00:ac:66:48:60:
90:c7:63:9f:a6:78:a9:86:50:5f:4d:4c:2f:58:db:85:97:01:
47:9b:64:4e:62:30:dc:9a:82:5d:b9:c6:e4:ac:fd:02:91:27:
2c:54:82:4b:ec:c1:4f:b2:e1:bc:c9:5d:ca:3a:6f:bf:32:d1:
a5:90:a7:26:8b:f6:f0:e7:a1:1d:ec:00:f5:58:b9:87:55:f6:
24:ea:3b:a5:13:a5:5d:f3:93:97:73:8d:1e:07:8b:2e:32:7a:
64:6c:40:51:62:8b:1d:08:be:9e:b1:a9:f6:a5:b9:fb:0a:59:
fe:50:7c:02:2a:f1:a8:f3:96:58:50:10:7b:60:44:9f:f7:7b:
1c:5d:a6:d7:8e:01:01:8c:c4:5b:ff:06:c9:36:8a:ae:2e:67:
3a:c0:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:35 2024 by rpki-client on console-ams.rpki-client.org