Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/fb05fe9e-b1c0-3dfa-bd38-cf86086dd2d5.roa
File: fb05fe9e-b1c0-3dfa-bd38-cf86086dd2d5.roa (raw, json)
Hash identifier: mif/iEWDrbByh4ksC5gL8vYHX10cEVPiqGtxG4sQm00=
Subject key identifier: 4F:6B:84:84:18:8C:76:60:8A:EE:B5:0D:36:98:AA:A5:C8:41:DC:F7
Certificate issuer: /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial: 010D0C9F432858466E8F33C7B0BE9718801B4F80
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/fb05fe9e-b1c0-3dfa-bd38-cf86086dd2d5.roa
Signing time: Fri 05 Jul 2024 01:00:22 +0000
ROA not before: Fri 05 Jul 2024 01:00:22 +0000
ROA not after: Thu 03 Oct 2024 01:00:22 +0000
asID: 3257
IP address blocks: 104.224.44.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 10 Jul 2024 10:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6e:8f:33:c7:b0:be:97:18:80:1b:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Validity
Not Before: Jul 5 01:00:22 2024 GMT
Not After : Oct 3 01:00:22 2024 GMT
Subject: CN=867484ac-57d5-4741-87f5-785334f6a1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:8f:3b:e9:f1:d8:12:ee:1c:38:5e:6c:de:
d5:59:4b:05:63:58:f1:1c:4b:ab:2f:6d:33:0e:6c:
b1:89:f0:36:31:77:91:4c:ae:6d:17:d9:d7:7f:18:
76:59:1b:b3:80:0c:ff:90:ac:ee:d5:35:73:30:df:
4c:20:b2:7b:52:15:c7:2c:b6:c0:90:ce:1d:1e:d4:
38:bf:1f:24:cc:bc:aa:2d:76:25:ce:9b:cb:f4:cf:
39:99:15:2c:7d:0b:43:b0:e9:2b:d7:cd:23:d1:80:
3c:bf:f7:9a:de:1d:2a:80:af:79:4a:48:f7:cc:e9:
f7:0e:bd:1c:07:e4:8c:3e:45:ae:d3:24:15:c2:9b:
28:3f:a2:7d:30:91:b9:cb:a6:00:4d:bc:ff:f4:a2:
89:d4:b0:a7:02:c9:42:f5:e3:b4:77:34:53:20:ad:
5f:29:12:a2:8a:31:c0:38:eb:d3:91:3d:ed:84:33:
cb:0b:41:b7:a6:e6:bc:47:2f:18:31:06:74:ef:d0:
ea:36:8d:6e:e7:c8:e6:0a:42:99:65:b9:d2:27:60:
5b:4f:1a:58:13:15:4e:17:75:9d:90:d6:05:7a:a0:
98:37:84:33:74:5f:70:27:08:ef:56:29:35:9d:8e:
c7:76:82:51:c2:c2:17:3e:80:51:4e:31:d6:bc:93:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:84:84:18:8C:76:60:8A:EE:B5:0D:36:98:AA:A5:C8:41:DC:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/fb05fe9e-b1c0-3dfa-bd38-cf86086dd2d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
X509v3 Authority Key Identifier:
keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.224.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:64:f2:87:57:2d:12:ea:60:89:e1:f1:f9:f0:4d:ee:95:47:
c0:d3:d2:00:1f:27:3b:dc:49:94:a6:88:6e:0a:30:86:8b:69:
bb:fd:18:c6:4d:98:51:57:ec:de:36:fe:46:2f:54:34:ec:83:
d5:02:cc:0b:98:d7:cb:46:da:d2:9b:d2:67:80:5b:3b:6a:bd:
fb:67:29:9d:aa:97:8f:2c:d2:d0:32:a5:0d:c7:fa:4a:da:08:
c3:01:dd:a0:74:37:23:20:2f:81:42:73:9a:75:f2:b7:3f:4a:
ad:19:de:0b:e3:9b:96:ed:1c:70:e8:55:93:11:f6:57:c4:a8:
f6:1c:ed:b0:0e:c6:61:69:12:82:02:96:92:22:f2:d5:26:0a:
ce:25:69:20:77:d5:7b:a1:d9:10:17:29:90:aa:c7:fc:9a:fe:
6a:7f:8f:53:1b:f7:d7:4b:b8:35:e7:69:2b:88:bd:29:e2:0a:
98:80:21:a7:e3:fa:2c:8c:c2:85:76:2e:c8:11:a1:73:1e:f0:
26:35:30:1e:29:49:9f:e9:fe:b3:53:22:94:83:b1:6d:ee:76:
34:2a:9a:07:24:53:91:6e:be:fb:1b:6b:ba:cd:56:fd:5b:b1:
4c:4c:6a:e7:60:21:fe:5f:2b:d6:a9:b4:d2:83:a1:cc:ea:a1:
79:ba:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:20:56 2024 by rpki-client on console-fra.rpki-client.org