Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/5df31634-15a0-3543-8f3c-471a71906323.roa
File: 5df31634-15a0-3543-8f3c-471a71906323.roa (raw, json)
Hash identifier: nvVPPp5l1uAaImySchSBxWl7LVcWatg9jgpmx6+zkGw=
Subject key identifier: 4E:AF:64:CE:A6:05:46:CE:24:93:D6:DE:DE:8C:A9:4D:75:D5:AF:4F
Certificate issuer: /CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Certificate serial: 010D0C9F43285846CEE018E8BD1331C7608F4700
Authority key identifier: E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/5df31634-15a0-3543-8f3c-471a71906323.roa
Signing time: Thu 08 Aug 2024 13:00:38 +0000
ROA not before: Thu 08 Aug 2024 13:00:38 +0000
ROA not after: Wed 06 Nov 2024 14:00:38 +0000
asID: 22781
IP address blocks: 136.175.20.0/22 maxlen: 23
Validation: Failed, certificate revoked on Sun 11 Aug 2024 13:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:ce:e0:18:e8:bd:13:31:c7:60:8f:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8011fa-f1ae-46c6-9441-2f486e04a6de
Validity
Not Before: Aug 8 13:00:38 2024 GMT
Not After : Nov 6 14:00:38 2024 GMT
Subject: CN=152e89ef-049c-43a0-a733-02e8b4817040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:f8:55:0c:55:b2:f0:b8:32:89:69:d5:91:
d1:e1:e4:0b:b0:3e:e2:3e:a3:1e:66:2a:2d:47:b5:
bb:d0:65:3b:d8:71:61:97:26:e5:37:db:82:25:26:
40:0b:f2:d3:d3:d6:48:c5:ed:21:75:b6:24:71:85:
0d:e5:48:47:ee:de:9d:44:e2:c6:21:b3:10:98:5e:
94:de:60:49:a2:99:03:e6:10:ab:6a:10:38:e1:ef:
4e:5e:b6:de:7b:d3:22:fc:7a:93:da:a7:2f:88:3e:
4a:ee:1f:dc:3e:b9:ae:5c:1c:d3:97:84:ae:8b:9a:
13:5c:79:59:2a:63:3e:3d:e0:e9:62:d3:ef:9c:06:
cd:81:9d:8c:a9:37:56:64:83:86:b9:fa:62:e4:3a:
ee:f4:01:3d:2c:ee:8e:a4:87:bf:ac:38:57:1c:11:
f0:46:85:64:39:d8:20:c7:02:28:97:70:8e:5a:39:
a1:09:95:0f:f1:2f:76:ad:d4:b4:c4:6c:1a:75:c0:
8c:e7:0e:e6:3c:02:99:91:2d:72:3b:51:f9:4a:35:
cf:0d:00:df:41:31:52:80:d1:25:79:b4:dc:08:e1:
c5:fd:db:73:b0:78:8f:3f:de:b9:60:d7:2b:a4:c1:
34:30:0e:05:eb:6a:fd:61:19:18:a4:df:7b:a9:59:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:64:CE:A6:05:46:CE:24:93:D6:DE:DE:8C:A9:4D:75:D5:AF:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/5df31634-15a0-3543-8f3c-471a71906323.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de/4d8011fa-f1ae-46c6-9441-2f486e04a6de.crl
X509v3 Authority Key Identifier:
keyid:E7:88:6B:00:74:2E:6C:7B:B0:09:45:69:DA:C5:32:96:33:5F:B3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4d8011fa-f1ae-46c6-9441-2f486e04a6de.cer
sbgp-ipAddrBlock: critical
IPv4:
136.175.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:46:f9:3a:4c:1c:d7:ac:00:3b:7f:d8:72:29:26:00:14:12:
67:e8:0f:6a:a5:cd:32:0d:d8:06:cc:b4:57:82:ef:7f:c3:56:
1c:18:2b:bc:1a:c6:50:49:78:31:68:b8:9e:de:e8:e1:54:32:
07:1a:7f:eb:17:3c:d7:62:12:33:a0:92:68:1f:7e:12:58:41:
d9:1b:08:34:38:b6:09:58:0a:d6:c0:86:96:53:cf:f7:6b:33:
65:04:e7:b7:41:6c:b5:2c:17:89:30:09:28:f4:24:1b:9d:71:
7d:71:61:a9:68:6e:11:5e:a8:e0:18:1f:4c:43:52:68:e4:ce:
6c:36:27:c2:7c:37:c4:d3:6c:a9:82:f7:a5:c8:99:7e:92:d3:
00:1a:d5:29:a6:07:5d:19:3b:bd:ee:a0:b4:27:8f:31:53:0f:
4b:c6:07:7f:53:9c:9a:5b:84:7f:4c:e2:da:48:e8:a5:ee:fd:
2a:15:75:55:28:44:5e:9f:be:44:c3:ef:65:79:c4:7b:49:7a:
eb:dd:59:0d:41:d2:83:c6:7d:f8:81:45:06:74:ee:41:0c:86:
9d:a6:f9:75:52:29:50:14:40:01:c7:b9:24:79:09:89:ff:32:
9a:a9:8e:5f:06:99:65:b1:93:42:bb:24:18:84:e9:0e:0c:ad:
02:dc:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 17:04:45 2024 by rpki-client on console-fra.rpki-client.org