Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/12425776-d318-37d9-916c-cfebe41edea2.roa
File: 12425776-d318-37d9-916c-cfebe41edea2.roa (raw, json)
Hash identifier: Fiqir7Sn2hbDZuFcXuLk3ta5cN9w/PvBkVYE2tuVblg=
Subject key identifier: AA:D6:0F:A5:18:A2:F9:FB:44:45:61:33:EE:09:C3:2C:A9:44:C2:B1
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A25C8401A74FCE97202DA80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/12425776-d318-37d9-916c-cfebe41edea2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:c8:40:1a:74:fc:e9:72:02:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c3b8e014-4ad3-4338-ba31-ea113d3fb58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:26:fb:51:17:31:e2:0f:a7:3f:83:6f:23:
88:11:76:f0:c9:62:86:cd:33:ac:f9:48:50:54:65:
d7:95:2b:08:ae:8b:4d:5f:a8:68:ad:c2:59:bc:53:
a9:e4:cb:c5:dd:ff:d9:95:fd:9d:42:7c:b2:3c:47:
2e:14:04:8a:38:3f:3b:20:50:ab:11:2c:ce:d4:3e:
19:15:f6:e1:dd:cb:5d:d3:e3:b8:21:e7:a6:08:b2:
a3:b0:68:35:ea:90:80:80:5a:e3:c2:66:73:4f:25:
14:1f:22:fe:99:4b:95:a8:51:d3:00:d9:23:40:1f:
1a:32:a4:8f:49:ba:ec:55:3b:b3:70:de:11:37:87:
86:4f:bf:03:5b:04:73:73:96:82:35:1d:46:0f:ba:
eb:a4:24:9c:7a:84:fc:93:5b:db:87:44:f6:a3:9a:
87:33:5c:d5:00:c9:a7:34:75:5a:7c:f8:f1:d4:37:
61:c3:11:95:a3:0f:dc:41:b3:f9:e9:bf:66:28:0b:
ec:8e:a7:53:c9:ac:50:28:c7:cc:17:e5:0e:6f:05:
97:de:f0:2b:65:3f:f6:4a:f6:cb:a9:eb:74:9c:2b:
ee:97:be:ec:bf:24:59:a2:6e:71:5f:9c:5c:d8:b2:
0e:40:30:9f:20:d4:f9:ed:18:e0:8f:b0:c9:63:35:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:0F:A5:18:A2:F9:FB:44:45:61:33:EE:09:C3:2C:A9:44:C2:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/12425776-d318-37d9-916c-cfebe41edea2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:90:de:2f:64:0a:f7:e2:f7:77:83:11:7c:3d:5c:d4:d1:60:
97:63:6c:f5:a5:8d:01:71:90:e6:2e:6a:9d:a3:31:bd:38:51:
ab:1f:c5:df:f5:cd:e0:d6:5f:f8:a5:c5:2b:ea:02:7d:92:c6:
eb:0d:0c:10:1b:9f:2d:ca:ad:ea:e4:e0:f2:72:70:a9:fa:56:
05:e2:d2:9e:35:a8:04:77:bd:45:d4:89:14:bb:25:e6:9b:ff:
00:d2:1a:9d:2b:70:29:8c:e2:aa:41:2d:9b:4d:20:0b:e7:85:
45:f1:c0:49:b0:e1:f5:9f:f1:b2:f8:8b:c7:9f:66:45:42:99:
9c:b8:13:cf:28:14:dc:85:a6:f2:ca:6a:62:65:ba:87:88:de:
02:bc:0b:30:56:c5:ac:da:cf:de:c8:2a:e2:1a:9f:7a:85:bb:
b4:2d:38:18:6b:cf:de:04:78:49:3e:1b:f6:0e:ff:1f:a2:a8:
d5:91:00:ce:22:9b:ed:5a:6d:35:25:e1:d2:14:ad:85:f6:af:
e2:c2:f4:2e:0b:0c:e4:0f:2c:dd:d7:1d:ed:fa:b6:02:ee:07:
ec:98:24:68:fe:4a:d4:7f:b1:17:db:9c:84:c4:b5:1c:c4:15:
2a:1e:f1:94:16:25:99:75:35:9f:94:48:16:f1:32:da:8c:c1:
ec:f7:93:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:54 2024 by rpki-client on console-fra.rpki-client.org