Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/29e1ec40-a122-3bbb-999a-2f97cdd882f6.roa
File: 29e1ec40-a122-3bbb-999a-2f97cdd882f6.roa (raw, json)
Hash identifier: 2LyzmuAqaFiM/p0u9SryY6GRedNIpYfaawbLI43E2TI=
Subject key identifier: D2:D0:13:AF:F8:BB:26:65:8C:E8:51:E8:C4:71:17:74:86:EE:3A:75
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584309FB1EBEC779294F0E0D6A80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/29e1ec40-a122-3bbb-999a-2f97cdd882f6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:1e:be:c7:79:29:4f:0e:0d:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=57e28f5a-953a-4636-b7b1-185b04e742fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:37:a8:21:34:66:29:be:43:72:28:41:7f:
f4:aa:e3:59:3b:62:ce:80:ef:d6:22:f6:29:11:57:
fa:66:8e:23:fe:16:9a:0c:bc:1d:72:ce:06:b6:a0:
64:c9:0b:ae:b9:46:76:75:db:80:f8:8d:11:88:07:
4d:dd:07:2f:00:e4:a4:6f:37:9d:d8:8f:72:6c:30:
be:00:0d:c1:c2:5b:56:3c:a2:87:4c:73:2a:d4:02:
f0:2f:a8:36:10:03:80:1c:ae:2d:84:56:e4:ab:49:
70:c4:60:f3:a3:bc:88:c3:3f:c0:6e:f1:dc:6a:2a:
11:a6:2e:e1:8a:54:85:77:54:3c:3d:c9:9b:21:15:
ce:fe:ae:96:b2:24:17:85:58:aa:5a:1c:b9:de:11:
41:98:c2:ca:f1:6f:84:5d:7e:7d:88:73:cb:47:c2:
5a:1b:12:ee:fc:34:3b:e9:8e:4c:f9:e0:92:ee:00:
86:7a:eb:21:97:bd:28:93:61:76:82:f8:ad:4e:08:
9c:b3:13:7b:37:53:1b:b6:ec:ed:4c:fc:11:5a:84:
7d:85:16:e9:6f:bd:be:3e:ea:cd:a8:23:83:60:a0:
76:42:7d:7a:f0:68:5a:aa:7d:2d:7e:40:9e:10:68:
0b:63:1d:25:a6:f5:91:64:83:5e:6d:2a:50:3f:4a:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D0:13:AF:F8:BB:26:65:8C:E8:51:E8:C4:71:17:74:86:EE:3A:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/29e1ec40-a122-3bbb-999a-2f97cdd882f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:bc:4e:f3:42:ab:ab:e4:32:50:07:49:d0:48:da:d3:a9:fe:
20:e3:b5:65:c0:68:42:1c:76:e1:14:f0:57:2e:98:f1:f2:47:
02:cf:b6:8f:66:83:05:26:7b:61:38:35:21:42:ae:db:55:62:
54:30:9a:e0:07:63:64:ed:ee:df:9d:12:19:0b:77:a5:e9:44:
b2:c3:94:84:87:ca:f6:d1:32:68:c3:60:de:84:f6:77:e6:13:
03:41:4f:57:5f:05:5d:3c:c2:b5:52:59:56:c0:e7:3e:8a:69:
4a:22:29:b0:ff:43:b5:70:5a:56:81:c6:74:da:06:0b:19:22:
4d:d4:b2:0e:56:9b:15:7d:3c:e8:11:cb:3c:97:c6:ec:31:19:
66:be:d5:4a:19:5b:09:b3:76:e7:0d:4d:a0:83:3e:c7:b1:2d:
b1:7e:51:8f:26:c4:3f:67:2b:d9:bc:bd:69:d0:28:20:19:b1:
67:47:46:e5:e0:85:0e:bd:17:38:18:9b:15:67:86:92:6f:c4:
c8:b3:37:24:57:92:63:af:ef:cc:31:b1:31:7e:e3:db:e0:86:
e6:53:3e:10:40:63:57:61:d7:7f:82:66:9d:78:c2:77:bf:f0:
5d:5e:60:5f:6b:66:ff:ba:5d:07:f4:48:11:3c:2b:ed:be:9a:
48:a5:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:54 2024 by rpki-client on console-fra.rpki-client.org