Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ed98764-0649-3765-bdb7-570ee9edd838.roa
File: 3ed98764-0649-3765-bdb7-570ee9edd838.roa (raw, json)
Hash identifier: 5XUkoxQVZx7uJOEb6x0tgqoTQAMJb/Ms14zRUeziNcU=
Subject key identifier: A1:64:87:70:4A:4A:CB:31:DE:71:DE:34:00:E1:29:CA:C6:62:2A:68
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A11D8FC22215DCFAB122240
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ed98764-0649-3765-bdb7-570ee9edd838.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:11:d8:fc:22:21:5d:cf:ab:12:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=95bafa27-d774-4386-b9a1-fdfb3643a508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:2d:e4:b7:4d:91:62:67:cb:d2:41:8d:f8:
7e:65:9c:7c:6f:38:20:0a:5d:45:74:30:c9:62:62:
3d:bf:c5:8c:fd:d6:41:37:92:4d:70:a1:02:16:5e:
55:ed:b4:17:5a:1c:be:38:52:ec:6d:c1:1a:da:de:
d8:38:c7:ee:ff:57:e5:56:4d:ce:cc:36:a5:68:d3:
93:cf:87:96:ab:16:74:35:9e:31:4c:b0:33:a7:31:
46:8a:08:d1:c7:c5:cf:28:8d:0c:14:91:9c:0a:71:
19:d5:1d:0c:6d:38:11:7c:95:1b:b2:9c:22:9b:8f:
07:33:5d:f5:ac:e4:e1:e4:e8:99:43:be:d5:6e:d6:
15:87:82:d3:9c:59:52:a9:9b:44:4a:5e:61:7c:c0:
08:06:b9:15:e0:37:cf:6e:7b:a1:65:f6:cb:95:21:
f0:7b:9e:3a:b7:3f:86:cd:0f:24:a4:2d:7b:78:1a:
3e:2d:b5:f5:a2:34:77:43:3e:a8:47:bb:89:cb:1d:
f7:6a:07:9e:f1:8e:bb:89:0b:d0:53:a0:2a:bd:6e:
7f:dd:81:d3:a0:df:60:a7:49:5e:11:1e:8f:c4:67:
37:78:99:ca:6a:69:e1:a7:de:9b:33:be:5e:46:de:
0c:f9:d4:79:01:4e:cf:19:5c:b7:b7:a3:97:92:49:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:87:70:4A:4A:CB:31:DE:71:DE:34:00:E1:29:CA:C6:62:2A:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3ed98764-0649-3765-bdb7-570ee9edd838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:5d:eb:f9:c2:98:6c:af:5b:62:8c:aa:89:83:95:97:a7:55:
00:dc:af:64:85:cc:9e:28:f7:2d:c1:2f:56:e3:3e:a7:d7:dd:
eb:6d:16:7c:8a:7e:5e:a4:d7:cb:8e:83:f2:e4:1a:74:1e:ca:
e3:3f:de:6b:64:37:14:0e:b3:6a:e2:76:2a:98:6f:95:0b:51:
b9:00:11:f3:fb:cf:0c:7d:19:e4:e9:e5:8e:4a:f0:bb:12:94:
33:fc:34:4c:6d:e0:af:ee:b0:f6:f2:47:41:67:42:fd:8c:e0:
88:c3:81:dc:40:ed:e6:b7:9a:76:e7:a8:d5:8a:68:ac:7b:76:
ff:d9:f0:fb:a6:83:f2:32:eb:de:2d:c9:6b:ff:4c:70:35:91:
3f:24:4e:3b:bc:f6:64:bb:5f:84:c0:09:f8:1a:e9:dd:f1:9b:
de:63:74:b3:4e:c7:c0:72:9a:2d:79:4a:97:a5:31:a9:d6:4f:
51:97:bf:f5:28:3c:99:0b:fe:0b:fe:72:ee:68:f9:22:6b:70:
13:f2:d9:a1:74:51:e9:cd:84:8a:3f:84:01:2d:4f:58:c7:88:
11:a2:54:77:95:78:d7:81:2c:ac:e2:53:dc:1b:8a:a6:d8:e6:
d7:1c:0d:4e:c7:e5:0d:6e:46:95:81:b7:a6:29:f9:99:b2:76:
bc:f5:36:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:02:42 2024 by rpki-client on console-ams.rpki-client.org