Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fc5daf2-2664-3acf-afa7-30d33d4c6d1b.roa
File: 3fc5daf2-2664-3acf-afa7-30d33d4c6d1b.roa (raw, json)
Hash identifier: W7eTJX4WHLTO3thWN/SGqPvTotnUAYhW4n3kUToEcSY=
Subject key identifier: 3E:13:7E:96:DF:0C:81:7D:A5:26:8B:0C:DB:DF:1A:B9:5E:04:1E:9F
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A1295D0EEE9463D55AB9600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fc5daf2-2664-3acf-afa7-30d33d4c6d1b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 64.9.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:95:d0:ee:e9:46:3d:55:ab:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f08c9e1b-735a-44af-b201-a056c367ca5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:fc:1f:bf:55:88:7d:78:0e:12:3c:8b:5d:
82:e8:da:e7:05:8b:e0:b3:05:e2:e7:45:eb:a5:7d:
b3:96:2c:74:2e:af:f5:00:b6:09:23:50:67:6a:c0:
b1:fd:f3:4d:f1:63:be:dd:16:b1:b4:18:bf:b6:63:
82:8a:ec:29:b5:2d:e1:d7:24:f2:27:cb:a4:c5:e6:
0c:ff:40:0b:eb:92:c6:d8:a9:2c:d2:7e:61:1e:7a:
f6:4d:f3:81:9c:bf:bb:45:a9:58:0d:fa:fa:57:dc:
49:2d:29:1a:3a:9f:70:65:f7:44:04:fe:a4:bc:41:
99:29:e8:78:f0:74:7c:52:1e:a9:83:7b:35:fb:7a:
e8:17:4c:5b:0e:17:3c:dc:20:e1:86:c4:ec:d6:44:
27:a5:e5:25:85:ba:fe:59:98:8b:d9:f3:b8:e2:6a:
11:7f:d2:50:7d:5e:ff:a3:37:40:21:5a:53:da:b6:
fd:f2:27:08:ce:3e:af:9e:25:55:68:ea:24:02:8f:
8b:5e:a6:d7:4e:2d:8e:e9:e8:3c:ff:66:95:17:45:
7e:da:18:cd:48:d5:d4:36:48:2e:4a:74:a5:28:c1:
61:ce:8b:7d:81:fc:75:6d:40:39:99:cf:2b:ef:2c:
ed:b4:6a:69:fe:52:51:27:6d:56:d5:ce:43:70:53:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:7E:96:DF:0C:81:7D:A5:26:8B:0C:DB:DF:1A:B9:5E:04:1E:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fc5daf2-2664-3acf-afa7-30d33d4c6d1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:11:41:1e:0b:40:46:89:e7:26:2b:36:f7:57:40:3f:74:57:
68:63:20:2b:84:c0:95:c1:96:55:b0:48:19:c1:ac:f8:30:c2:
88:a5:12:99:81:41:01:59:70:80:f8:74:a1:d8:b3:4c:3b:cf:
f6:37:e0:da:72:ef:55:4e:7a:be:14:4e:52:14:6e:34:2f:3e:
e0:06:53:67:62:5a:bf:6e:78:76:35:48:cb:6e:78:a5:01:ed:
83:e3:28:3f:df:f1:d1:f6:80:b7:ff:f0:0d:1a:6f:34:cf:80:
fa:87:76:71:07:4d:32:b9:7f:8d:7f:ee:99:d8:80:10:20:2e:
5f:3b:87:5b:45:08:b6:5f:22:fb:a8:30:48:85:be:26:7d:cf:
4f:37:cb:69:9d:d7:32:2a:fc:17:52:e0:19:e8:cd:cd:3d:a1:
fb:3e:9b:db:7a:df:8d:95:57:f6:fb:09:cd:4c:ae:63:d5:32:
ed:8c:36:d5:e4:b3:04:3b:6d:bb:5a:e6:58:98:0f:d8:be:83:
13:9f:90:86:d6:02:64:44:56:02:58:6c:fc:10:f7:d8:96:72:
ec:90:bf:1f:d6:a5:36:c5:be:cb:12:b4:c4:0a:6b:d5:35:87:
55:cd:84:58:70:09:1e:de:c6:3c:5c:5b:5f:f7:9c:3c:f9:08:
03:a4:e8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:55 2024 by rpki-client on console-fra.rpki-client.org