Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/855a9de6-9fb8-3195-9119-f831bfcb0d7f.roa
File: 855a9de6-9fb8-3195-9119-f831bfcb0d7f.roa (raw, json)
Hash identifier: a7cVvc9P9gBBuLNdnNwY0hIMAz94bqXMZocjk7F/qUE=
Subject key identifier: 68:E6:E9:9A:B4:B6:80:39:3D:4E:70:B7:FB:26:CC:C2:CE:58:91:68
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584309EE1B70E092736675678B80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/855a9de6-9fb8-3195-9119-f831bfcb0d7f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:1b:70:e0:92:73:66:75:67:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7f0801f8-32aa-4a07-8cc6-95054664bea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:50:e8:9a:9b:c4:fd:e5:39:38:a4:13:1c:
1b:04:d8:d0:39:fb:7e:9f:3f:62:e6:92:7b:15:b6:
9b:85:54:85:03:9a:2f:4f:6a:6a:d5:42:80:68:91:
d2:6f:3b:af:09:b6:3b:0c:5f:b5:0b:8e:13:6a:96:
c1:62:48:d2:5a:71:49:72:bc:eb:24:36:ff:be:40:
11:24:cb:c3:aa:58:2f:a3:63:51:be:c0:e3:31:66:
93:88:5a:6b:da:b6:4b:6a:25:28:41:99:9c:6c:85:
28:3c:d5:3f:45:d1:13:e2:89:e1:f5:1c:2e:c5:ae:
5c:7b:34:54:88:e5:1e:06:21:90:2b:de:44:1d:00:
d3:68:23:1e:e2:95:a1:2a:08:4d:2d:8e:90:33:3e:
06:1d:d4:b1:03:7f:ec:af:59:68:2a:5f:96:43:02:
ff:04:5e:64:81:9e:3a:02:be:a5:18:37:3f:87:9a:
b5:57:c0:44:ce:9d:ca:e1:d0:13:88:29:b3:80:6d:
bb:16:c1:27:e8:9e:5b:63:52:c5:e1:72:da:0b:62:
79:84:d7:07:f2:27:80:3f:a2:ff:79:d4:07:2a:df:
a5:ec:7e:91:03:47:37:62:de:8b:13:4e:95:36:4e:
5c:81:f1:06:20:3e:85:92:d7:9f:dd:73:79:42:f7:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:E9:9A:B4:B6:80:39:3D:4E:70:B7:FB:26:CC:C2:CE:58:91:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/855a9de6-9fb8-3195-9119-f831bfcb0d7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:01:e8:e5:95:60:bf:d3:4b:04:d5:e1:ac:4c:be:81:62:87:
3e:46:ac:2e:d9:93:4e:0a:1d:4d:f1:e5:e2:28:d2:a6:2d:5d:
cf:28:ce:8b:3c:fe:09:fb:ee:fe:09:c3:18:48:d4:a0:bc:50:
95:8b:c7:b8:63:c1:4c:59:66:8f:4f:36:ae:f4:50:42:ef:42:
55:c2:6d:c6:06:b6:d5:af:d1:43:b8:33:a6:78:07:62:08:17:
53:cc:24:97:50:af:f8:cd:d9:fa:6e:dd:e5:a4:b1:d5:66:3b:
b1:05:95:d9:88:a1:a3:f5:5f:0e:f8:66:96:62:48:ed:15:cf:
2f:67:87:86:5c:65:60:61:42:16:5e:2e:65:d6:a9:30:6f:0f:
aa:aa:d0:a5:ba:ea:17:61:d8:8d:16:f4:47:12:a4:35:a4:74:
9b:c2:dd:3c:03:5f:4e:ea:4d:98:43:5f:32:af:2f:c9:0a:58:
ad:18:1e:44:07:a4:4f:c9:9b:8e:a2:e4:16:cf:42:dc:57:c4:
aa:c6:35:f0:7d:c4:e0:ab:f5:d8:aa:55:71:fa:ff:8c:77:08:
fa:a0:b9:88:4f:80:d7:3a:31:da:41:ed:d7:36:f6:f6:89:43:
5e:08:65:77:49:6f:8d:9a:93:8e:e9:3c:af:d0:05:22:91:0b:
1f:79:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:55 2024 by rpki-client on console-fra.rpki-client.org