Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a11de2f6-f3c1-3b72-a929-1f3d7cd58721.roa
File: a11de2f6-f3c1-3b72-a929-1f3d7cd58721.roa (raw, json)
Hash identifier: wIWAdauTRz5nNs/LEh37GVbttGMwDxIWGQ/2QXTdTqs=
Subject key identifier: A8:2F:93:71:86:6F:39:5E:2A:77:92:01:88:B8:D1:C3:10:29:3E:4F
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584309F3294678763D7813F0D080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a11de2f6-f3c1-3b72-a929-1f3d7cd58721.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.252.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:29:46:78:76:3d:78:13:f0:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=cc38543d-5b1f-4ab6-8812-cd3ea4d6ec8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:12:3b:6f:6a:ee:83:3b:7d:3b:87:d3:bc:
57:4f:8d:2c:26:48:a0:1a:3f:95:ef:a9:50:11:87:
c4:61:13:20:2f:6c:53:ca:ae:49:ec:b4:43:22:9f:
db:a4:af:67:e5:90:64:e7:a2:ab:22:a6:c5:93:54:
59:f4:b4:d1:f8:f5:da:6d:1a:a6:0a:00:4a:ad:55:
18:71:ef:94:10:2e:40:72:a1:2d:f5:df:29:9d:e3:
88:a2:d6:05:d6:97:c3:be:9e:23:7b:6a:ff:03:4a:
cc:a8:69:9a:b2:0d:62:99:f3:2b:3a:8f:0d:9f:a2:
91:d5:0d:82:77:89:af:5b:26:72:a6:b2:fe:91:e2:
91:14:65:c4:76:d4:38:7b:4c:25:5a:d1:1b:8b:eb:
0f:de:8a:b5:91:e9:12:17:c5:41:19:16:05:42:24:
1c:fb:66:8a:ac:e3:2d:2e:8b:a3:f7:cd:a2:7c:ef:
c8:1a:b0:99:8f:b5:ff:3a:44:3c:8e:91:9e:51:47:
b1:42:6a:9f:d5:dd:54:d6:8f:62:d6:58:17:6a:b3:
2c:38:40:5a:1d:69:1c:f6:cd:1f:aa:58:07:e7:bc:
47:91:c3:f3:a7:e8:f9:b8:29:f8:08:e3:57:60:45:
3a:83:f5:a6:3e:a4:44:c4:68:a8:2f:4e:06:14:cc:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2F:93:71:86:6F:39:5E:2A:77:92:01:88:B8:D1:C3:10:29:3E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a11de2f6-f3c1-3b72-a929-1f3d7cd58721.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:16:ff:a5:88:05:d1:49:92:ed:31:37:58:5e:1a:76:33:84:
cb:3a:b4:c0:ad:72:01:c8:64:bb:08:2a:2f:0c:c3:d8:b8:85:
a9:bf:ff:9b:15:20:48:23:2c:9c:c8:37:c3:17:d3:30:14:25:
bd:0c:8e:78:a2:29:1c:2b:dd:d3:69:ae:66:32:63:6d:03:f4:
38:cb:ad:e8:99:77:35:e0:26:b3:69:c3:83:85:2c:66:29:b5:
de:e5:e0:b8:34:f1:94:18:93:2c:9b:31:dc:ef:b6:35:7c:75:
b2:d8:ba:e1:66:19:0a:7b:60:5c:0e:0d:36:80:72:b1:d2:55:
99:09:a1:7f:62:cf:8b:28:d2:36:4f:eb:0a:b2:bc:43:a7:57:
51:9d:e4:da:a7:15:02:5f:b4:7e:a0:44:fc:d7:25:01:85:19:
bb:0a:65:6f:15:82:ac:64:92:eb:35:56:33:36:c6:69:1f:cc:
a3:d7:e3:d8:20:d7:86:0e:e1:30:0e:1d:6f:1a:70:0f:a7:e0:
0d:ee:61:55:c2:02:09:c2:d4:e7:20:8e:26:db:9b:4e:1b:5c:
75:ee:91:7b:4b:e5:af:91:fc:76:17:b4:a8:c7:ff:64:cc:d6:
48:9f:01:60:bc:8c:26:70:0b:3a:a8:ce:3e:fd:6e:21:60:05:
83:19:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:02:44 2024 by rpki-client on console-ams.rpki-client.org