Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/af5dc11d-030f-3cae-8280-fed2fac604b9.roa
File: af5dc11d-030f-3cae-8280-fed2fac604b9.roa (raw, json)
Hash identifier: wQrbymWk8S9CkUbuQ+hIGg4n/gCYil6g86hZVoLMmsw=
Subject key identifier: 4B:71:80:42:F1:16:D5:89:AD:3E:30:94:E0:8F:4E:E1:21:8C:CD:5E
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A0B1E1461EFE4322F447FC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/af5dc11d-030f-3cae-8280-fed2fac604b9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:1e:14:61:ef:e4:32:2f:44:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8a19cc88-0b9f-4ba6-b928-277ee90c2187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:7b:f8:94:26:69:98:a1:b1:21:bb:5a:d3:
3e:2d:20:ab:86:41:80:66:b7:77:c2:0c:e5:54:c5:
ee:90:e5:5c:bc:b9:49:4b:fe:cc:89:12:96:c6:2f:
5f:89:a5:b9:dc:08:ef:1d:2c:77:0e:d3:27:e3:99:
d1:be:c2:a6:f9:89:15:b3:4c:48:fa:67:c4:40:0b:
fb:00:9a:60:47:70:6e:4f:0f:38:9a:8d:84:c6:af:
78:a3:f4:f0:26:b3:9b:06:62:73:ae:58:aa:31:ce:
f4:4b:82:c8:5d:25:b1:ab:82:26:1b:a3:75:06:9f:
a5:85:1c:42:57:c7:d9:f0:cd:06:15:d7:6b:74:34:
fa:c7:c8:03:cf:a9:2d:dd:c4:ba:0f:e6:ff:b5:e1:
d7:5b:80:e6:04:c5:e5:71:2b:ac:06:b9:cb:1c:f0:
4e:d9:90:26:39:1b:04:46:71:bd:86:a8:5b:20:5b:
d4:d4:9f:ff:f9:cc:2a:d8:84:c9:56:cf:b1:61:e9:
62:6a:7d:9f:af:9e:64:86:63:b3:ac:5c:7a:0e:a6:
d7:a1:cb:30:60:d2:4f:fa:8a:0b:b5:04:4b:30:07:
35:2c:e4:9d:e4:4a:08:92:55:ba:cd:c4:d9:05:57:
2b:9f:85:40:55:44:54:2a:b3:14:78:65:a6:e3:6f:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:80:42:F1:16:D5:89:AD:3E:30:94:E0:8F:4E:E1:21:8C:CD:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/af5dc11d-030f-3cae-8280-fed2fac604b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:00:28:93:7f:9d:f8:dc:fb:63:95:71:fe:b8:c4:85:6e:90:
97:3e:33:a9:c1:43:36:4a:a0:e2:cd:b5:59:c2:1d:43:80:23:
76:d4:35:ab:2a:ca:dd:3a:92:9f:bf:f1:28:ab:39:e8:63:b4:
7e:72:94:43:b1:3a:c3:51:2d:0b:9d:49:96:c8:f6:c4:6a:7e:
d9:ae:d7:76:57:02:40:38:d6:b1:98:84:c6:46:7c:3f:ad:4f:
d9:fc:89:fd:4f:a5:ea:0a:95:1c:20:a8:a8:e4:5d:33:a0:12:
78:4b:30:43:b5:da:df:13:e5:83:ef:7b:93:05:c3:fb:8f:ae:
1a:b4:6f:f4:77:2b:b5:b8:d9:ee:be:ed:f5:69:2b:bc:87:b9:
1b:bf:37:42:ba:2d:22:0c:13:8a:21:93:9c:e3:b2:fb:0e:de:
69:4d:6a:7c:ee:79:52:22:b3:be:6b:11:30:ac:34:ab:4e:6d:
37:c4:2d:c0:f2:80:9e:8d:0d:63:ba:d6:17:84:c9:f0:77:4a:
38:97:b5:51:1f:fb:10:f3:44:3f:a7:6a:78:75:b0:d5:5f:13:
7d:27:86:9c:99:c6:2a:fb:e0:98:44:25:60:50:3d:25:2d:b7:
c9:b3:09:0a:8d:85:a7:63:ba:73:43:d9:96:fc:85:ca:28:65:
e6:cc:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:27 2024 by rpki-client on console-ams.rpki-client.org