Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/baafc5ec-df62-364a-a51d-5be53bd544b2.roa
File: baafc5ec-df62-364a-a51d-5be53bd544b2.roa (raw, json)
Hash identifier: DBJqwEu20qZ7Td3EKbH2lUB2g1IPnQOLIskfx1tL4Rc=
Subject key identifier: BC:DD:DF:66:EB:B3:E7:DA:D0:1C:83:19:D2:51:B6:7A:A7:5B:45:DF
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A2221415A1953A805425400
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/baafc5ec-df62-364a-a51d-5be53bd544b2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.90.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:22:21:41:5a:19:53:a8:05:42:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f0a2ce64-0770-4033-b9ba-e707bc3287d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:e7:a5:27:f2:4d:ea:eb:33:d9:11:96:46:
49:a2:56:03:e4:0b:f1:6f:c3:2c:06:51:35:8c:d3:
6a:ab:cb:1c:57:e6:1a:d4:fa:c5:e1:41:83:a0:e4:
04:4f:fd:90:dd:11:71:b1:31:87:82:8f:57:65:b6:
b1:74:e1:c9:0b:d9:d0:ee:18:72:3c:83:f3:d9:0e:
3c:94:ab:f3:28:19:9f:0c:21:fb:e9:11:0b:6c:ac:
9f:5b:c6:42:5c:de:a0:54:da:31:57:b4:e9:b2:39:
d8:34:52:92:76:63:f2:be:96:61:d2:d5:75:3b:a7:
92:6e:37:08:c6:38:59:ce:ff:b3:20:e5:e8:79:55:
8b:30:45:6b:b3:ed:97:26:fc:2f:5b:b6:75:65:72:
d1:a6:89:b8:67:fd:7a:bf:42:83:26:16:d7:bc:46:
97:e3:bb:1d:3c:44:51:26:95:4b:d0:e9:ce:3f:c9:
f9:61:8e:56:96:23:fe:63:2a:77:52:8e:24:da:1e:
7f:2a:07:16:d6:35:3f:72:9c:11:5c:06:0b:58:04:
4e:50:13:22:b4:69:72:9f:33:dc:d1:c5:14:95:63:
6d:42:51:2d:75:2c:ad:98:0b:cb:32:c7:c1:bc:1c:
0f:c4:f9:7a:f8:85:4e:96:d6:f1:9f:f3:ec:f1:48:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:DF:66:EB:B3:E7:DA:D0:1C:83:19:D2:51:B6:7A:A7:5B:45:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/baafc5ec-df62-364a-a51d-5be53bd544b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:bd:f1:a8:14:ff:cd:b2:9b:25:d4:dd:49:fc:4c:52:f8:ce:
a4:b6:43:d4:72:07:fe:d1:a7:12:22:ca:d3:96:de:9e:46:b5:
4b:fd:a5:2c:fe:f0:8f:8c:7c:f9:d9:ef:22:c8:ad:df:a1:e2:
8c:43:2d:f5:0b:0e:95:c7:8a:e9:13:50:9d:f4:4d:68:07:68:
a3:d0:e4:2b:60:88:24:6e:61:34:80:a6:de:50:7d:72:65:55:
e6:12:23:11:9b:eb:89:93:43:b8:5a:19:55:6f:eb:dd:23:57:
6f:0a:87:20:60:ad:f7:a1:37:8f:92:b0:b8:a2:96:cd:4d:94:
b9:08:bf:9c:e8:d2:da:8c:0c:44:70:e0:fe:e1:1b:a6:73:4d:
7b:b4:91:fd:28:21:2a:aa:d0:08:8f:ae:eb:8a:64:d5:bf:81:
5a:92:fe:6b:fd:5b:a1:5b:9a:4a:64:7d:76:df:51:d0:ae:98:
87:37:64:bd:70:fa:49:ec:dd:00:2c:65:fa:40:d1:98:d9:8c:
7e:57:97:cf:32:c6:0e:a3:57:a1:a6:a2:a6:8d:46:1c:48:cc:
c1:76:31:86:8a:0d:a9:9f:f2:d4:b3:69:21:ab:ff:0a:36:9f:
b6:3c:6c:4d:43:dd:a2:db:af:81:b7:d5:04:b7:37:eb:7f:b7:
67:97:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org