Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc9ad9db-054e-373d-804e-3abdacb9e3cb.roa
File: bc9ad9db-054e-373d-804e-3abdacb9e3cb.roa (raw, json)
Hash identifier: EatukbgIuwBAKx07aIrYPEDI0LUfjwIAX7cPB05D2Ow=
Subject key identifier: A0:1F:83:9D:0A:AF:16:0C:AE:05:E4:AC:5E:DB:81:28:0D:0D:41:4C
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584309FA568FCECA7BF7C6B5B500
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc9ad9db-054e-373d-804e-3abdacb9e3cb.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.226.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fa:56:8f:ce:ca:7b:f7:c6:b5:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b2a511c8-5c8e-40dd-87fe-f283d66fc757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:73:a5:10:3f:f3:8f:41:9c:7b:24:57:e3:
7a:43:06:99:5f:81:90:fa:8a:9d:96:5f:cc:ba:bd:
bf:88:84:cc:30:44:46:c2:60:9b:7a:8c:b5:cd:66:
94:7b:cc:01:1b:f8:8e:25:89:57:11:df:85:5c:92:
6c:6b:40:1a:e5:4a:27:b6:bd:aa:79:4a:d8:f7:ca:
5a:41:b6:60:28:ed:5e:25:7c:b0:08:ef:a4:30:ae:
be:87:ad:56:2d:c4:4c:9b:c5:14:3c:75:51:e1:3a:
b2:53:38:ae:d6:7b:19:04:6a:30:8b:12:78:4d:eb:
b7:e9:ab:65:fe:6a:ce:c1:d2:e6:c1:96:17:82:db:
85:4a:3c:f9:c1:39:9d:4f:4c:ea:d8:47:b2:9e:95:
e3:bd:97:aa:4d:3d:3f:3d:b8:05:bf:d1:bb:3b:c7:
fd:cc:5a:bf:22:0b:a2:53:f6:c0:14:d9:0a:25:34:
ed:5d:88:d4:62:6f:80:51:4c:6e:fb:05:93:55:ed:
08:72:91:70:41:d8:c8:58:ed:a2:74:8b:b8:39:a8:
0d:c5:5e:e7:a7:a2:07:42:10:9c:3e:41:02:ee:aa:
14:c6:82:cf:66:b8:4b:d4:45:ab:0a:43:46:08:06:
e2:03:2d:cf:01:36:1b:0b:5f:f0:3f:93:bf:c4:b3:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1F:83:9D:0A:AF:16:0C:AE:05:E4:AC:5E:DB:81:28:0D:0D:41:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc9ad9db-054e-373d-804e-3abdacb9e3cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:6b:e0:9b:b2:ac:be:a4:d0:6e:6a:15:f8:72:98:e2:0a:1e:
00:f3:69:87:3a:3f:bc:ab:4a:cc:ec:5f:d6:5c:a9:18:cb:f3:
fc:ce:91:4b:80:5a:d7:25:c3:87:77:c4:52:3f:15:ab:5e:c9:
5a:75:8b:43:f3:e9:fc:9a:65:17:33:fb:ff:4b:5b:80:b2:3f:
a4:7e:80:aa:c1:2e:f9:96:29:5e:bc:aa:76:2a:70:9b:77:99:
6a:5e:78:aa:93:8f:86:1e:ca:2e:da:8c:d8:0b:e0:f9:a0:31:
13:d5:da:db:8b:56:13:13:2e:b4:74:c8:54:71:c8:5b:65:fc:
a1:5f:6e:d3:34:e4:8b:81:1b:28:c9:4b:74:96:de:fd:5d:3b:
79:bf:03:46:08:df:3f:a2:a8:a3:58:a2:7a:31:3d:08:40:a3:
48:ac:c9:2f:5f:3a:96:e2:c0:df:9c:b5:da:f6:96:25:fb:bc:
86:67:79:fb:fb:96:3b:8e:5a:ba:97:56:df:9e:6d:8d:6d:5d:
bc:fb:48:fc:fd:90:02:e7:36:19:f1:91:16:e7:2c:97:93:bd:
8a:b9:27:4d:b4:70:c8:59:4d:8d:f2:f6:a1:21:ec:27:a4:e2:
75:34:02:78:57:2d:8e:fb:ec:cb:f7:4e:b8:fd:fd:4c:ad:14:
ec:3f:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:02:44 2024 by rpki-client on console-ams.rpki-client.org