Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d2946a86-ba95-3e11-b062-459f3742ece6.roa
File: d2946a86-ba95-3e11-b062-459f3742ece6.roa (raw, json)
Hash identifier: LbxXxSNQepe5ZdfOGNFmVnjy0GXztqo8Eyn6evhg1yo=
Subject key identifier: 98:A7:A5:26:9D:37:DF:10:4D:64:7A:1D:15:2E:DE:08:32:7C:C8:8B
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584309FA6132CBD671182E4DFD00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d2946a86-ba95-3e11-b062-459f3742ece6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fa:61:32:cb:d6:71:18:2e:4d:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a24117be-865b-4413-a8b7-a0e63891eb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:94:23:b0:09:cd:e7:3f:5c:20:6c:26:bf:
7d:1d:57:fe:2a:0b:04:67:91:30:28:ea:8f:07:04:
a5:f4:f7:99:35:9c:67:bb:00:82:a5:cd:94:3b:11:
74:c0:ae:6a:94:94:b9:d0:66:94:20:1f:e3:77:98:
d4:ea:2e:b9:60:32:3b:a2:c2:7f:e3:29:19:9b:c3:
b7:13:42:4f:8e:a4:54:ff:60:ec:d3:9d:b3:8a:ba:
7d:60:e8:16:65:e6:86:c0:25:e4:99:8d:5b:3e:22:
0d:5c:72:d3:7d:e8:71:45:c4:22:52:9b:33:69:42:
77:e0:34:6b:29:3c:9a:78:0c:29:a2:ac:8b:ae:75:
95:87:e0:48:6c:14:1f:59:42:46:95:7d:f7:de:ee:
2f:9e:bf:89:42:3c:be:c0:e0:49:8d:cd:5f:2f:6c:
9b:7a:e1:9a:be:dd:27:7d:7a:19:c6:36:e0:ec:70:
ac:18:18:2f:58:86:09:b0:c5:38:aa:af:e2:cb:43:
d1:34:e8:be:f3:0d:b4:df:f9:90:8c:cc:72:f1:37:
a2:59:58:53:d0:e6:84:cc:a9:bc:f4:b6:15:4a:07:
3b:64:29:70:41:35:78:9a:15:38:51:1a:86:c1:29:
5a:1c:2c:0c:c5:59:f6:fd:17:e8:cd:42:d7:e6:cf:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:A5:26:9D:37:DF:10:4D:64:7A:1D:15:2E:DE:08:32:7C:C8:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d2946a86-ba95-3e11-b062-459f3742ece6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:95:d1:92:5e:f8:23:47:e6:a7:58:b9:ce:2a:f1:04:ea:96:
45:b3:7d:81:c2:66:d7:db:67:96:b2:84:a9:f9:c0:b7:c2:9d:
a4:c4:f9:f4:2f:fc:a2:5a:ff:a0:c6:b1:4e:cc:41:73:bd:57:
1e:8b:36:e6:da:92:03:2e:3a:2a:df:cd:04:a2:31:1d:fa:48:
d5:2c:78:0f:e3:72:f3:3d:ff:b8:31:9f:3d:87:16:0a:d0:f6:
25:c3:83:bb:d1:36:3d:27:7f:67:73:4a:71:b1:fe:35:1b:a0:
e5:7b:c8:00:2c:da:24:3a:4f:5a:d5:91:d1:5c:39:bf:50:9a:
82:da:e5:88:9a:09:33:0f:c1:d3:e3:6b:eb:3e:78:33:eb:f7:
b2:42:b0:fb:2d:05:9a:73:4b:5d:1c:aa:3f:3c:3f:89:2f:5e:
b1:17:92:4b:8c:2e:b7:d3:2d:53:f0:8a:9b:4c:be:66:fb:52:
7c:05:59:f8:95:05:66:68:f8:ea:92:35:08:cb:34:9e:c9:3b:
86:81:df:73:3e:05:f4:5c:e3:b3:0d:d4:36:78:df:7d:fa:04:
22:39:dc:bc:6c:3f:7a:a6:7c:59:16:c2:bb:6f:18:86:41:47:
81:2b:42:37:64:53:1a:4d:a7:60:19:d4:64:a9:03:23:1c:2f:
c5:37:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:02:44 2024 by rpki-client on console-ams.rpki-client.org