Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d7b91b53-d972-3d37-ac41-0da44392db14.roa
File: d7b91b53-d972-3d37-ac41-0da44392db14.roa (raw, json)
Hash identifier: e8vNLD/ij7OemcxBolxDRUjq1TMW1WW5lUuYHPgl5jk=
Subject key identifier: D4:E4:FF:CF:2C:D5:E2:08:69:30:EF:33:3E:07:1B:1D:2F:7D:DD:7A
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A15BF172731CA16B10BF180
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d7b91b53-d972-3d37-ac41-0da44392db14.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:15:bf:17:27:31:ca:16:b1:0b:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f0a6bb15-3963-49c4-bab8-782d107f9377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:a2:95:b6:69:78:95:53:6c:a8:e1:17:3e:
ca:ff:55:2c:64:8c:f3:0c:75:65:6b:55:7e:e2:e1:
44:84:eb:7d:73:34:99:99:3f:1c:9a:b4:36:ae:df:
ac:50:0c:02:c0:19:c4:6c:90:83:10:d6:8f:b9:67:
50:ba:3e:d9:58:8c:19:37:16:01:19:0c:b5:3f:11:
a2:e8:28:6d:55:01:d8:02:9c:f3:c0:7c:73:1f:15:
d7:23:01:8c:91:e2:e0:13:fd:98:8a:7e:c3:b0:57:
88:4a:ec:00:fa:e4:3a:d4:60:eb:ee:59:4b:9d:95:
4f:99:2f:88:ea:7d:b7:a8:b0:15:fc:e4:33:a1:79:
a3:19:90:1b:e4:19:47:fe:be:39:ed:b0:fa:cd:07:
b1:39:26:0d:ec:84:29:9f:1d:a8:57:80:cb:54:f1:
8b:71:86:83:82:4a:80:81:be:1b:da:69:2d:15:f9:
10:e8:78:02:0f:e1:e5:df:ad:bc:38:76:f6:5c:1f:
56:e5:d4:aa:b3:5e:95:2d:64:3e:6f:c8:57:86:b7:
c0:28:cf:37:a5:e4:a2:e6:75:cb:85:66:4d:61:9f:
b7:4f:3d:2c:8a:3b:d2:bc:b4:aa:16:75:3d:e3:d3:
b2:26:cd:bb:1d:68:88:bd:a8:65:8b:94:a3:4b:6f:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E4:FF:CF:2C:D5:E2:08:69:30:EF:33:3E:07:1B:1D:2F:7D:DD:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d7b91b53-d972-3d37-ac41-0da44392db14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:eb:87:7e:e7:1e:a2:79:28:36:ed:cf:fc:43:9f:f3:7a:d4:
6b:31:a4:97:74:36:a8:7a:f5:2c:7a:67:0f:8a:80:fa:e1:7a:
12:72:c9:e1:15:46:11:5a:65:51:c2:9c:48:e4:c2:6a:2d:fe:
4b:04:52:36:cc:fd:33:a9:ca:90:29:f9:d2:0a:fc:74:00:c3:
40:28:44:7a:10:60:e6:b1:ce:14:fe:ab:60:60:ea:fe:0d:03:
1c:91:92:7e:e9:9b:99:46:a4:4b:22:3b:83:e2:f5:70:c4:47:
f5:46:d7:67:1d:7f:3b:dd:1f:69:ad:2b:1b:01:62:cb:d8:d9:
32:20:43:32:d7:5d:b1:6e:29:ae:e1:2d:06:ce:4e:b5:f6:6a:
39:fb:9f:dd:27:d9:60:f0:e0:4e:b6:1a:6f:87:03:ab:dd:1a:
1c:c4:75:7d:51:98:30:8e:93:a1:67:8b:1d:81:f5:bc:78:f3:
8d:39:46:d0:bd:20:88:a8:59:41:98:1b:f4:a7:ee:df:0e:bb:
15:3a:e3:ed:60:08:6f:1c:10:ca:89:b3:45:bc:f5:f5:c1:1f:
8d:fa:60:aa:cc:28:5d:67:39:d3:51:9c:21:80:c3:e5:5d:1b:
0c:61:13:4d:d6:ce:52:3c:e0:2d:52:06:97:ae:54:b7:3a:23:
11:4d:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org