Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ecb7f95f-9e73-3767-85df-c8625078211e.roa
File: ecb7f95f-9e73-3767-85df-c8625078211e.roa (raw, json)
Hash identifier: AXpdLh7iu0Yj7zxYszFOkyBwx2RgQAueHAQOQlgrLtI=
Subject key identifier: 72:C8:BD:0C:70:ED:D3:7E:08:EB:E6:8E:C3:45:FE:13:2D:72:1C:C9
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F432858430A18C12A8F2516545BF7C300
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ecb7f95f-9e73-3767-85df-c8625078211e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:c1:2a:8f:25:16:54:5b:f7:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c16c4407-197e-4de3-b1f8-6582c5ced96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:e3:4d:e5:e7:3d:b5:76:bf:ab:37:bd:6b:
dd:f5:c9:d6:c9:f9:75:c6:30:6c:3a:92:58:f5:5e:
84:71:48:4e:ed:4f:49:51:29:1c:86:ad:a9:d0:ee:
7d:fe:55:53:b8:fa:13:7d:8c:e2:7c:d9:b0:23:1e:
8b:a1:c1:56:e8:c3:c5:a3:51:8f:93:68:8c:1c:2a:
62:83:61:ab:ec:19:fb:43:af:b0:f8:97:01:5f:1b:
e2:af:ec:44:dc:9f:73:90:4e:3c:7d:13:9a:72:05:
01:d1:c9:9e:19:19:8c:a8:94:a1:4f:a4:95:90:70:
bf:fb:9e:31:34:c7:83:e7:db:25:1a:02:d7:6b:65:
84:62:db:f5:82:62:34:44:7d:d2:74:8f:f3:0b:ad:
14:61:44:28:e2:71:0f:e6:d4:20:50:d8:85:26:e6:
9c:3f:3a:31:be:00:4b:a2:bc:68:33:3a:f8:1e:13:
31:d0:81:7f:9b:fd:03:7a:7c:6a:61:a8:a2:a0:52:
fa:49:73:4a:e4:0c:07:8d:a4:cc:70:88:71:9f:8c:
eb:7d:2c:54:d7:a8:19:d6:9d:4c:0b:93:56:36:0f:
f3:90:9f:f9:28:05:3a:19:43:75:40:e8:fb:94:ec:
38:b8:8d:cc:69:53:0e:2e:fd:48:91:aa:f2:2f:78:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C8:BD:0C:70:ED:D3:7E:08:EB:E6:8E:C3:45:FE:13:2D:72:1C:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ecb7f95f-9e73-3767-85df-c8625078211e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:31:69:2f:eb:ab:ce:45:1f:a9:d4:b9:70:11:b3:53:9a:00:
27:10:af:f9:38:31:f2:ea:cd:f4:95:ba:11:e6:4a:79:3b:7e:
a2:c0:ce:0c:40:93:74:82:3a:2f:9f:46:65:1a:56:b7:6b:89:
a2:8a:7e:53:40:ab:69:3d:ec:6c:be:11:aa:47:a8:67:4b:19:
8c:cd:a2:5f:d2:bb:a7:f3:98:00:2e:97:8d:bc:3e:90:ee:89:
3f:25:7c:6e:25:18:9f:08:41:c0:7c:11:38:42:35:f6:a6:03:
3d:fd:50:80:75:70:a4:24:5c:f9:7a:13:67:3d:6b:04:70:a2:
fe:e1:3e:36:45:9b:81:09:b2:10:a7:d1:7b:71:cf:77:71:f3:
ff:b9:00:c1:82:d3:d4:a7:79:fa:a5:65:4c:aa:2a:01:38:ca:
5e:0e:ba:3a:69:a4:3e:b9:1e:51:0e:2f:88:d1:49:a5:aa:44:
7d:66:57:0a:20:b8:24:db:13:b5:19:fc:e6:a8:d1:03:c7:bc:
d5:ba:34:f3:37:eb:58:87:be:72:a8:3e:69:e3:a7:10:c7:e6:
ee:ef:e9:6e:ef:ee:6c:a2:3a:64:98:4e:ff:4e:79:c5:b5:a8:
41:e4:0d:0c:24:91:f7:f4:ac:0a:82:26:80:a5:7c:e7:06:bc:
e8:7d:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org