Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/016846fa-e9b3-375a-952b-478a4eeb0f08.roa
File: 016846fa-e9b3-375a-952b-478a4eeb0f08.roa (raw, json)
Hash identifier: Bn/EZLqmmHDGIhBqtYLP6EF6IfJhNcHaZ3vWl6e4/8M=
Subject key identifier: 00:24:ED:B0:E0:8F:F4:95:1F:99:28:FA:29:58:35:55:3D:6F:11:19
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584309F39B8E04B3AA054489A580
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/016846fa-e9b3-375a-952b-478a4eeb0f08.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:9b:8e:04:b3:aa:05:44:89:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c9676fae-a609-428b-a008-d40edddc04a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:4d:58:79:8f:d2:5b:6a:0e:2c:89:b6:5a:
4f:b5:ef:34:d8:b6:d0:f3:51:3a:4c:ae:73:67:73:
36:b2:ac:66:c9:ea:49:fd:10:f9:2c:14:2b:fd:fa:
6e:05:7f:cd:43:4e:02:1f:14:30:fe:82:99:8c:3b:
c4:11:a3:5b:63:a9:77:e7:72:c1:63:5a:a5:16:3d:
7c:5c:74:25:04:1c:21:51:b3:3b:83:1b:7d:34:44:
30:09:c4:f0:74:6c:bb:c4:0e:d0:5c:41:a1:3f:1e:
d6:7f:46:fe:3e:a7:86:d4:ce:89:03:cf:c0:2d:b3:
9a:c7:8a:b2:60:dd:b7:66:89:5b:1d:d5:4a:c0:f7:
7e:47:e0:10:69:35:06:3c:75:43:ce:bb:28:58:f3:
3d:81:30:93:c8:1f:81:d6:a2:e9:65:bd:d5:bd:dd:
69:8f:b1:68:77:4f:39:50:40:cd:f8:6e:78:ae:7b:
21:93:7a:f8:c3:31:db:43:5e:ba:14:00:a4:87:5c:
12:43:e1:5f:dd:32:f6:f7:97:0c:91:2a:af:9d:e3:
53:5b:73:0e:59:fe:c0:cb:70:f5:bc:c7:5a:08:47:
77:2c:c0:27:1b:06:2b:64:18:9b:9c:63:aa:7d:ad:
17:34:ed:5b:5b:63:ea:f5:c9:a6:43:a1:12:df:1f:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:ED:B0:E0:8F:F4:95:1F:99:28:FA:29:58:35:55:3D:6F:11:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/016846fa-e9b3-375a-952b-478a4eeb0f08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:76:b6:e5:2e:87:94:43:12:17:c2:92:a3:cb:85:88:5a:26:
23:e8:9e:73:03:f6:d4:08:a0:50:88:00:7e:33:54:07:da:3c:
d2:32:0d:51:6e:82:87:c8:c9:6c:a3:9f:8b:f1:26:63:a8:0e:
b3:cd:32:79:1d:55:ab:95:b9:bd:66:f2:ed:16:d0:61:47:93:
21:49:6b:fb:d8:48:23:7c:17:4c:87:b7:1e:80:18:b2:15:b6:
78:40:73:3f:12:b7:24:b3:93:e0:00:be:e4:5a:0d:99:bf:a4:
90:24:a2:59:59:bd:63:6d:08:5d:ca:d9:dc:08:ad:0b:1b:2f:
65:04:6c:57:0c:46:48:ac:2f:a5:8e:40:d8:b7:c0:8c:7c:ae:
7e:05:00:70:47:1d:01:dd:7a:4f:46:8c:ab:77:d6:39:c8:c2:
26:c4:c2:2a:d0:8e:4a:54:ae:2e:d9:49:b3:48:e6:0c:e7:23:
4f:77:81:13:8d:86:50:6c:12:a7:1d:27:8a:65:0b:4a:ff:10:
fa:e3:a0:b0:2d:b2:22:57:ef:f0:6f:0a:90:ec:72:63:af:c6:
1e:01:33:43:5c:47:8f:ff:41:bc:17:c7:2b:f9:a0:a5:1d:57:
81:ca:3a:6f:18:9b:4b:d4:90:b0:ba:ac:57:20:82:e4:dd:4b:
45:12:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org