Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3e4c1784-00a0-3814-b716-06120e2c4c67.roa
File: 3e4c1784-00a0-3814-b716-06120e2c4c67.roa (raw, json)
Hash identifier: /R/x0HV676c5y+HGviC5s/vq0WjXxqMTZJV5/P2B7lA=
Subject key identifier: 5D:CC:C2:95:86:E8:86:52:FE:5E:54:FB:34:05:31:1C:9E:1B:3F:21
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A010E412D8462D1375C5280
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3e4c1784-00a0-3814-b716-06120e2c4c67.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:01:0e:41:2d:84:62:d1:37:5c:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=96e7cd1b-be19-4d36-a516-c5333ccfae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:8d:cb:30:7b:37:3f:6a:c5:47:43:da:b8:
ad:ee:5b:85:42:41:27:62:cf:d0:5a:b9:39:1d:5b:
a4:9d:ba:70:81:1d:4e:12:50:1d:46:cf:f1:07:09:
ee:e6:30:61:dc:85:8c:33:f2:86:c6:d0:d4:bb:29:
69:97:26:d4:93:46:95:ad:e0:01:01:ff:da:e7:a4:
a3:43:4e:0c:2e:fc:23:a6:a2:55:6c:fc:0d:56:2d:
34:13:9d:02:58:2e:6c:ea:ae:fd:80:2c:c1:2c:3d:
dd:10:9c:4c:72:37:cf:b8:a7:b9:31:a6:1d:9e:67:
e0:3c:24:8a:93:85:03:27:6d:8d:cb:6a:ee:dc:7c:
36:d4:d8:7d:ca:1b:f1:ab:e2:f8:24:68:8a:8c:b8:
e1:2e:28:7c:4a:c1:66:b3:4f:ac:b1:cc:57:96:e9:
ee:68:64:7f:6d:fe:72:2a:ad:ce:f1:6e:63:4d:bd:
26:bb:47:a8:b9:19:8f:f8:2b:d7:70:a8:a1:32:1b:
60:1e:05:44:53:b0:eb:f7:2a:96:dd:8f:35:7f:a0:
15:d4:ba:ac:5d:70:a9:b9:b0:8d:0e:7a:4d:d5:54:
d6:1b:61:7d:5e:1c:9e:25:b2:2d:48:44:01:db:23:
c1:9b:b4:04:3d:ae:c0:93:4c:ba:d8:2d:47:fb:a9:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CC:C2:95:86:E8:86:52:FE:5E:54:FB:34:05:31:1C:9E:1B:3F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3e4c1784-00a0-3814-b716-06120e2c4c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:49:73:a1:83:a7:f1:35:be:07:0d:c3:fe:35:41:74:47:8a:
b0:a8:aa:2a:d8:a2:31:d8:a5:84:55:ef:72:f8:37:66:20:63:
76:86:f5:d6:20:ac:4f:af:cf:cf:fc:8e:bb:e7:d6:bb:bb:eb:
a9:3a:59:79:07:be:b8:ee:3f:b4:6b:b5:c9:8d:d4:be:89:eb:
9c:4d:f0:eb:87:62:0e:71:38:d5:b8:07:2f:cf:d7:01:dd:69:
a4:d7:33:45:9f:e3:53:7e:65:8f:67:f3:7d:20:86:d1:d0:27:
c0:36:62:de:0a:58:cd:fa:98:01:65:31:de:e6:d5:42:54:23:
6e:a7:c9:11:20:84:da:c8:ba:a5:8e:6b:f4:95:7a:b4:77:98:
a3:14:8f:61:72:a4:94:6c:b5:52:a4:27:ef:0b:9d:63:c5:fa:
18:57:cc:7e:e0:6e:6b:d9:aa:a1:7f:35:c2:5a:b2:19:e6:7d:
31:51:26:f9:1a:99:05:84:4c:81:d1:2c:94:1a:f6:ab:51:ec:
5d:45:a7:6d:e1:21:d5:e9:ea:bc:2c:6a:80:9f:bd:78:5f:1e:
ad:be:1d:b3:45:92:9b:28:41:86:04:4a:41:6b:33:da:40:ce:
ae:3e:00:f5:2b:ab:f0:9e:bf:81:5a:7a:ff:7d:a3:20:e5:b9:
4f:71:7f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org