Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5cc4e147-d41b-3bed-8ab4-f13ebe4dcaac.roa
File: 5cc4e147-d41b-3bed-8ab4-f13ebe4dcaac.roa (raw, json)
Hash identifier: NfFXQ5+o6ROsF7fdE91/fY/JYFix9plRwEA/pGn+d04=
Subject key identifier: 1B:53:0A:20:0E:57:51:8E:B6:62:44:F3:3D:2C:7D:2E:0C:66:D0:4A
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584309F28CB26E8F6216E0F07D80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5cc4e147-d41b-3bed-8ab4-f13ebe4dcaac.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f2:8c:b2:6e:8f:62:16:e0:f0:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=993808f6-c3a9-41ff-ace5-e7c155628d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:17:58:0a:9d:bc:5d:71:a3:25:63:a4:41:a4:
6b:b2:63:98:f3:07:17:a4:de:1f:17:69:d4:21:c2:
41:31:e5:de:f6:bd:da:a2:84:0d:df:59:26:6c:47:
f9:7d:83:6a:14:8f:68:f6:57:2b:9c:ef:a7:f2:d1:
ad:1c:cc:2f:62:2a:0e:ec:d8:d5:8a:8d:b3:19:4d:
40:8b:96:89:71:fa:ea:b3:03:ad:49:79:f5:49:0a:
da:5b:80:c9:46:30:a5:7b:ad:38:8a:ac:3e:04:cf:
94:d7:ca:ba:50:7b:56:01:e2:72:c2:86:a8:9d:3f:
26:7e:21:c1:32:4a:f2:b5:76:27:44:96:92:a3:8c:
7e:27:db:e8:1b:29:7e:43:c9:76:66:a3:1f:a0:50:
07:e5:95:ce:20:55:8c:e4:69:76:97:b2:57:58:a6:
14:eb:ca:84:fb:9d:54:aa:ac:fa:fe:29:18:ff:1e:
f5:a0:68:4c:be:b9:28:ff:cb:ed:52:a8:f1:90:06:
1c:2f:64:4c:b1:59:ee:53:f7:c6:32:0f:c2:b5:58:
21:99:18:69:ee:e3:4a:f0:2f:17:2a:90:da:16:81:
dc:cb:95:c4:43:58:ba:45:48:f4:70:7c:89:17:4a:
24:e2:05:ba:a8:d9:31:10:96:2e:2a:85:b4:9b:ba:
a0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:53:0A:20:0E:57:51:8E:B6:62:44:F3:3D:2C:7D:2E:0C:66:D0:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/5cc4e147-d41b-3bed-8ab4-f13ebe4dcaac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:9c:fd:e9:14:10:60:4b:9a:3f:60:f4:e1:d9:e7:0b:d1:9a:
2e:8b:b9:84:61:c8:f7:53:d4:bd:57:11:01:bb:83:d7:53:63:
ba:93:18:bf:be:31:96:9f:f9:42:d8:fd:18:77:17:71:8f:cb:
3d:18:17:87:72:99:1b:ee:63:ef:a5:82:3c:21:5d:44:41:87:
6d:36:ab:4e:97:3b:3c:26:bd:2c:61:53:d0:54:92:0d:32:c4:
d9:e5:b7:99:a2:e1:7e:1f:04:11:cb:9b:8a:f3:cb:bf:8b:ba:
2a:49:ee:20:2d:d3:f3:62:65:af:20:80:b2:c1:7a:34:0b:db:
37:61:af:fb:74:7d:a9:10:73:48:36:6c:b5:23:96:29:6c:32:
bf:ba:bf:cc:19:12:01:51:37:26:a2:66:21:b6:0d:d7:3e:d7:
ca:36:0f:ae:90:0e:c9:cc:bf:1f:e5:73:e5:b4:d9:91:92:1f:
c3:22:b7:96:b4:4c:81:64:71:b7:86:18:51:b9:54:e3:e6:07:
a7:7d:27:a5:8c:0e:ab:a9:38:3e:1d:83:80:3e:0a:cc:c7:79:
cd:48:43:1d:bc:96:8b:59:f3:72:f0:55:7e:e5:72:b0:4d:f9:
d1:0c:5e:6c:06:a9:f5:30:e8:c3:f9:9e:a2:63:2d:4f:87:bf:
89:0c:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org