Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75abe74b-df5d-3392-9e94-923b1850a775.roa
File: 75abe74b-df5d-3392-9e94-923b1850a775.roa (raw, json)
Hash identifier: eWOczIDzPNWwtbx/PJkg66GotcHMHQOj1gaQdS8b794=
Subject key identifier: 6C:4B:44:00:72:47:9C:6A:31:D8:D9:D3:55:39:10:94:1F:0E:83:12
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A04213377679AD0300EF7E0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75abe74b-df5d-3392-9e94-923b1850a775.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:04:21:33:77:67:9a:d0:30:0e:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=33cd6f53-46e6-4b58-9161-4d5d0638faaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:88:5d:41:fc:21:d4:fe:20:4c:8b:f1:c3:
c8:ef:98:cf:c9:ba:23:a0:1a:5e:af:23:5b:5d:30:
a9:97:dd:b6:22:de:03:ec:c7:42:d2:6a:42:34:02:
6e:88:4b:d4:36:64:60:d3:e7:d0:ba:c3:fd:36:c9:
70:f0:4e:9d:be:c2:15:bb:8b:7c:a1:0e:d4:5b:17:
17:a6:29:ae:80:0a:28:20:e7:69:22:19:9b:2d:ae:
ac:dc:26:39:ae:a8:37:66:cc:e7:cb:b4:ff:0e:b4:
05:ef:b7:31:9a:da:60:1f:59:2e:d5:80:88:80:1d:
35:d3:23:90:47:3e:bb:ca:93:a8:42:31:7c:c5:1a:
76:3b:18:8a:f2:1b:fe:91:0a:70:e4:cf:44:0a:99:
4d:14:c8:da:1b:72:74:ea:68:14:2b:d1:e5:4e:dd:
ce:cd:7d:f5:1f:05:c5:fa:1b:88:f4:92:85:23:60:
45:6f:2c:40:05:95:df:a0:7f:18:c4:ad:d3:e3:fd:
b4:39:6a:e4:e3:28:6a:b0:04:52:66:91:de:08:ba:
0c:d1:ae:2e:8c:61:ef:ae:86:e6:19:1a:e1:29:61:
57:24:99:0f:ce:42:b0:99:9b:b6:10:87:1b:0a:ef:
71:01:19:a1:31:61:14:5e:b5:38:a0:63:69:83:45:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4B:44:00:72:47:9C:6A:31:D8:D9:D3:55:39:10:94:1F:0E:83:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75abe74b-df5d-3392-9e94-923b1850a775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:a3:b1:a2:ef:bd:f6:c1:49:ad:19:e8:f6:e6:ba:2e:14:59:
db:23:c6:45:42:6f:76:0d:8f:fa:5d:cf:20:86:70:39:fc:f9:
26:6e:ac:6e:de:f2:33:23:eb:53:d7:3f:59:50:aa:c0:0f:2e:
ae:ca:32:a9:7e:c3:c0:fc:9a:cb:01:32:bf:fa:c3:e1:86:9d:
e1:a1:42:ee:ef:e0:14:6d:9d:2b:b3:f0:c3:43:c0:23:38:4d:
66:2e:da:a4:5f:5e:1b:d0:16:98:fe:92:5d:63:9d:75:d0:dc:
0f:9b:17:42:d8:93:89:78:d6:2d:50:d3:4c:87:f6:56:ec:66:
26:8c:67:85:41:a1:9a:8c:3c:48:5a:bd:4a:e8:d1:da:61:f3:
e6:40:8c:22:d4:a2:bf:80:2c:d3:e3:0b:c7:cf:e2:84:3e:c5:
02:79:0e:7b:e8:4f:22:a1:51:b7:eb:2d:21:f2:0a:a7:2c:c4:
0c:5b:3b:0f:26:ee:32:c4:42:55:18:2f:c6:1c:29:fb:21:f9:
32:50:ff:99:2b:da:96:75:78:24:ff:9a:44:a5:82:0d:ec:55:
1b:ff:12:73:5f:9b:59:d5:d1:3c:30:60:f6:01:8c:a3:a1:3f:
bb:7d:2d:f6:23:d8:ce:7a:c5:27:95:c4:6e:51:27:3b:0a:3d:
f1:67:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org