Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bbcf5231-72bd-3698-9dc8-d91de6b9e955.roa
File: bbcf5231-72bd-3698-9dc8-d91de6b9e955.roa (raw, json)
Hash identifier: as70vzZ64rgCdpCL1UlO/zIB+oK9mdk9a4SYQ2Lxwss=
Subject key identifier: 48:FA:DB:60:73:E5:7E:EC:20:69:6C:D6:50:68:89:52:B4:60:37:76
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584309EBBC1C14FD95F3F173A860
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bbcf5231-72bd-3698-9dc8-d91de6b9e955.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:bc:1c:14:fd:95:f3:f1:73:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=074ad0bf-636a-40da-8705-897aab0b7e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:89:45:6a:a0:43:59:8a:d5:f3:24:95:71:
78:aa:ba:31:67:9d:85:d8:79:34:60:9c:4c:e8:04:
fe:b8:09:c6:b6:60:16:ec:81:df:67:ea:d2:20:c8:
51:9f:8c:53:00:42:8a:8f:fd:db:bd:25:6b:81:cf:
a3:a9:16:dc:e5:ce:3c:b8:e0:31:54:e8:7e:c2:d5:
a3:da:ca:9f:5c:a1:c6:25:10:5f:4a:ae:e2:f9:cb:
e3:08:69:37:5b:81:4b:de:63:d3:b3:d4:11:93:5f:
f9:a9:c2:a6:25:82:98:07:59:18:5a:53:ed:75:a2:
7b:39:05:36:12:c4:61:31:39:53:f6:ed:2b:45:3a:
c1:11:f5:9b:12:a6:c4:01:c7:a8:e8:2b:cb:03:cf:
41:c8:5a:5a:91:42:13:68:47:15:aa:35:16:81:84:
2b:ee:68:d8:ee:91:61:e6:90:0d:a2:d8:43:24:32:
ba:83:2c:76:e2:cc:e8:97:74:2f:39:74:ce:09:ef:
e1:11:c5:57:b5:fa:7c:93:ed:85:f2:79:4c:22:57:
70:4a:1e:d1:4f:62:91:4b:b8:d5:30:eb:ad:c9:f7:
86:16:28:92:7f:5b:80:ca:98:29:00:c7:e8:41:8f:
48:08:96:40:e9:c4:8a:69:f4:b6:53:64:f1:e7:f2:
fa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:DB:60:73:E5:7E:EC:20:69:6C:D6:50:68:89:52:B4:60:37:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bbcf5231-72bd-3698-9dc8-d91de6b9e955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:d1:45:f6:11:01:9f:de:9b:ec:56:e2:6d:b3:4d:61:83:97:
72:32:1d:c6:d3:1a:8e:1a:bd:53:28:a3:3f:64:0a:29:3f:e9:
c5:82:6c:64:c3:5c:e0:ac:54:f2:63:bc:4f:d9:30:6f:41:9d:
39:47:19:89:9f:af:80:40:1e:05:80:26:a7:2f:ff:e8:ef:c4:
30:ec:14:2f:7d:ba:b6:d8:38:f9:8e:85:ee:65:74:f0:83:0c:
aa:76:d2:c7:4a:65:b1:33:f7:9d:0b:79:df:17:0a:04:49:ec:
1e:5d:72:fc:1f:d3:95:4c:cc:11:42:a0:3f:df:24:94:da:4b:
9a:cb:c7:74:f1:85:34:29:45:7c:10:c5:bc:87:3c:fb:77:8d:
90:91:20:a0:7f:99:c4:95:01:33:de:18:a4:9f:93:2b:27:a9:
b9:f8:9b:a7:34:fd:db:d9:50:1d:70:32:3e:77:a2:fc:a3:bb:
0d:44:bc:81:0e:21:e2:53:63:70:16:09:7d:25:cd:98:fe:23:
a2:60:52:da:e2:54:3f:83:76:3d:28:59:77:70:40:d2:1d:09:
1d:d1:7b:06:c0:cb:51:35:ce:27:30:43:bd:f4:13:d8:b0:7e:
07:91:38:46:1d:d0:ac:74:42:8c:c4:02:42:06:ef:a0:40:8f:
f0:45:f3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org