Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/da645f21-a51c-3112-8967-272fbade39ad.roa
File: da645f21-a51c-3112-8967-272fbade39ad.roa (raw, json)
Hash identifier: m302NAM0YuDMwyaMn7XharWyeg0aO1aWJkUmYgUF/dc=
Subject key identifier: E2:1B:D8:0E:5C:1D:CB:12:26:A3:FD:4E:92:CD:AC:88:BA:BA:63:42
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A06F9405F2A571FD368DB00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/da645f21-a51c-3112-8967-272fbade39ad.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:f9:40:5f:2a:57:1f:d3:68:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a8565e63-53e4-4685-9fd9-a12e17b39e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:4e:9d:e6:39:c0:48:93:56:93:d9:c2:a1:
c9:08:09:53:7b:07:b9:03:6e:60:8e:48:b1:40:b4:
b1:57:dd:6d:a9:62:ae:39:94:48:2c:33:28:d4:76:
65:88:7b:a7:ec:96:83:92:3a:9a:18:94:dd:ab:72:
2d:b2:7b:d5:45:1b:ad:88:66:31:62:67:91:45:b0:
ee:46:ad:00:bb:88:7b:af:70:f2:30:8b:54:7d:69:
8f:9d:31:2e:ec:c0:38:a3:02:c1:40:1c:6f:68:71:
61:68:b4:76:52:b4:1f:81:26:d8:3a:89:49:79:af:
9d:7b:12:26:bf:a9:4e:f6:c0:35:38:59:e0:eb:6d:
77:a1:c1:5a:53:6f:66:4e:fa:2d:df:ab:ff:69:c5:
25:3e:69:fc:fe:43:ff:7d:dc:d2:f2:e1:f5:33:4c:
cd:b9:85:aa:83:e2:d9:08:85:3e:c6:79:78:71:5d:
d3:2c:2d:f1:93:3e:93:7d:df:59:a3:56:0a:ac:50:
6f:52:45:69:4f:7d:b6:f2:9d:85:4b:60:6e:2e:23:
01:2b:63:f5:ff:a2:85:31:6c:20:1f:b0:d9:76:14:
23:b2:75:01:71:fc:ff:03:78:25:f9:18:e6:05:a3:
cc:5b:e8:d5:fd:c3:c6:03:c3:d5:3d:c6:79:83:f3:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:D8:0E:5C:1D:CB:12:26:A3:FD:4E:92:CD:AC:88:BA:BA:63:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/da645f21-a51c-3112-8967-272fbade39ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:08:2c:28:cc:c1:f4:83:25:e1:67:b1:7c:27:d9:b0:60:db:
24:4c:b0:71:67:8d:0e:9f:7f:7c:45:bb:ae:68:8e:3d:26:98:
1b:e9:23:29:c9:79:8a:23:4d:54:20:7f:13:a6:24:b0:40:77:
cf:6b:0c:ba:f9:80:70:ae:5c:de:fd:0b:d9:a2:79:a5:c7:2e:
7b:d6:54:8c:32:b6:01:3a:88:85:25:8d:6d:23:a2:43:49:ae:
34:0f:11:2f:10:e2:4c:7a:e5:38:d7:60:77:5f:54:1f:11:f5:
2f:e0:50:84:a7:5d:f3:3e:f0:2c:cb:2e:da:10:a8:e4:85:63:
8f:43:cd:74:3a:7f:7b:c0:82:6a:e8:33:c2:c0:78:ba:05:92:
9b:2a:43:8d:f8:41:5b:1f:09:67:70:15:bf:c9:32:70:60:d9:
99:8c:e2:33:7c:8c:7f:cc:f1:4f:bd:6d:2c:03:77:f2:d5:28:
79:e7:06:a5:93:15:f3:e5:b9:08:11:f5:fe:41:d0:37:8f:97:
b0:a6:d9:1f:b6:8c:f3:5d:65:cb:ac:0d:cc:34:5d:46:4c:cb:
30:6a:d6:96:8e:50:e0:3c:ec:72:52:da:de:31:e3:24:a0:62:
7e:2b:ac:e3:01:20:b0:3c:da:69:29:b1:98:f8:cf:a8:c1:42:
4f:26:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org