Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f2885d3e-eb6a-365b-9b2a-26139cc10386.roa
File: f2885d3e-eb6a-365b-9b2a-26139cc10386.roa (raw, json)
Hash identifier: OXzi4TAMn9tAINEH/VtTdP/fScX1DJ+RZmRl1AXDeTc=
Subject key identifier: F4:50:C1:DB:6D:FA:AD:3D:D6:41:61:72:CD:8A:E0:F6:CB:BD:AE:1E
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A2476CEAF004AB2C547E480
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f2885d3e-eb6a-365b-9b2a-26139cc10386.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:76:ce:af:00:4a:b2:c5:47:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=46d950cb-858d-4308-a376-e9c372aa0b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:7b:03:ca:31:73:06:48:5f:26:19:a1:2b:
6a:c4:9e:96:0c:b1:db:a4:a8:f4:b0:b5:e7:ea:67:
c9:2e:4b:18:a0:51:98:e8:4b:c8:c1:d9:d3:61:6a:
b5:ea:eb:22:7d:19:34:13:4e:03:bb:0b:ca:23:e7:
c6:60:18:a0:80:12:dd:ba:e4:a5:e8:f9:38:ad:b0:
ba:5b:3f:70:c3:d5:7c:23:9f:2c:03:9b:8d:f2:c0:
2b:f6:57:74:c6:00:ce:3e:15:6d:82:62:95:e3:95:
c9:cc:47:52:a5:09:e2:1f:cf:cf:0c:50:84:53:9a:
6c:e8:24:35:e2:01:ec:54:ce:aa:71:a6:95:35:df:
84:f2:b8:a0:2b:4c:7b:7f:9b:e3:38:29:f5:0e:79:
8f:a1:f7:d1:52:35:64:62:ac:28:bc:a6:74:3a:da:
be:76:0b:df:d8:64:65:43:32:96:f1:26:59:96:1c:
a3:7f:49:af:cd:a6:6b:d5:6a:76:b2:fd:29:54:04:
d8:8d:63:39:ef:b4:8e:af:eb:44:27:48:e7:4a:97:
25:0d:10:5b:1e:da:ed:b3:72:bf:32:33:64:31:9b:
d5:ce:97:86:5d:dd:15:bc:ed:95:53:9f:e6:8a:c9:
69:e1:9d:f1:f3:24:7a:47:b2:20:f0:e4:ba:e2:b9:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:50:C1:DB:6D:FA:AD:3D:D6:41:61:72:CD:8A:E0:F6:CB:BD:AE:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f2885d3e-eb6a-365b-9b2a-26139cc10386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:0a:d0:5f:2a:3c:b5:11:20:7b:94:fd:1f:c7:65:1f:6c:16:
e9:34:01:f6:8e:72:9c:99:b3:14:6c:ce:fd:73:f7:15:69:02:
f8:c4:89:83:b6:2c:d2:3a:f2:81:16:d0:ef:c2:45:c9:eb:cc:
b9:75:93:42:f9:42:ca:87:9a:83:d8:04:36:ac:27:ff:c6:21:
ed:90:09:b4:ed:ad:d2:b6:bd:44:ab:18:2a:4e:a3:ea:b9:5b:
72:70:25:fd:ce:37:b8:b4:a4:f0:1d:bb:e2:b2:b3:6d:57:9f:
f3:88:31:21:57:b1:12:66:b2:36:f8:ad:92:59:6e:b3:da:72:
52:f0:3e:1b:25:7c:a2:8c:43:27:78:d2:d6:ff:5f:8f:ce:1b:
3e:1c:1b:2e:03:a3:d1:c7:e8:35:b1:09:6a:df:19:f4:64:d4:
64:bc:7e:e8:dd:a4:51:44:99:cd:95:42:6a:2e:02:16:15:27:
98:1c:b3:0e:d9:0e:19:6c:78:3e:67:49:c7:d5:24:d5:b6:b9:
20:33:da:89:df:25:71:03:f4:51:70:eb:74:c8:9f:bf:14:93:
55:b0:ee:87:c3:d0:b0:9d:d2:ab:b9:15:ea:b9:21:b1:4d:ff:
d8:10:35:83:af:43:9f:08:ee:73:fc:fb:53:a8:39:53:ec:bd:
6b:06:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org