Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f72e7350-6ed6-39df-80d3-8ed12d4ec97c.roa
File: f72e7350-6ed6-39df-80d3-8ed12d4ec97c.roa (raw, json)
Hash identifier: UbG6ushLWfhZFHXSEjiIJ5nqKIM6cMce4d+ovEuaevc=
Subject key identifier: B3:56:89:E4:8B:C3:C5:CE:18:FF:23:3D:32:BE:31:C9:D3:AD:EE:D7
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F432858430A169F0C4890938A2B24CC80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f72e7350-6ed6-39df-80d3-8ed12d4ec97c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:16:9f:0c:48:90:93:8a:2b:24:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a59de57c-a239-430b-b29f-de9848932af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:e8:f1:59:9a:aa:06:64:df:2d:af:a2:46:
d8:66:3a:2b:56:76:ff:13:9b:b1:35:52:74:17:de:
d8:ce:c5:a4:4b:46:3e:2f:ed:9b:4f:25:95:ee:6f:
12:7e:1d:8a:c7:68:1a:88:24:62:49:48:df:ba:94:
2a:19:0e:25:d3:db:f8:f2:1a:09:20:80:b2:c4:e2:
c9:a9:6b:15:eb:63:1c:8c:cb:90:aa:f3:3e:ef:b5:
32:fa:4b:36:b6:87:6b:51:5a:07:ed:01:90:e8:f0:
c8:57:de:b5:45:5e:f8:c4:12:f7:64:ee:a0:04:e2:
22:d8:0f:a8:90:16:dc:01:e2:6c:81:47:01:28:4c:
6a:7c:8b:98:68:ea:c4:85:8a:47:a9:2b:c0:fe:55:
5e:0a:45:7a:50:e9:26:16:9e:3d:d8:92:53:5c:10:
25:6c:00:99:3b:79:d6:58:f8:ff:61:f1:00:16:49:
9a:0d:ac:18:5d:01:94:a2:49:88:bf:11:62:f3:07:
d7:2e:66:89:2f:fc:b3:3a:58:cf:52:6d:cd:8c:67:
52:77:bf:00:8c:c7:b6:56:17:83:69:7d:71:8e:f4:
a6:21:e3:9f:e9:dd:8b:14:35:dd:b1:e0:2c:16:d0:
82:af:cc:46:f9:c0:12:82:a5:74:8f:cb:21:e5:d4:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:56:89:E4:8B:C3:C5:CE:18:FF:23:3D:32:BE:31:C9:D3:AD:EE:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f72e7350-6ed6-39df-80d3-8ed12d4ec97c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:a3:00:44:1f:00:cd:dd:3f:bd:b1:4a:b7:72:e5:55:14:ac:
a3:34:cb:38:1c:b7:de:e1:c0:39:9c:e1:d4:e9:76:7b:b3:e7:
3b:a2:ac:6c:79:76:21:39:7e:b4:14:43:c5:24:f0:b6:8c:e1:
01:a0:9c:0a:2d:f2:37:c3:96:3f:e3:bf:49:11:c1:15:a1:92:
98:05:97:aa:ee:32:48:87:7f:8b:ad:73:ca:f6:3f:13:80:2e:
a5:f5:ec:b5:df:5e:77:f9:64:c1:c7:ca:29:b4:4b:34:40:77:
32:eb:61:43:e6:18:b1:13:02:9b:46:ff:79:02:0e:01:6a:16:
8f:a0:6c:e9:e9:e9:d4:32:ac:57:85:61:e9:c0:55:a2:e7:b7:
5e:0b:43:55:81:92:8c:f6:8f:3c:d3:22:cb:d0:cc:a3:d5:b0:
9e:ec:e2:32:e7:54:3a:5a:6f:c1:ea:a6:6e:b6:2d:df:c4:af:
0c:b2:75:f2:dc:58:41:44:f8:f4:f0:25:e3:cd:7e:29:6d:c7:
04:57:04:8f:3b:82:d3:ec:ee:f5:77:f1:ec:00:78:54:e2:1d:
33:57:90:e7:aa:1e:1c:c3:01:1f:3f:85:ff:49:64:a9:38:57:
77:01:45:4e:b7:13:20:e8:5d:b2:82:cc:14:45:2a:36:30:a8:
07:1e:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org