Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/a2c0a6c5-ed9f-3c31-a61c-439e10dc8d37.roa
File: a2c0a6c5-ed9f-3c31-a61c-439e10dc8d37.roa (raw, json)
Hash identifier: fULS8AHFeO2n3M7XbS10jGLPN0UYUGtGfGgHPbQpbf8=
Subject key identifier: 0D:12:0B:CF:F5:BB:88:0A:EE:ED:BF:68:25:04:23:87:D8:C1:F6:CC
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F4328584309EF3505A821B5B4D6340C00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/a2c0a6c5-ed9f-3c31-a61c-439e10dc8d37.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 209.107.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:35:05:a8:21:b5:b4:d6:34:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8975961e-b1e3-481c-9510-7719046d97e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:00:33:f1:c9:b6:74:81:30:8f:ec:e9:90:06:
ec:11:d0:62:50:70:d7:80:5a:d0:11:45:fb:06:f2:
ff:cf:3d:69:39:c9:9c:66:e1:4a:bb:51:72:ad:a0:
a5:fa:9c:53:3e:69:46:c7:27:8d:a5:7c:cc:b4:a5:
18:14:e5:7d:5e:c8:46:ef:05:d3:49:b8:fc:22:f4:
73:7f:a2:23:4a:29:d7:53:46:d2:70:ad:80:2c:c8:
e8:9c:0f:26:a6:07:6b:2a:91:49:82:04:24:97:fd:
5c:07:78:7d:5f:06:e1:09:96:a6:0d:57:9c:84:c4:
6b:80:9a:12:5b:6b:eb:4a:a0:cc:87:84:0c:7c:72:
c0:64:eb:90:9c:05:e7:89:91:87:69:88:1a:9f:20:
36:87:2f:0d:a6:e6:fe:0a:cf:ed:49:7f:46:a9:6a:
25:80:9d:14:c2:14:d9:23:a8:54:13:46:9d:21:b9:
ee:d9:fb:e1:d1:3a:06:22:3c:23:b1:7e:88:d7:0f:
21:10:c3:ea:d6:ec:69:32:c2:8f:59:94:48:e1:db:
ff:45:a0:a7:55:7f:18:1d:32:05:34:54:fa:84:46:
06:a6:7a:c9:ce:d8:88:e7:62:09:41:51:3d:0b:33:
bb:7c:5b:89:be:be:35:a7:3e:6b:e0:c4:9e:15:96:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:0B:CF:F5:BB:88:0A:EE:ED:BF:68:25:04:23:87:D8:C1:F6:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/a2c0a6c5-ed9f-3c31-a61c-439e10dc8d37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:24:b2:9b:d2:ae:39:9f:bd:29:35:27:e7:c8:5c:e2:e6:07:
09:d3:90:05:e2:ff:72:12:57:c3:48:64:b7:3f:d3:02:ca:a8:
1b:91:fa:20:e9:8a:7f:07:a7:3c:6c:e0:03:9f:64:44:f0:e9:
a8:30:05:32:1b:a4:24:d1:82:b7:ec:1e:1b:5a:3a:d6:b4:97:
8d:b4:2f:34:02:72:18:ad:24:42:2b:76:fe:60:7c:e1:4e:6d:
f7:f8:c2:5d:d4:c3:30:41:a0:4c:e2:36:29:d7:f3:ac:71:e1:
86:a9:89:53:cb:48:f5:3c:b0:6b:4c:cc:e0:ff:10:df:b6:03:
5b:ea:e1:89:e5:50:cf:c6:ce:f6:b0:bf:49:2a:71:d1:8d:42:
d6:3f:b0:36:f0:7b:a8:5a:c2:47:40:e2:be:fa:b9:c9:ff:a0:
81:10:dd:ce:ec:bd:6d:cc:cc:8f:8d:ee:2a:c8:24:27:bc:05:
2f:92:a2:ce:1d:12:f8:ff:e9:20:a9:25:01:19:5f:4f:92:90:
5c:36:9f:13:72:9e:88:a9:88:6b:4f:98:0f:b2:c9:ee:9a:d9:
0e:ce:53:8e:92:c8:e1:33:48:9e:7e:ed:13:a6:5f:7d:96:f2:
c4:63:0b:fd:3f:fb:a2:4d:7e:e0:79:a0:3a:0c:be:54:4d:ff:
ab:85:6e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:22 2024 by rpki-client on console-ams.rpki-client.org