Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/4a6707ee-4d30-30c8-905d-d699ea1f4658.roa
File: 4a6707ee-4d30-30c8-905d-d699ea1f4658.roa (raw, json)
Hash identifier: pHdaqSsFkdZLfAW9n9kwtIMMvny+IljBdwLWw0S01ic=
Subject key identifier: BD:20:77:20:DE:E6:2C:91:20:8E:B1:61:71:6B:32:C8:D5:1E:35:8A
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F4328583D50EFAFFA23B6B308BE736200
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/4a6707ee-4d30-30c8-905d-d699ea1f4658.roa
Signing time: Fri 11 Jun 2021 04:00:00 +0000
ROA not before: Fri 11 Jun 2021 04:00:00 +0000
ROA not after: Sun 23 Jun 2024 04:00:00 +0000
asID: 1239
IP address blocks: 104.223.64.0/23 maxlen: 23
104.223.66.0/24 maxlen: 24
104.223.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 May 2022 23:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:50:ef:af:fa:23:b6:b3:08:be:73:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jun 11 04:00:00 2021 GMT
Not After : Jun 23 04:00:00 2024 GMT
Subject: CN=6c22a69e-0e96-40eb-bee1-d0000d80b632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:de:25:ba:c8:29:46:1a:ea:f5:dc:13:35:
40:df:c7:f3:82:47:33:f3:56:1e:68:3a:75:39:67:
f5:75:f8:87:e1:b6:35:09:58:d3:ea:51:88:b3:0c:
3b:33:60:0a:79:80:5b:70:7c:21:f6:a2:16:8b:be:
25:1a:5a:e1:4a:9f:dd:32:82:cf:db:d1:ce:ff:9b:
1c:4e:b9:37:c0:02:12:27:4a:61:a5:5d:6e:36:f7:
82:55:0d:d9:5f:c8:77:d8:db:e6:85:f7:1f:44:77:
00:b3:e0:bd:3b:59:17:80:74:e4:a5:7d:cf:15:c7:
27:c9:df:1e:aa:23:02:59:58:7d:ff:47:9f:2e:be:
a3:96:b0:26:f1:ff:e9:99:a0:c9:ca:a5:d7:81:38:
08:4c:fb:3d:54:a0:9e:03:6b:9f:29:bb:aa:99:88:
12:84:1c:cf:35:fb:79:ab:91:07:0f:36:be:6d:bd:
44:0d:ad:7c:79:23:27:89:02:48:31:aa:45:e6:50:
cc:70:c3:d6:a8:90:d3:69:ae:9c:02:96:69:e0:6d:
b6:dc:0a:4c:a5:56:ba:eb:62:98:0c:59:7c:9f:89:
26:c2:e8:83:89:90:07:f7:cc:cc:37:55:92:ec:33:
48:30:76:46:56:dc:9a:33:c3:03:7d:0b:a8:7f:35:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:77:20:DE:E6:2C:91:20:8E:B1:61:71:6B:32:C8:D5:1E:35:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/4a6707ee-4d30-30c8-905d-d699ea1f4658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.223.64.0-104.223.66.255
104.223.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:d2:b9:ad:38:7b:e2:04:20:29:4c:19:87:54:d3:9f:43:50:
78:cc:ee:76:6f:13:43:12:d9:98:a5:b1:84:a8:f1:53:bc:54:
70:14:2f:86:64:82:ac:3d:53:79:01:13:79:52:79:71:77:8d:
2f:4d:e6:b3:14:81:1b:16:88:e0:09:0c:6d:d6:7f:10:86:e6:
fe:7e:64:c9:41:c6:42:d7:b8:e2:22:10:89:4f:ac:99:e3:0a:
73:c1:03:75:e3:f9:30:30:07:1f:22:da:a6:f4:83:54:f7:a2:
5c:c4:93:3c:d6:5d:91:2d:67:23:de:4c:17:96:8c:5c:c1:74:
82:67:b9:a9:bf:78:8c:ae:97:04:e6:44:ba:da:2a:02:4f:2d:
15:a9:36:d1:58:c1:f8:2e:54:ea:5a:0b:ed:01:ae:f6:b4:47:
fb:c0:d9:97:63:05:97:bb:d7:b4:3e:40:8b:86:58:cc:c4:43:
b5:e4:aa:8b:b0:6a:0c:ae:cc:d4:1d:c4:20:bb:2e:88:fd:1b:
93:98:aa:d9:fd:a4:1c:93:2b:da:97:a9:bb:a9:52:15:8c:58:
8c:47:48:71:97:06:bb:2b:4c:17:9a:14:7d:a6:e5:6c:c1:48:
42:22:b2:68:b4:9d:5f:f3:5a:cd:fb:a0:18:1b:88:8d:2a:e8:
ab:3c:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org