Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/d2474b0e-b791-3634-8240-908afd91b51d.roa
File: d2474b0e-b791-3634-8240-908afd91b51d.roa (raw, json)
Hash identifier: MS91LqhHXbuI8gLdjHf9RgH7Gna69FZaYwBjisYGRdI=
Subject key identifier: D8:A4:2F:38:39:6E:B3:3C:79:81:D5:33:44:A6:17:A6:D8:C0:AD:13
Certificate issuer: /CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Certificate serial: 010D0C9F4328584608A95CA27474D518EE6AA200
Authority key identifier: 96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/d2474b0e-b791-3634-8240-908afd91b51d.roa
Signing time: Wed 29 May 2024 13:00:34 +0000
ROA not before: Wed 29 May 2024 13:00:34 +0000
ROA not after: Tue 27 Aug 2024 13:00:34 +0000
asID: 397750
IP address blocks: 104.232.42.0/24 maxlen: 24
2602:fc78::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Aug 2024 16:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:08:a9:5c:a2:74:74:d5:18:ee:6a:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
Validity
Not Before: May 29 13:00:34 2024 GMT
Not After : Aug 27 13:00:34 2024 GMT
Subject: CN=a381da28-aa5d-4775-91db-18ff46051749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:36:fb:77:85:17:ec:0c:af:da:79:ea:95:83:
e7:09:32:7f:89:ab:ca:67:8c:8e:04:8b:c5:e6:46:
b0:51:49:a0:a8:1a:72:c8:19:13:73:45:10:6a:08:
cc:c6:4a:86:aa:9e:96:6c:18:83:7a:20:ae:53:5b:
18:72:3d:ae:b0:2d:1c:f8:f3:4f:5d:d1:d7:c5:f6:
9f:b6:80:90:26:25:10:83:6b:b7:14:30:55:84:ac:
2b:ae:ea:98:35:97:c7:ae:fb:cf:3e:0a:ea:4b:44:
2f:ca:89:b8:ef:e1:e7:a6:52:95:a4:0d:ac:0d:c8:
7a:0d:cc:61:2b:a7:e4:13:b7:f5:5c:a9:92:07:8a:
82:17:dd:f7:f7:e4:a0:85:6f:f8:bd:30:ab:66:f0:
b2:86:9d:58:fb:0c:26:f8:2a:18:a1:eb:ed:0e:23:
c0:56:0e:37:62:bb:3c:4a:68:ae:3c:13:4b:51:b9:
59:3d:d1:1c:85:2c:a5:2f:af:b7:b5:e1:9b:4f:7c:
db:3d:b7:94:c5:5e:04:71:06:4c:14:81:f9:e2:f9:
5d:e6:1a:3d:0b:0e:b6:63:77:e8:dd:d1:62:27:a1:
c0:ee:63:de:0d:d5:3e:bf:cb:4b:d8:39:c4:fe:b2:
05:15:59:fa:96:f5:e7:7f:83:07:a0:3c:b6:9f:34:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:2F:38:39:6E:B3:3C:79:81:D5:33:44:A6:17:A6:D8:C0:AD:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/d2474b0e-b791-3634-8240-908afd91b51d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.crl
X509v3 Authority Key Identifier:
keyid:96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.42.0/24
IPv6:
2602:fc78::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d3:ff:36:65:46:ad:b0:6d:ab:f2:76:3e:2d:58:d1:32:3b:
69:6b:28:be:e5:ea:a8:c5:ed:d0:a7:ec:88:33:48:27:3b:88:
51:16:a0:f1:5a:ed:e7:4c:71:58:f7:81:c5:8f:ff:62:6d:61:
14:62:d3:fb:c1:e5:10:c4:24:ab:36:67:dc:af:19:61:17:6a:
2b:2b:3f:bf:f3:7c:ed:49:11:1a:4d:b5:97:a2:1a:3e:ee:9d:
80:ac:4c:ee:a4:5e:7f:c2:de:6f:1b:3c:fa:69:f5:f0:e3:a2:
12:85:12:d8:d9:b2:ca:eb:3d:7c:0a:3f:a6:b5:dd:6e:15:9d:
6f:a8:fb:cc:3b:51:b7:8d:58:e3:5c:6e:f4:5d:38:10:1b:cc:
7e:e5:1c:b4:3b:4a:8e:63:ad:61:94:8d:af:ac:6f:30:6a:ae:
5d:9e:a3:f1:57:f8:3f:ea:fa:f4:dc:9a:cf:92:e7:07:8c:ce:
7c:b0:4f:97:78:9c:07:9e:e2:5c:bc:17:07:94:c6:2f:7a:5b:
89:3e:58:1b:ad:fb:ac:03:b3:6d:35:b9:75:5d:57:69:bc:ba:
29:e6:27:5b:90:5b:25:a7:0c:17:7a:df:83:cf:8e:a5:fd:a6:
c9:e1:87:c1:e3:8a:9e:cc:55:62:97:8b:83:b3:ec:b6:b5:0d:
72:49:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 19:33:52 2024 by rpki-client on console-ams.rpki-client.org