Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3147fea9-f85a-3534-8fae-1007d94f1d7e.roa
File: 3147fea9-f85a-3534-8fae-1007d94f1d7e.roa (raw, json)
Hash identifier: nDKm3f/ojFlVSrjjS0NNAweF+B6X2bZR3HbOHyN2e30=
Subject key identifier: D4:1A:33:5E:C4:D9:85:F5:28:08:CC:27:3C:E1:6D:1C:DD:A4:2B:67
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328583DC8BF79B287E95D486A943A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3147fea9-f85a-3534-8fae-1007d94f1d7e.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Fri 02 May 2025 04:00:00 +0000
asID: 701
IP address blocks: 100.37.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 08 Nov 2023 19:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:bf:79:b2:87:e9:5d:48:6a:94:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : May 2 04:00:00 2025 GMT
Subject: CN=6755767f-2546-4fff-aa2d-3c72f4274984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:22:3d:e9:b8:58:f1:bd:e5:ec:10:9f:39:
89:42:98:66:b9:9c:43:5a:c1:de:2c:8d:7a:c2:75:
9e:11:e0:82:03:cf:c2:5c:4b:f1:7a:5a:6b:3f:4a:
44:22:c7:e1:ea:e3:03:03:db:81:c1:03:63:28:d9:
eb:dd:9c:e4:d4:49:a1:02:40:27:e4:1b:f9:36:83:
0b:49:7d:1b:bb:4e:c2:4d:10:6d:47:82:33:6d:d0:
04:7c:7a:2e:d5:f6:05:40:84:6c:d3:80:f4:d6:ca:
32:0c:06:c1:a1:c8:35:99:90:7a:5c:21:3e:26:41:
e3:6f:1e:fa:68:d8:61:0b:fd:69:5e:6d:f6:ac:54:
4e:10:df:aa:1a:34:b2:e6:df:d6:8c:50:29:5f:88:
b3:37:22:5c:bb:b4:b6:d8:86:11:92:6f:f8:a5:93:
16:9c:49:9e:51:6f:17:7c:6c:38:e3:d0:58:f7:ef:
32:fb:25:0e:70:24:c6:9e:cb:64:13:92:79:bf:78:
23:4f:8e:68:cf:83:25:3b:d3:67:51:43:62:3c:ac:
67:38:d5:cb:a4:c3:fd:60:38:fc:d3:26:ec:08:f9:
20:dd:fb:d1:87:e3:f3:6a:3a:dd:c8:e2:be:71:48:
0b:ff:30:89:64:af:ab:63:79:a3:ba:dc:c2:30:e0:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1A:33:5E:C4:D9:85:F5:28:08:CC:27:3C:E1:6D:1C:DD:A4:2B:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3147fea9-f85a-3534-8fae-1007d94f1d7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.37.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:2c:a6:f5:cc:2c:78:5e:81:eb:e8:77:6d:30:64:81:ca:95:
a6:0e:bd:cb:84:ea:de:a9:18:a3:31:10:37:23:ea:45:a8:a9:
07:24:79:30:c9:72:77:c1:65:06:54:6e:96:d1:5d:3e:b1:1b:
e8:76:c6:1b:4c:2a:26:cc:6e:e0:2a:93:16:b2:fa:87:27:a9:
98:1f:0b:06:ad:91:00:63:a4:9d:98:98:7d:d6:ff:44:06:6b:
02:64:35:8d:97:bb:03:ba:5b:97:86:31:34:70:58:7f:82:f6:
9a:5e:1d:51:f8:1c:8e:89:f3:6e:75:9c:03:3f:f1:dd:43:47:
b5:58:87:f7:69:71:2f:49:72:28:ef:ad:12:58:e9:8a:cd:03:
d6:d9:13:75:85:45:d7:76:17:62:02:26:87:d8:26:11:bc:96:
41:cd:e8:dc:1c:e1:12:7f:c9:38:ba:4b:be:6a:28:39:0f:33:
ba:f0:56:5e:c1:3d:47:d7:8f:4d:15:dd:85:f1:e1:50:66:0e:
0c:27:7c:d8:74:cd:6e:2b:08:1b:ed:55:4b:02:30:7c:b1:29:
4b:bd:de:07:96:86:bb:b4:7e:83:ba:02:b1:d9:f9:85:07:ca:
9f:f9:ba:6d:39:fd:31:5e:cc:f6:7b:14:47:76:9a:e6:60:26:
33:ca:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:41 2024 by rpki-client on console-fra.rpki-client.org