Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/05d74bc8-3b76-379e-8522-5f9ceea7559d.roa
File: 05d74bc8-3b76-379e-8522-5f9ceea7559d.roa (raw, json)
Hash identifier: SCuMhJjPYfdIBWUVu6vazRCfJXzsz41g1J8Q/rAaIYA=
Subject key identifier: EE:07:E8:87:5B:8D:0D:A7:4A:F5:45:A8:01:5E:AE:0D:DB:66:C6:70
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F432858470285830674CB5CBF1F88B680
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/05d74bc8-3b76-379e-8522-5f9ceea7559d.roa
Signing time: Tue 27 Aug 2024 01:00:31 +0000
ROA not before: Tue 27 Aug 2024 01:00:31 +0000
ROA not after: Mon 25 Nov 2024 02:00:31 +0000
asID: 20150
IP address blocks: 104.36.80.0/24 maxlen: 24
104.36.82.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 21:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:02:85:83:06:74:cb:5c:bf:1f:88:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: Aug 27 01:00:31 2024 GMT
Not After : Nov 25 02:00:31 2024 GMT
Subject: CN=5ecfdfab-1ba8-4cae-93d3-130e77c88a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:c8:b9:e8:08:96:e4:ab:f8:ce:c2:9d:d0:
3b:e7:52:80:9d:49:ec:de:f5:32:34:b8:0d:36:08:
4a:3b:ee:46:09:50:7c:b5:ae:92:1b:ce:83:0f:e2:
82:64:29:e3:5c:75:b5:1c:33:9c:eb:aa:4a:2d:ee:
f6:a3:39:70:0e:98:de:a3:99:b0:c4:1c:ec:c9:9b:
7e:9a:d8:7d:60:b8:6c:6c:b6:2d:59:2e:21:5d:4e:
68:71:d7:bc:46:be:d4:c8:94:85:b7:d8:28:54:f8:
f8:70:1f:a0:53:19:c0:ab:1f:bc:0a:c1:01:fb:16:
b9:23:2a:1e:42:22:c1:3b:f9:b3:0d:da:c3:f2:f6:
92:bf:ba:d9:ca:3d:01:9b:fb:20:6f:28:02:e4:67:
52:c7:b9:a7:cb:a5:fa:54:ea:08:ca:90:9f:17:9b:
58:b9:8b:16:e7:b9:45:d4:c3:f5:68:dd:06:98:be:
ae:75:47:a4:47:ff:0e:1b:5f:fb:78:59:bc:0e:eb:
0f:0b:fe:1b:c7:44:4b:39:c6:84:0a:c5:84:e0:92:
da:53:09:49:13:9d:90:33:f0:57:d2:05:c1:8d:cc:
cd:3f:52:4a:d3:47:3c:d3:5a:41:74:01:00:e0:2e:
02:72:71:78:c5:00:ab:f8:0a:22:05:55:ac:cb:54:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:07:E8:87:5B:8D:0D:A7:4A:F5:45:A8:01:5E:AE:0D:DB:66:C6:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/05d74bc8-3b76-379e-8522-5f9ceea7559d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.36.80.0/24
104.36.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:6f:28:d8:b3:f8:52:78:ee:f8:42:c5:f0:4f:85:3e:9b:eb:
21:86:e7:5f:90:05:f5:d4:f3:35:5a:9b:95:62:2f:3e:7c:a1:
c8:fd:f2:f4:4a:86:5a:f7:59:86:72:78:23:30:86:2b:48:ad:
53:7f:b6:b5:cc:99:e8:6b:b0:4c:7b:b7:58:6e:0a:47:fa:b8:
44:41:56:44:f8:15:78:a8:8f:b2:43:3c:fb:11:8b:a9:56:ed:
62:cc:ff:bc:40:0a:df:ed:bc:91:df:21:36:57:da:10:a2:17:
af:98:ee:4d:a9:c0:af:c8:31:5f:71:6b:ed:e9:cc:3f:8b:36:
f7:ea:26:74:9d:0c:68:ad:76:2f:0c:ed:be:83:c6:dd:81:c3:
17:5e:66:7f:d7:3a:43:20:4d:f6:cf:a6:fc:f0:fb:ad:c3:23:
86:b9:6e:d5:71:07:f1:55:0e:f3:94:43:e1:6d:d2:31:06:3a:
a6:c8:ee:46:e7:62:8f:fe:a0:6f:b0:3f:16:af:75:04:fc:25:
c5:aa:65:4b:b6:42:59:f0:a9:ac:64:58:7a:3e:85:45:20:02:
d3:78:00:b9:91:e3:f3:db:46:9e:b6:f0:67:30:b3:b4:35:fd:
22:1c:fb:a6:09:0b:df:9d:87:c4:40:25:6e:e0:bc:e1:8e:79:
11:c1:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 01:38:48 2024 by rpki-client on console-ams.rpki-client.org