Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e9b41f-0e54-3a2e-92b0-a81da09ff778.roa
File: 01e9b41f-0e54-3a2e-92b0-a81da09ff778.roa (raw, json)
Hash identifier: q4YszGGoyOO5SzL5Cia0P9Ez49QBrLoh6OW9/6QauYE=
Subject key identifier: F7:61:77:99:C7:2C:4D:70:CA:47:C6:02:F5:DD:80:EB:20:D7:45:44
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A2073A12839B59EBE7A2AC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e9b41f-0e54-3a2e-92b0-a81da09ff778.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:73:a1:28:39:b5:9e:be:7a:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3c6a02be-46f4-4262-825c-4abd00301c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:25:3c:81:fb:f1:04:9f:a5:0c:07:c1:e9:
d6:51:25:45:9b:a7:63:c8:dd:aa:ed:c1:37:96:d8:
6e:23:59:cf:c9:0b:dd:0e:fa:e4:15:75:e1:be:3e:
a5:ce:45:c5:38:de:13:74:41:00:2e:0f:a3:e6:a9:
dd:b3:ad:b0:81:45:84:07:0e:c0:05:09:d5:71:84:
90:d9:08:81:17:fe:78:c3:87:f7:70:f5:11:dc:17:
3a:ac:27:f4:9b:8e:01:0e:be:6b:7c:8c:a2:19:71:
1b:a4:5e:03:d0:c9:8c:68:c2:17:71:9e:11:68:ff:
0f:aa:20:1d:15:e0:18:d7:44:23:27:44:e5:51:61:
b7:f5:1a:0c:92:48:98:71:da:97:54:8b:28:54:c9:
cb:ce:1b:1b:65:56:27:f1:16:7f:53:d2:53:79:aa:
87:f6:26:b9:e3:4d:cc:2c:75:26:83:fd:cb:bd:63:
7a:09:e4:bb:10:c4:a3:ab:72:2b:e8:d5:c4:73:42:
51:e8:39:c4:5b:ec:ee:8e:b6:d2:fd:65:f2:6b:e0:
7e:aa:76:9d:1a:b0:01:d0:31:42:bb:c4:3e:74:a0:
11:ad:af:d1:0c:4e:84:ea:d2:cd:eb:34:3c:01:75:
fa:5a:04:9d:1a:a4:0f:a1:9e:0c:3c:c0:62:75:e4:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:61:77:99:C7:2C:4D:70:CA:47:C6:02:F5:DD:80:EB:20:D7:45:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e9b41f-0e54-3a2e-92b0-a81da09ff778.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:8a:e5:54:ae:b7:e2:55:5d:db:1c:6d:ba:b7:99:c1:86:57:
e6:01:79:9f:4f:06:17:b2:e3:33:be:49:69:e5:6d:c5:2f:3b:
03:f7:e8:b0:41:5e:e6:70:76:e3:f8:a3:8e:b5:70:46:c4:46:
88:04:17:ef:24:13:15:70:87:dc:b5:61:09:44:ee:88:8b:d2:
5a:29:0a:f3:d3:03:a4:90:c0:43:5b:6d:8e:86:1f:e3:c0:4c:
84:99:92:f6:e5:77:43:c5:04:da:de:96:30:2b:81:68:a2:a1:
d8:7f:20:13:5e:92:5f:4f:52:4f:35:b6:4b:2f:51:47:3b:b1:
ee:39:7d:bd:5c:85:a5:c3:f4:d3:e3:6e:9f:01:83:81:60:aa:
02:c2:78:0a:49:a7:df:84:20:5d:74:84:85:b0:44:6d:1a:60:
ea:1c:a9:34:79:df:28:a7:d5:dc:0e:22:f9:fb:24:33:7c:7d:
1f:fd:4e:5b:09:8f:2f:16:5a:9b:18:d8:a6:cf:25:0d:6d:c2:
22:ed:0a:02:2b:7c:72:b9:7c:40:c6:b4:a5:a6:bf:c8:28:77:
8a:d8:a8:bb:0e:18:8b:00:a2:fe:0a:e5:2d:3d:a1:35:f7:07:
a0:cc:33:a4:66:2f:f5:3d:05:81:ec:8d:fe:03:c7:4f:a9:43:
31:5d:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:35 2024 by rpki-client on console-ams.rpki-client.org