Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/068fc12f-0f1b-30a3-9f24-60d9d5c48f38.roa
File: 068fc12f-0f1b-30a3-9f24-60d9d5c48f38.roa (raw, json)
Hash identifier: kA2+EPouPE8U9EiUmZeTsPEajeRlc3AUms1LjRsjo4U=
Subject key identifier: 1B:9D:A3:A7:2A:1D:A1:17:74:77:42:D8:18:FD:3D:29:76:DD:9C:80
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A149FF836941678523B5080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/068fc12f-0f1b-30a3-9f24-60d9d5c48f38.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:9f:f8:36:94:16:78:52:3b:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7018a032-4b48-44aa-835d-e79b0644a003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:2f:55:05:3a:c4:08:c8:7b:52:80:b6:9c:
47:51:b4:e9:0d:ec:a0:9e:0b:8e:b1:5d:6b:70:b0:
a9:b3:87:92:4e:17:3d:8c:8e:f6:ea:f7:4c:04:80:
be:5e:7c:b4:ea:44:9f:8e:87:f5:16:c2:97:ea:51:
aa:5e:39:4d:db:f6:f5:e6:d5:d1:45:c9:42:7b:cc:
6b:5d:bc:a3:43:e9:cc:79:39:34:1f:07:8e:68:93:
8b:4c:90:3a:57:e5:3c:46:c5:10:99:6f:9e:6e:55:
32:16:0a:a1:93:ee:d6:e7:4e:d0:73:1c:ff:18:80:
7f:0e:ce:0d:e2:8e:ab:00:8c:69:a5:d4:06:c8:07:
c0:d9:01:d9:92:cd:43:e8:96:40:5f:f0:ed:7f:dc:
18:66:a8:79:d8:a0:45:a6:24:0e:45:11:e0:18:28:
89:9b:92:17:33:19:6b:eb:ed:de:e0:5f:f3:89:51:
16:7f:57:98:dc:e5:eb:b6:96:27:8c:fe:a6:cb:ed:
d4:61:83:4c:d2:fe:46:f4:75:31:f4:82:fa:d0:11:
ab:b2:ec:b5:89:83:b7:3b:bb:81:28:68:37:28:15:
93:20:04:f8:97:d1:73:a5:da:a3:bc:e5:2a:31:63:
1d:50:78:80:ad:80:9c:a0:27:49:f9:77:b2:77:60:
38:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9D:A3:A7:2A:1D:A1:17:74:77:42:D8:18:FD:3D:29:76:DD:9C:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/068fc12f-0f1b-30a3-9f24-60d9d5c48f38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:4a:ff:2f:e8:0d:88:f2:b4:a9:75:21:92:e9:15:2e:f0:32:
1a:a3:14:9e:09:91:49:8b:d4:6e:42:4c:6e:8b:42:52:a4:d4:
c0:b5:be:98:7e:9a:ad:73:eb:a0:95:28:24:30:8d:eb:9b:90:
15:46:24:27:02:ee:10:a0:d5:6a:f9:1a:a0:d8:a1:4c:a5:ac:
97:d5:54:b4:d8:55:f8:24:a2:5d:ae:3d:c6:bc:f4:ad:50:dd:
d2:1c:a5:6b:11:85:cb:7b:81:ed:f6:89:26:f0:a0:2d:0e:00:
70:5d:44:21:11:ef:ad:ed:5d:ef:da:ac:8e:81:b5:b2:01:0c:
de:3e:32:75:26:1a:7e:71:d7:cd:48:de:a1:45:22:48:db:e8:
37:4e:a8:59:87:89:ca:9b:54:42:a1:a9:ff:a4:aa:6c:41:79:
d1:df:24:32:12:95:92:1e:fe:64:a1:37:e2:89:11:a7:7e:92:
62:c5:f0:e0:f9:78:a8:8c:01:47:e9:9e:9d:56:4b:86:f7:c3:
34:33:51:e9:e1:40:e4:f9:be:60:68:c8:5b:5e:95:f2:ac:cf:
2d:3f:a8:81:51:63:7b:32:56:c0:9c:e4:55:a7:d3:30:1d:a4:
0f:ce:58:9b:6a:c3:0f:cc:59:21:68:96:91:09:28:7e:56:32:
a1:8b:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:36 2024 by rpki-client on console-ams.rpki-client.org