Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ef05186-3739-3477-984d-c5ad6bd6806a.roa
File: 0ef05186-3739-3477-984d-c5ad6bd6806a.roa (raw, json)
Hash identifier: ZfJxxxTTd535DbfkQMaxL+h4ZSpyq81z/ksnSFG4l5k=
Subject key identifier: 23:12:AC:C6:48:41:7A:14:E9:5C:85:A5:DC:F3:43:79:B3:3C:8D:7B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A13AFF92ADD1AFD93D14900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ef05186-3739-3477-984d-c5ad6bd6806a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:13:af:f9:2a:dd:1a:fd:93:d1:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5d3fcf2d-2b9e-48d2-b289-d57287759740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0d:fc:da:a3:1b:76:43:78:15:f6:b0:f8:1f:
76:a5:c8:51:c4:e5:80:f3:9f:f4:c9:c9:1e:6d:54:
ed:2e:1c:39:53:9c:fe:5a:16:8f:8e:45:40:53:bf:
8a:03:52:a5:23:91:fc:bb:0e:31:40:46:53:b5:34:
cd:b8:67:3f:7f:98:53:99:84:08:41:be:87:2b:d8:
8e:3d:d3:51:3f:db:ec:2e:ed:76:77:f3:99:c8:bf:
ca:19:a4:0c:da:1b:39:70:69:7a:90:97:ad:4f:07:
35:d7:ff:85:db:b7:c5:cd:ff:53:aa:1c:3d:ec:60:
ee:42:95:c2:e5:22:4b:0b:3e:4c:ac:3c:8e:d3:88:
ac:cc:0b:79:b2:50:3f:40:f7:4b:03:a7:22:3a:a4:
03:c7:01:d7:a5:f6:a3:1d:05:4c:1d:4d:9f:54:0f:
d8:1f:76:f4:69:44:42:c6:80:f2:a8:bf:53:ba:fc:
9d:ce:c3:8a:17:8e:3a:56:83:15:38:34:9f:84:9a:
12:8b:13:ec:e2:5b:0e:97:f5:67:e2:88:a4:fd:34:
bf:50:1d:24:5a:55:78:dd:60:f4:9b:88:f0:c5:6f:
7d:45:43:c9:53:99:67:08:02:90:d6:5c:13:05:5a:
cc:de:f4:b4:e7:ab:15:79:e7:2e:2e:de:f4:88:12:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:AC:C6:48:41:7A:14:E9:5C:85:A5:DC:F3:43:79:B3:3C:8D:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ef05186-3739-3477-984d-c5ad6bd6806a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:77:b8:92:bb:ea:89:57:35:e4:22:74:0a:28:19:4c:41:1d:
02:17:ad:b1:a4:29:3a:ef:cc:af:92:41:b9:5e:ed:f4:ef:ae:
b4:94:f2:13:c6:26:cf:c4:cb:f1:14:ba:bb:a2:5d:f5:a0:61:
d5:81:32:d9:b8:d7:88:23:41:ee:72:0c:ba:1e:ba:44:9d:35:
0a:ba:95:7b:87:51:af:e6:03:8d:fd:13:61:9f:ff:7a:b2:c8:
e8:1a:86:ee:d1:22:fb:83:d9:6d:2e:3f:0a:df:99:a2:5d:d6:
3a:d3:99:f3:9d:d4:24:c3:48:1b:5c:34:6f:c8:b2:bc:54:c1:
cf:dd:6b:2b:3a:42:3d:2b:09:6d:c0:71:33:a5:e6:db:f7:18:
d3:0b:df:5d:64:e0:ca:cb:9b:60:c5:6e:5d:5d:f2:95:5e:82:
69:fe:f9:6c:fa:8f:d5:04:fd:31:57:3e:c2:8c:50:81:e0:8d:
95:8c:b7:b9:ae:7a:b1:2a:8e:e5:9c:aa:f2:ce:e9:f3:2c:f3:
cd:d1:86:46:ac:36:03:2c:ea:35:65:87:46:19:90:c6:01:7f:
c8:2c:fb:13:3f:50:23:58:2d:d5:7c:6f:6d:88:3a:e2:60:97:
4a:40:b0:49:24:31:e1:54:5b:ff:7f:73:f2:cd:c8:25:61:29:
9a:8d:6d:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKE6/5Kt0a/ZPRSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NWQzZmNmMmQtMmI5ZS00OGQyLWIyODktZDU3Mjg3NzU5NzQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw382qMbdkN4Ffaw+B92pchRxOWA85/0ycke
bVTtLhw5U5z+WhaPjkVAU7+KA1KlI5H8uw4xQEZTtTTNuGc/f5hTmYQIQb6HK9iO
PdNRP9vsLu12d/OZyL/KGaQM2hs5cGl6kJetTwc11/+F27fFzf9Tqhw97GDuQpXC
5SJLCz5MrDyO04iszAt5slA/QPdLA6ciOqQDxwHXpfajHQVMHU2fVA/YH3b0aURC
xoDyqL9TuvydzsOKF446VoMVODSfhJoSixPs4lsOl/Vn4oik/TS/UB0kWlV43WD0
m4jwxW99RUPJU5lnCAKQ1lwTBVrM3vS056sVeecuLt70iBJK0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMSrMZIQXoU6VyFpdzzQ3mzPI17MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGVmMDUxODYtMzczOS0z
NDc3LTk4NGQtYzVhZDZiZDY4MDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNmzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGx3uJK76olXNeQidAooGUxBHQIXrbGkKTrvzK+SQble7fTvrrSU8hPG
Js/Ey/EUuruiXfWgYdWBMtm414gjQe5yDLoeukSdNQq6lXuHUa/mA439E2Gf/3qy
yOgahu7RIvuD2W0uPwrfmaJd1jrTmfOd1CTDSBtcNG/IsrxUwc/days6Qj0rCW3A
cTOl5tv3GNML311k4MrLm2DFbl1d8pVegmn++Wz6j9UE/TFXPsKMUIHgjZWMt7mu
erEqjuWcqvLO6fMs883RhkasNgMs6jVlh0YZkMYBf8gs+xM/UCNYLdV8b22IOuJg
l0pAsEkkMeFUW/9/c/LNyCVhKZqNbRU=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:36 2024 by rpki-client on console-ams.rpki-client.org