Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ef20d4a-4467-3df7-bb77-a33b3fdad28b.roa
File: 0ef20d4a-4467-3df7-bb77-a33b3fdad28b.roa (raw, json)
Hash identifier: 8+3FfGiqAAnp1tCXNHrA5Ts5WbZr8crR8lsBMcL39t8=
Subject key identifier: 77:36:0A:3B:20:86:07:D0:5C:57:A1:BC:51:7C:3A:B8:F0:BC:E3:6F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F4C94D47DA93E5DC8F8000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ef20d4a-4467-3df7-bb77-a33b3fdad28b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:c9:4d:47:da:93:e5:dc:8f:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=540488bc-427b-48f9-9784-7b9ea54ce740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:61:62:99:7b:a0:57:13:8f:b1:99:83:4a:
9d:d0:8f:e1:1a:08:4f:4d:76:77:99:38:9a:30:bb:
bc:f6:84:1a:28:5b:f7:62:56:3f:c9:ab:d4:d0:22:
a6:6a:2f:e5:46:d3:f4:e8:72:f6:e4:dd:78:e4:34:
a1:44:f2:b9:ed:01:c4:b5:41:6f:8c:6c:18:ef:d9:
24:b8:01:51:aa:9f:ca:f1:a1:43:62:6a:d6:f9:b3:
2f:58:c9:61:18:2f:47:7a:c6:37:e4:d8:56:dd:14:
4e:ac:2c:57:2e:e5:9c:60:6d:b5:4a:6f:f2:f9:0c:
aa:cf:05:7c:0d:1f:cb:46:7f:62:7d:52:1f:02:56:
b6:63:b5:7f:af:a8:6d:0a:dc:8a:00:97:29:6f:5e:
bf:cd:90:46:65:be:74:d9:77:bc:3d:dc:d0:76:02:
a1:da:3a:58:ce:5f:6d:2c:34:28:2a:e5:9d:40:e0:
e6:43:1e:05:f3:b3:7f:cf:d3:10:dd:2a:e8:9f:6b:
46:96:90:2b:e3:95:48:92:1d:ad:47:dc:c8:71:d2:
47:94:8b:a2:b8:ad:e5:69:b1:f8:57:8e:a7:fc:06:
50:51:4f:31:bd:ac:2b:7d:9a:73:94:f1:4f:69:40:
ba:0f:31:29:bb:5f:46:ff:60:b1:6b:9c:a8:09:29:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:0A:3B:20:86:07:D0:5C:57:A1:BC:51:7C:3A:B8:F0:BC:E3:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ef20d4a-4467-3df7-bb77-a33b3fdad28b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:b8:da:e2:27:5e:ba:b5:72:8c:ae:39:51:2d:f1:9d:4f:ee:
f9:ae:62:09:5c:40:33:7c:3c:8b:ff:5d:eb:ab:3c:e8:81:de:
23:5c:25:9e:92:cd:cb:0b:05:cc:c1:b8:73:d4:d7:01:2f:4d:
61:72:34:44:c1:a6:eb:bf:56:9b:63:8a:e4:31:91:30:34:0a:
1a:38:02:f4:5f:d8:95:15:bc:5e:30:01:83:dc:5a:ef:08:80:
e6:33:22:8c:f3:cb:ec:f2:0b:c7:47:f6:5a:ca:b4:f4:13:b5:
bb:8c:47:8a:f1:a0:b0:4f:9e:7f:1b:13:55:25:ed:2c:b9:e0:
9b:e1:b7:6b:3c:e0:77:38:4f:2c:5b:66:ba:f5:8c:a3:b5:a7:
6f:19:f4:c4:ec:4d:9b:3c:df:ce:d0:d6:73:04:68:ef:5c:fc:
3a:c0:10:13:31:41:87:80:f1:9e:0a:aa:96:7b:b2:31:1b:31:
30:52:51:35:90:02:cd:0f:1d:06:30:4e:5e:37:03:35:6f:ad:
92:52:1c:53:aa:8d:3a:be:01:0f:3a:91:18:88:9d:dd:00:d5:
f3:75:6d:c8:22:42:28:a5:9a:ac:a5:f5:ca:fc:24:d8:9a:27:
5a:56:27:71:28:6f:2c:c7:24:ce:09:fb:a6:01:f8:87:8f:c6:
0a:b9:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:36 2024 by rpki-client on console-ams.rpki-client.org