Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10f01f64-8a81-319b-9dbc-da4a47ef28eb.roa
File: 10f01f64-8a81-319b-9dbc-da4a47ef28eb.roa (raw, json)
Hash identifier: xevj63/bsnM9fO2kx+RJOIr9qe6J3JjbFD7B2gZwhVk=
Subject key identifier: 61:39:10:60:76:52:D5:02:35:29:47:7B:3E:5B:97:D6:F1:D9:F2:4C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584214C45F752C05148FA9A94120
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10f01f64-8a81-319b-9dbc-da4a47ef28eb.roa
Signing time: Wed 31 May 2023 12:00:00 +0000
ROA not before: Wed 31 May 2023 12:00:00 +0000
ROA not after: Sat 12 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:14:c4:5f:75:2c:05:14:8f:a9:a9:41:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 31 12:00:00 2023 GMT
Not After : Oct 12 04:00:00 2024 GMT
Subject: CN=945aa848-7d91-4030-a214-8829af18205b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:63:3f:15:00:a9:85:30:02:3b:a6:2e:ca:
ab:45:8e:07:5e:3a:1f:c1:08:f1:9b:37:f9:6c:c0:
6c:f8:b2:ca:7c:ca:58:7b:1c:d5:69:cb:c7:c2:91:
9f:ed:4b:81:a3:95:0c:12:87:95:47:28:3a:c1:1e:
76:d0:87:8f:ed:ca:4e:e5:ec:2e:4b:3f:c7:42:ec:
04:11:31:1d:55:f5:da:71:4b:bc:f0:c9:01:ae:a1:
0d:ce:08:dc:d5:0c:e1:1d:4f:07:12:88:ec:cd:1b:
60:ca:9e:30:61:ae:d5:38:a2:e4:17:c3:d0:dd:26:
dc:ab:a3:63:d5:72:0c:9c:4d:c6:33:70:8d:2c:d0:
40:0a:8f:49:9a:34:82:9e:ef:96:74:b1:fc:4d:74:
fe:fb:9d:61:af:7e:b5:d9:48:47:38:fc:1e:55:b8:
c0:2d:49:6e:e5:0f:b9:bb:69:bb:c9:e0:97:17:d0:
a8:d5:fa:a7:9d:97:6c:cf:7e:e3:25:0b:83:6e:bc:
08:ca:9f:1e:34:fc:cc:7e:e2:24:06:d6:25:37:f3:
dc:d1:1a:d3:98:d1:bd:36:09:b1:94:b3:94:b2:24:
ac:22:06:48:75:1d:a7:28:13:e7:70:fe:37:79:eb:
ca:f6:e3:40:83:44:2b:6e:ab:88:85:e2:69:d4:12:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:39:10:60:76:52:D5:02:35:29:47:7B:3E:5B:97:D6:F1:D9:F2:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10f01f64-8a81-319b-9dbc-da4a47ef28eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:10:e6:ba:ad:ee:10:57:96:3a:5a:6f:b8:bb:b8:25:d4:bb:
74:3f:20:c7:94:07:76:45:03:9e:00:00:02:ca:d2:19:06:be:
1e:ba:e4:0e:ae:98:3c:77:0e:27:68:43:fb:4e:2f:7f:7b:41:
f1:7f:4b:ba:09:4c:12:4c:07:07:49:4e:a1:71:ca:f5:39:11:
79:a0:c1:f6:a2:63:47:82:df:11:8c:8c:6d:1c:8c:b6:78:00:
b6:71:14:06:17:c4:ae:1b:10:76:0a:b7:a8:04:02:22:1d:03:
b9:ff:fd:53:95:1e:c1:4a:f2:54:4f:72:73:89:4f:6e:0a:d4:
4e:55:86:e3:12:4c:40:4d:f9:57:a9:ee:f5:46:ba:39:80:9c:
ff:d8:52:18:49:be:52:de:92:fc:93:88:08:d1:36:6d:26:02:
50:a4:3d:41:b6:2c:1a:4b:b0:a1:9b:b4:2b:a6:75:b0:11:94:
fe:3b:b9:0a:6c:96:ec:9f:50:01:ad:62:57:8e:41:c0:c9:dc:
e4:58:59:50:1f:31:41:c9:60:d5:9e:88:91:14:46:46:92:eb:
a8:62:66:1f:1a:c3:ad:51:eb:3b:87:86:82:aa:a6:8c:84:0e:
ae:16:0c:f6:c5:db:0c:de:d1:3c:13:5f:e6:d0:5a:53:90:4c:
bf:52:ad:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIUxF91LAUUj6mpQSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDUzMTEyMDAwMFoXDTI0MTAxMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTQ1YWE4NDgtN2Q5MS00MDMwLWEyMTQtODgyOWFmMTgyMDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0FjPxUAqYUwAjumLsqrRY4HXjofwQjxmzf5
bMBs+LLKfMpYexzVacvHwpGf7UuBo5UMEoeVRyg6wR520IeP7cpO5ewuSz/HQuwE
ETEdVfXacUu88MkBrqENzgjc1QzhHU8HEojszRtgyp4wYa7VOKLkF8PQ3Sbcq6Nj
1XIMnE3GM3CNLNBACo9JmjSCnu+WdLH8TXT++51hr3612UhHOPweVbjALUlu5Q+5
u2m7yeCXF9Co1fqnnZdsz37jJQuDbrwIyp8eNPzMfuIkBtYlN/Pc0RrTmNG9Ngmx
lLOUsiSsIgZIdR2nKBPncP43eevK9uNAg0QrbquIheJp1BIJbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGE5EGB2UtUCNSlHez5bl9bx2fJMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBmMDFmNjQtOGE4MS0z
MTliLTlkYmMtZGE0YTQ3ZWYyOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4Q5rqt7hBXljpab7i7uCXUu3Q/IMeUB3ZFA54AAALK0hkGvh665A6u
mDx3DidoQ/tOL397QfF/S7oJTBJMBwdJTqFxyvU5EXmgwfaiY0eC3xGMjG0cjLZ4
ALZxFAYXxK4bEHYKt6gEAiIdA7n//VOVHsFK8lRPcnOJT24K1E5VhuMSTEBN+Vep
7vVGujmAnP/YUhhJvlLekvyTiAjRNm0mAlCkPUG2LBpLsKGbtCumdbARlP47uQps
luyfUAGtYleOQcDJ3ORYWVAfMUHJYNWeiJEURkaS66hiZh8aw61R6zuHhoKqpoyE
Dq4WDPbF2wze0TwTX+bQWlOQTL9Srfw=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org