Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/121834c3-7b4c-323f-aaca-7f723ea0c4f6.roa
File: 121834c3-7b4c-323f-aaca-7f723ea0c4f6.roa (raw, json)
Hash identifier: G22Gr0ExvWxiMAKMXv2fwn40GqFRGWyu8CUItkHkPw8=
Subject key identifier: 0A:D8:AF:B2:20:25:3E:5B:E1:B1:3E:1C:70:E3:81:92:68:5F:4F:98
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1D9E1B0C5B60636EB3A680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/121834c3-7b4c-323f-aaca-7f723ea0c4f6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:9e:1b:0c:5b:60:63:6e:b3:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c9c99f99-01da-45bb-9a5e-37b67b499a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:3c:2c:c4:9d:22:c9:d6:83:35:ad:58:e5:
a8:7c:4e:58:ce:ba:2c:54:73:f6:65:fe:5f:9b:2d:
7e:be:48:d1:99:7d:ba:1f:ef:d4:ec:fa:cf:11:98:
a8:bc:52:5d:2f:f1:2f:80:05:2d:53:6b:46:90:de:
65:77:ef:c0:5f:9a:57:78:d0:70:3e:6c:6b:65:4e:
59:26:1b:6f:95:88:18:5d:70:fa:ae:ff:77:54:a1:
07:43:c8:67:0f:0f:df:a5:18:dd:43:80:70:32:71:
83:69:52:3d:aa:57:1d:81:c8:a7:dd:e3:0c:16:16:
0a:4f:0c:08:3c:78:64:28:7e:0a:3b:f1:b5:3f:42:
d6:30:92:3c:ba:6f:04:c1:d6:e2:b8:31:5d:58:9d:
9a:fd:80:da:33:26:56:91:c7:c9:db:63:b4:ae:02:
be:ed:4c:5e:ce:e0:52:9a:19:f4:30:25:1f:2a:ce:
81:9b:5a:c9:aa:b6:b9:24:b2:83:f1:73:d2:98:c8:
b2:a9:8a:5f:e0:5b:93:84:1c:a4:fe:f0:79:80:4c:
cd:d7:9c:26:69:58:e5:1c:c2:27:ca:0e:05:d3:e8:
1b:ce:10:c2:fe:af:25:6f:25:30:1f:e3:6d:55:25:
fb:e5:ed:e9:b0:5b:e8:34:64:da:ec:b0:1a:df:a3:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:AF:B2:20:25:3E:5B:E1:B1:3E:1C:70:E3:81:92:68:5F:4F:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/121834c3-7b4c-323f-aaca-7f723ea0c4f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:da:9f:37:26:c2:70:86:b3:a7:15:8b:90:49:a3:69:8b:7b:
f1:76:c7:40:30:13:d9:4f:46:e6:4b:30:c0:4b:81:a2:6a:d7:
b7:1d:66:ac:e0:49:c1:d9:86:74:80:9e:e3:53:12:0b:04:e5:
20:7f:19:85:62:48:63:b9:27:98:ef:be:08:3e:e0:ea:de:54:
c4:6e:07:e2:7d:96:06:d1:27:22:49:e4:b6:c8:79:fd:1a:03:
00:05:50:6e:32:72:83:e2:de:f8:7a:6d:5b:82:69:f4:9c:f1:
4d:ec:f5:64:25:a7:47:9e:88:df:00:2c:15:7d:2e:01:77:13:
f9:dc:a5:1c:00:3d:9d:14:09:af:90:00:00:67:a3:66:1e:d8:
5d:76:5a:65:c3:0f:53:25:d9:6a:b9:27:d3:94:8b:78:de:b6:
4d:d9:79:03:d4:99:66:ab:2b:ba:18:31:f7:06:e6:a2:d6:d2:
d1:2e:03:5e:3c:21:86:bd:6f:e6:f1:62:da:bb:15:69:5c:dc:
c2:9d:99:25:fc:83:c2:c4:dc:cb:60:67:15:a3:a4:4c:50:34:
c3:cb:fa:ff:52:53:a1:4e:83:cd:66:a4:c3:b6:1e:2c:2d:7e:
60:0c:e0:7d:ee:6f:fa:2d:7f:eb:b9:20:df:7e:eb:3c:da:e4:
38:64:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org