Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19e59932-cafc-3373-be51-8a9e52f8c905.roa
File: 19e59932-cafc-3373-be51-8a9e52f8c905.roa (raw, json)
Hash identifier: ddgZMo7or3j1kfv5cjWZllvCUE/IoGwU6HEl+2C7hfM=
Subject key identifier: 7B:70:95:C5:E9:5A:18:7E:51:9E:6B:92:2B:8B:74:E2:98:65:F6:32
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858426507DD52D150F130437FED00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19e59932-cafc-3373-be51-8a9e52f8c905.roa
Signing time: Thu 29 Jun 2023 12:00:00 +0000
ROA not before: Thu 29 Jun 2023 12:00:00 +0000
ROA not after: Sun 10 Nov 2024 05:00:00 +0000
asID: 396982
IP address blocks: 172.217.56.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:65:07:dd:52:d1:50:f1:30:43:7f:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jun 29 12:00:00 2023 GMT
Not After : Nov 10 05:00:00 2024 GMT
Subject: CN=d341f92d-f927-40c3-aa67-19184a99437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:db:9f:70:2b:61:3e:c1:30:c7:9a:e1:4a:
7b:3f:6f:b0:8b:d9:5c:1c:6d:ad:dd:06:65:0d:e8:
3b:2c:05:49:b3:48:10:f3:55:22:d0:8c:3a:08:eb:
fb:5c:9c:ff:e2:8d:2a:e9:a2:18:09:9f:d4:9b:83:
90:57:d1:21:7a:79:69:af:cd:89:8b:f7:e0:7f:db:
f9:98:d8:6f:80:da:c8:38:1a:fa:d4:af:78:38:de:
19:48:a3:2f:00:d7:0c:2d:18:ba:98:89:df:3b:c0:
eb:85:0b:b2:f2:a8:9b:9a:40:ea:6f:f4:37:57:96:
e8:f7:5a:d8:79:1e:72:bd:ed:8b:1c:88:6b:08:f4:
a0:f4:e4:82:a4:39:a2:e9:c6:f8:54:9c:ef:77:f6:
11:96:a7:a9:1e:dd:91:e3:88:26:78:96:b1:a5:44:
bb:72:66:4d:e7:8b:1f:f4:50:7d:3f:84:97:28:58:
a4:34:b8:cd:b2:a9:17:b9:2a:a0:1f:dc:d1:ed:e8:
f9:2f:de:38:5e:a5:cd:6d:08:15:88:fe:5f:07:60:
d5:8a:f2:0a:0a:43:e2:85:a2:81:6c:f5:51:02:42:
a6:3e:15:82:87:01:44:43:38:de:89:91:5a:a5:a1:
7c:2a:14:4c:68:36:d7:a1:18:8b:a2:39:f2:67:c8:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:95:C5:E9:5A:18:7E:51:9E:6B:92:2B:8B:74:E2:98:65:F6:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19e59932-cafc-3373-be51-8a9e52f8c905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:9a:13:51:09:92:6a:f1:85:2e:33:ad:14:2b:37:71:dd:ec:
3f:b1:cf:59:14:02:6f:9c:b6:19:7c:4e:8b:bc:a9:ca:c1:09:
33:47:98:26:cc:72:76:2a:e3:f2:37:7e:c2:19:2d:01:db:f5:
85:00:4e:9d:c6:d6:01:40:be:16:5f:fb:3b:e9:de:76:cb:3d:
b3:a1:17:46:00:44:aa:00:4f:65:eb:94:10:2c:d8:1f:f5:77:
5f:6d:57:31:96:6b:cf:a1:01:76:a0:4c:e5:63:c5:c6:1f:64:
30:ac:1b:25:41:27:74:25:66:19:5e:21:9d:09:d0:fc:8d:a5:
69:11:26:51:f7:91:b9:0e:44:6c:b7:87:d1:c4:14:94:63:ab:
cc:94:2f:8c:50:7e:fc:27:99:30:0d:3d:02:52:41:f5:08:79:
fb:a1:e9:55:9f:a0:2d:b6:1f:6b:af:9c:66:31:5d:83:02:ff:
cc:88:cd:78:91:4a:95:9f:da:f2:61:55:45:05:38:e3:3b:1f:
7d:53:02:4f:f1:c6:df:6a:55:01:08:95:62:af:f3:18:b7:b2:
16:e8:6d:bf:ae:3a:15:d0:e6:6e:e4:f7:f1:9c:d7:64:bf:a4:
f8:52:84:32:e3:5d:c4:c0:a1:6f:22:c3:dc:44:5d:2b:87:4f:
c2:83:f7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org