Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/266c1f3a-6519-38af-aec0-ee72ff92d7f2.roa
File: 266c1f3a-6519-38af-aec0-ee72ff92d7f2.roa (raw, json)
Hash identifier: fz1O3xiFJiBtcA7QG+RswjuC1MX6XpN2gLxHc/t0E+w=
Subject key identifier: 28:A5:DC:6E:3C:02:56:6A:64:4B:1B:27:D5:73:8D:0A:35:FB:BA:68
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A28430D8ECC7C1562C40400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/266c1f3a-6519-38af-aec0-ee72ff92d7f2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:28:43:0d:8e:cc:7c:15:62:c4:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7a3f499a-ab4c-45b1-b514-246f241a27b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:77:5d:ba:f5:3e:55:61:0f:8f:50:bd:5b:
bc:e8:84:12:90:fd:77:3b:d3:d7:c3:83:35:65:c8:
22:95:89:1b:6f:5b:29:61:02:eb:8c:7b:85:31:dc:
ad:26:37:50:21:b7:d7:c5:eb:36:f6:80:19:be:4b:
3d:54:06:62:a3:de:cc:3f:54:9c:ac:01:58:fd:ad:
34:2c:05:60:46:bb:94:dd:4b:e2:12:7b:ab:72:74:
ad:1f:1b:66:96:49:67:41:20:5e:ff:26:ab:34:fe:
0a:7d:eb:73:60:e8:16:12:cc:bb:69:01:df:6a:97:
35:8d:d0:e0:02:08:69:3d:ec:13:48:22:81:23:ba:
f5:e2:ee:89:b1:58:2f:7b:eb:c3:f9:04:71:67:18:
bf:b6:dc:e3:95:59:59:ac:ae:c0:fd:cf:36:1d:fd:
0f:63:0d:93:0e:17:4a:85:09:de:f8:54:45:2f:76:
40:47:18:bb:0a:9c:ae:6c:fb:dc:fa:e8:62:e3:35:
0b:2a:7f:ef:40:4a:19:4a:82:3e:ed:e2:a3:46:ba:
3f:ff:6f:c7:a0:31:4b:4a:e1:52:f9:38:f0:32:12:
ca:6d:9f:40:0a:ee:7e:71:c5:1c:31:bb:92:78:1c:
57:62:bb:3f:e1:17:c9:85:e4:2e:cb:25:3b:b5:df:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:DC:6E:3C:02:56:6A:64:4B:1B:27:D5:73:8D:0A:35:FB:BA:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/266c1f3a-6519-38af-aec0-ee72ff92d7f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:92:73:6a:78:e0:17:fd:e3:de:6b:78:99:6d:c3:ee:eb:b5:
7a:53:61:73:39:e0:77:49:bf:6d:3e:c2:28:67:f5:f4:ef:9b:
52:ac:15:93:05:e8:28:f3:b8:1e:17:42:ab:c5:1a:23:bc:ba:
5a:df:89:5a:53:24:6a:7a:7a:d9:43:3a:80:ca:8d:7d:bd:44:
66:a5:d3:24:5f:2b:b7:f5:5a:1d:0d:d4:56:54:c1:a2:56:7f:
fc:fb:d8:45:d9:93:a6:7c:80:ad:14:86:a9:62:8e:cd:8f:ff:
f8:73:e1:2b:1d:a9:3f:7c:be:28:e5:e7:49:e5:8f:bf:ce:bd:
12:e3:3a:f9:50:23:1e:9d:c4:64:7d:8d:ca:6b:ec:fc:47:6f:
c8:4c:67:09:16:74:95:00:df:b3:8b:8c:e2:6e:46:1d:03:53:
8f:65:73:cd:e9:13:c5:e9:4f:5d:12:7f:97:c4:4b:80:bc:b2:
50:f3:69:e9:c3:80:53:8e:a2:ae:30:a6:47:bf:04:5b:82:c8:
57:34:58:e9:00:e7:f2:d3:1b:98:be:ef:49:f2:41:23:7e:fc:
bf:d3:ee:5f:e9:b0:00:12:5f:39:d0:40:14:d9:61:e2:c2:1c:
f6:54:45:3a:87:ed:24:85:83:c7:ca:3c:e4:14:40:d7:f4:4e:
d7:d0:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:13 2024 by rpki-client on console-ams.rpki-client.org