Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28daef06-c246-3fbe-b9d0-8fd1590e370f.roa
File: 28daef06-c246-3fbe-b9d0-8fd1590e370f.roa (raw, json)
Hash identifier: Pj3Olf/I5DsJHxNEFVBokt21MnvqWC+oikrnn15vmBU=
Subject key identifier: FC:D8:87:8B:36:D5:9D:E0:6E:E2:36:AE:BD:A2:4A:39:85:F2:44:32
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A00EC62D4FD273ED040F380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28daef06-c246-3fbe-b9d0-8fd1590e370f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:00:ec:62:d4:fd:27:3e:d0:40:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e95a3c37-c82f-4083-9b22-7ebb83548030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:e9:15:dd:ff:61:ff:4d:b6:e8:0a:5a:0a:
a8:0d:cc:06:b9:e7:b2:50:bb:ba:09:f3:2c:cb:2f:
9f:af:de:b1:03:2d:92:5f:e7:38:64:90:4d:14:e9:
2d:f5:ad:c0:91:7f:75:de:ec:d4:be:2d:e1:71:03:
19:3d:32:cc:41:f6:15:6e:1c:82:91:72:65:a1:76:
1f:7b:94:c1:df:33:9a:c8:3e:d5:ce:81:49:32:b9:
a3:de:17:75:93:5c:1e:c3:3b:59:3a:18:4b:71:7c:
c1:ff:e2:b6:1a:03:56:56:a0:f8:a8:da:32:7f:3d:
c4:ba:14:c0:00:f9:ec:5e:ae:da:17:e7:72:59:f8:
00:9e:49:25:29:26:4a:b0:9c:5f:39:bb:4c:96:3c:
78:9a:20:1b:c7:53:39:5e:df:38:d7:8e:f2:be:9d:
db:14:9c:fd:34:e6:62:86:fb:5e:2a:4c:96:fa:d5:
dd:05:bf:6f:e0:26:8d:e8:03:e0:7c:3e:a3:53:ee:
4e:25:b8:5b:f6:1e:70:ff:bb:ac:fb:49:1d:3e:f1:
64:d0:bf:ab:d3:dd:44:03:c9:11:6c:84:09:54:fc:
d6:02:1d:e0:9b:d6:c9:24:2c:92:7b:c2:a8:eb:c3:
3d:e2:a0:6d:d7:0f:26:4f:e0:0c:e1:04:06:ec:e2:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D8:87:8B:36:D5:9D:E0:6E:E2:36:AE:BD:A2:4A:39:85:F2:44:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28daef06-c246-3fbe-b9d0-8fd1590e370f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:ae:fc:af:f4:91:0f:38:43:8e:38:84:09:6b:13:49:41:8d:
84:7b:a6:f9:78:90:a5:9b:42:eb:b3:7c:16:8f:7a:fd:16:33:
1e:7e:19:29:df:f5:ac:15:61:c3:93:59:ba:e3:be:db:67:04:
47:93:54:e9:a2:3f:5a:9e:39:e9:d2:e3:1e:e0:18:12:81:11:
3b:cf:39:3d:ff:0a:af:8b:33:5f:46:97:67:72:cc:c6:ff:ae:
c4:a2:e8:6d:25:c4:86:55:65:4e:9a:6d:e9:d5:5e:d0:10:cb:
bc:57:38:9f:4c:4b:27:f5:92:80:26:ad:c7:bd:ba:f5:c3:cb:
8b:46:8e:6b:31:2d:a5:f1:2d:84:fa:b7:9b:4f:6d:8e:d6:d3:
9a:e4:75:fe:e6:71:61:00:de:e1:64:b7:36:4d:c7:f0:2a:3a:
9f:d4:94:0a:ee:08:7a:b6:7b:70:60:46:63:b3:c6:a5:11:50:
5b:a7:cf:7a:e1:b7:d3:89:e7:09:7a:8f:00:4b:88:e5:42:11:
bf:28:ea:64:2d:4e:8e:aa:20:ad:96:c5:5f:37:8c:84:4d:7d:
80:cc:de:f0:81:82:8e:7b:fb:69:34:61:67:35:0a:55:36:5c:
97:80:be:ac:a7:03:fc:8e:0b:62:cb:cc:fe:8f:e2:7d:f8:a0:
99:e4:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:37 2024 by rpki-client on console-ams.rpki-client.org