Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/343c8c9f-4445-3c9a-9009-989603724115.roa
File: 343c8c9f-4445-3c9a-9009-989603724115.roa (raw, json)
Hash identifier: PW8ZWfNKC/JNnXfX7AIG71fPXSP9L+LjZRw85rIRnhg=
Subject key identifier: 9A:91:DD:5C:C9:6B:1F:F3:86:C1:0D:60:DB:19:DD:C4:8A:03:D3:D5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A22EB7E2BA78EA5EF2F1E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/343c8c9f-4445-3c9a-9009-989603724115.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:22:eb:7e:2b:a7:8e:a5:ef:2f:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=35a69b72-0d40-48b4-b4a3-1ba4941c859b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:31:ce:61:ba:15:6d:91:d5:db:b6:e6:03:
d8:c3:50:b6:e3:6b:fb:e9:ae:ae:7a:a9:31:a2:69:
f6:1b:79:07:c4:8e:3b:d1:0f:b7:45:07:f9:1f:3f:
3a:c0:d8:e0:17:9e:40:30:1c:62:03:15:2d:27:a0:
03:87:9e:d7:7b:ba:31:dc:1e:9c:26:6b:90:ba:9d:
b1:85:21:ed:df:63:80:35:e6:12:c7:9c:9b:40:11:
ff:22:ac:50:6e:16:a5:4a:ee:4e:b1:25:1c:40:d4:
19:28:f2:ab:c8:0d:00:3c:9f:78:ef:71:70:cb:7e:
8a:09:d7:07:bd:d3:c3:51:d5:dc:b9:b5:10:25:7b:
95:9d:29:1f:70:33:f0:90:2d:ca:98:51:08:7c:c0:
2e:fd:b1:8b:f4:e6:2d:46:46:01:33:d2:fe:ca:69:
23:3a:35:57:57:34:66:03:27:ea:a9:4b:b6:c3:b3:
de:82:1a:04:17:35:00:4b:69:eb:a7:1b:85:c8:d4:
73:b7:34:d1:fe:78:4e:f0:b2:a9:13:8a:b6:54:55:
1f:9d:15:99:09:52:b5:c5:38:e2:3e:f1:d5:a2:f7:
c6:c6:d3:a8:a7:ee:c9:6a:8c:c1:fa:8e:aa:f6:a4:
4c:61:d4:28:d8:2e:ce:c2:6a:33:45:0e:a5:f7:59:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:91:DD:5C:C9:6B:1F:F3:86:C1:0D:60:DB:19:DD:C4:8A:03:D3:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/343c8c9f-4445-3c9a-9009-989603724115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:5e:e6:a2:a4:eb:a3:a6:b4:e1:50:9e:9e:0e:dd:10:30:57:
0c:af:e7:4e:c7:5c:86:99:a6:15:7f:0a:f3:28:9b:ba:6d:80:
9b:40:a0:dc:72:a3:04:21:42:d1:2b:85:fe:19:91:c0:18:be:
4f:c6:65:8b:cf:fa:00:31:dc:01:93:bc:f0:51:76:d1:a3:35:
88:20:3f:d3:92:61:32:e4:3b:37:4f:4f:1a:dd:5c:a1:f3:84:
f4:d5:1a:7a:aa:4b:94:99:7d:2c:02:7b:2e:b5:48:58:15:5a:
29:3b:b2:03:8e:b5:24:1e:16:2a:97:fa:aa:ac:0e:58:b1:95:
e3:31:41:9d:82:4b:70:9b:58:fd:47:57:cb:44:c5:78:94:2d:
64:9e:0b:53:d8:f4:6e:d3:00:56:9b:2d:19:7a:81:98:8c:30:
54:36:cf:40:b9:82:50:e2:28:37:5d:cc:0a:51:11:8e:02:7b:
81:b5:87:e7:a2:a5:9a:42:67:77:46:c2:11:ec:64:e2:29:b3:
3a:b2:5e:fe:09:96:5e:9e:0b:48:92:b6:b7:87:55:b5:54:1b:
a2:ea:87:d7:c6:f1:7c:56:21:1f:0e:92:75:3e:0b:57:7c:d8:
2b:aa:1c:df:ac:4a:4a:66:71:43:48:06:a5:c1:50:ee:1a:a0:
25:14:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:37 2024 by rpki-client on console-ams.rpki-client.org