Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35800cde-d22a-331b-b1cf-8a7c9ba024ef.roa
File: 35800cde-d22a-331b-b1cf-8a7c9ba024ef.roa (raw, json)
Hash identifier: Xb9l+DJF3upgEUPeyLvmoSX9E3kXsf5eNWcLgYV4g5Q=
Subject key identifier: 96:45:BA:43:27:12:F6:5C:A0:F2:D8:2D:2F:30:82:0D:6C:94:27:F0
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A02830817068B899EDA8EC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35800cde-d22a-331b-b1cf-8a7c9ba024ef.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:83:08:17:06:8b:89:9e:da:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c692a33d-dba6-4239-b252-6967b84a6742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:ee:8c:65:db:69:51:84:72:cb:c9:47:12:
fb:00:3e:53:b8:28:6b:13:44:21:02:24:8f:d3:0b:
02:21:4f:df:aa:3f:7a:83:bd:6b:14:72:5f:59:a5:
46:4f:17:4a:60:37:58:23:3c:76:b2:8d:33:fe:86:
89:3d:46:c9:57:57:3b:02:ad:73:06:85:eb:ea:f8:
8a:d2:09:e3:a1:50:90:dc:98:eb:ad:7b:50:fb:1b:
98:eb:a4:52:ac:3b:62:55:50:ce:27:20:32:06:24:
15:68:8c:d7:ba:a1:44:96:38:88:47:86:f5:51:1a:
a0:b7:d2:7f:a2:c2:d6:a8:4d:3c:a6:ec:eb:69:aa:
93:11:42:a0:85:fc:4c:e6:68:25:82:bd:a6:c8:c3:
02:1b:d8:e9:b6:ec:a0:f9:cb:71:f1:41:fc:b3:03:
48:08:43:8a:27:4d:56:7f:61:d4:bd:71:2c:a3:40:
6d:5b:e0:90:90:a1:51:77:cc:fc:31:40:88:4a:5f:
37:e9:2c:f7:9c:09:f1:53:1a:b0:c0:3a:23:85:9e:
49:73:ba:af:ad:53:d9:6e:00:15:19:2c:ad:44:b7:
ce:ef:9b:e8:29:e2:5b:9d:90:d9:f8:43:43:de:46:
a9:a8:13:d6:0b:d1:fe:62:7b:7d:18:09:d5:24:a6:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:BA:43:27:12:F6:5C:A0:F2:D8:2D:2F:30:82:0D:6C:94:27:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/35800cde-d22a-331b-b1cf-8a7c9ba024ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:6c:27:13:2e:a1:11:fc:38:54:8c:ea:1b:8b:56:ef:04:8e:
34:26:30:3f:10:a6:a8:f0:aa:38:5e:b8:b0:8b:9c:64:63:ba:
8f:05:a7:42:9c:22:00:6f:3c:a9:14:ff:ab:57:a8:53:d1:c3:
b3:1b:85:a9:96:8e:23:34:37:0a:7c:91:8c:4f:46:d3:bb:5d:
38:9c:7a:5e:e5:b2:88:08:3b:79:42:c2:49:b9:2c:f5:ed:15:
58:c4:f8:48:d4:a3:b3:50:55:17:5a:de:c4:7d:4c:d5:80:a9:
3b:94:6d:b9:d4:5d:fa:39:bd:3a:17:ef:52:eb:b4:d9:97:77:
78:9b:8f:12:39:68:e3:4f:77:26:58:15:a2:c7:87:52:04:02:
ab:12:b1:16:6c:4d:08:f1:35:48:9d:5b:44:53:0b:a4:5d:bb:
28:97:66:01:e5:39:df:b3:8d:83:3b:ec:d1:66:93:5d:c0:d6:
b5:f1:38:f4:63:73:99:50:e9:1a:74:4c:8d:24:b4:33:fc:96:
aa:3c:22:d0:e9:15:ab:c4:2b:6b:50:32:9e:4b:32:68:81:66:
12:03:e8:23:96:ff:4e:4a:31:0c:99:f6:9f:ae:28:65:3e:d9:
5a:e9:0f:44:93:71:f0:46:50:28:cf:12:7f:b6:63:aa:2b:e4:
df:90:ab:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKAoMIFwaLiZ7ajsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzY5MmEzM2QtZGJhNi00MjM5LWIyNTItNjk2N2I4NGE2NzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU7ujGXbaVGEcsvJRxL7AD5TuChrE0QhAiSP
0wsCIU/fqj96g71rFHJfWaVGTxdKYDdYIzx2so0z/oaJPUbJV1c7Aq1zBoXr6viK
0gnjoVCQ3JjrrXtQ+xuY66RSrDtiVVDOJyAyBiQVaIzXuqFEljiIR4b1URqgt9J/
osLWqE08puzraaqTEUKghfxM5mglgr2myMMCG9jptuyg+ctx8UH8swNICEOKJ01W
f2HUvXEso0BtW+CQkKFRd8z8MUCISl836Sz3nAnxUxqwwDojhZ5Jc7qvrVPZbgAV
GSytRLfO75voKeJbnZDZ+END3kapqBPWC9H+Ynt9GAnVJKaHVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZFukMnEvZcoPLYLS8wgg1slCfwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzU4MDBjZGUtZDIyYS0z
MzFiLWIxY2YtOGE3YzliYTAyNGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALBsJxMuoRH8OFSM6huLVu8EjjQmMD8QpqjwqjheuLCLnGRjuo8Fp0Kc
IgBvPKkU/6tXqFPRw7MbhamWjiM0Nwp8kYxPRtO7XTicel7lsogIO3lCwkm5LPXt
FVjE+EjUo7NQVRda3sR9TNWAqTuUbbnUXfo5vToX71LrtNmXd3ibjxI5aONPdyZY
FaLHh1IEAqsSsRZsTQjxNUidW0RTC6RduyiXZgHlOd+zjYM77NFmk13A1rXxOPRj
c5lQ6Rp0TI0ktDP8lqo8ItDpFavEK2tQMp5LMmiBZhID6COW/05KMQyZ9p+uKGU+
2VrpD0STcfBGUCjPEn+2Y6or5N+Qq1I=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:37 2024 by rpki-client on console-ams.rpki-client.org