Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36ffa10f-0a1d-31a9-b0e2-457cdaafe160.roa
File: 36ffa10f-0a1d-31a9-b0e2-457cdaafe160.roa (raw, json)
Hash identifier: UAW4oe6WUy8auN1gm8pycmmKfrfeE/W+X7+4QzhQua0=
Subject key identifier: 15:26:22:65:53:C3:71:C1:99:94:A1:F0:E9:D0:CC:B2:01:A9:19:16
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A060974472DD30693303EC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36ffa10f-0a1d-31a9-b0e2-457cdaafe160.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:09:74:47:2d:d3:06:93:30:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=44336444-45b9-4478-aeeb-5baf383a106c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:a0:c7:e7:96:aa:5e:c6:12:4e:dd:62:dd:
c4:28:97:2b:ff:9c:29:05:f1:e2:8a:61:6a:4e:5e:
65:8f:51:aa:79:1a:5a:86:56:51:12:50:6c:95:cb:
3f:d7:cb:51:fd:92:f1:48:d6:30:d5:ff:a2:8d:5e:
50:31:69:a9:1f:3a:82:55:86:be:56:53:c9:a6:5c:
8a:02:a5:b6:1c:45:df:93:fc:5d:e2:af:dd:77:a2:
7f:f2:07:17:a3:26:7e:5e:37:04:41:ab:71:ff:d1:
f0:78:26:8f:b0:30:88:37:a1:ed:c2:94:b4:2f:df:
59:33:4a:e1:b6:9a:84:7d:a9:eb:5b:4c:07:dd:9a:
45:27:35:21:a2:94:7f:db:f2:bc:9a:a8:a0:9f:22:
f3:a5:fe:3b:69:f9:cf:9e:84:1b:d1:76:eb:20:60:
fd:ba:53:f7:e2:4b:04:ea:e6:dd:94:06:17:df:6c:
7e:cc:b2:57:ba:00:e5:19:b2:b3:ea:45:d7:98:b3:
09:97:40:03:24:67:1c:6d:d9:84:e3:59:d1:79:d4:
cd:2c:23:18:f3:06:69:7c:22:20:18:51:3a:00:7b:
5a:90:61:42:00:1a:ec:40:89:e9:23:2d:1d:b2:ff:
16:18:85:43:85:40:fa:fe:19:7d:2e:a3:6c:3b:ff:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:22:65:53:C3:71:C1:99:94:A1:F0:E9:D0:CC:B2:01:A9:19:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/36ffa10f-0a1d-31a9-b0e2-457cdaafe160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:be:08:39:7f:72:ca:fb:7d:20:3c:25:0d:52:55:b8:1c:14:
98:ac:fc:e3:53:be:d2:dc:ba:f5:3a:18:24:8e:f7:09:13:9b:
cd:ec:e4:40:3f:ab:44:62:30:11:4a:eb:20:8b:db:cd:19:00:
9f:e9:6c:b8:a6:14:97:aa:5f:45:05:1c:94:db:37:31:f6:df:
50:07:ef:80:46:eb:56:81:e1:6e:74:ec:38:7f:7e:31:db:27:
43:65:5c:f5:06:eb:9f:32:d9:55:c7:d1:34:14:2e:6e:3c:37:
23:80:79:dc:51:c6:70:39:ee:0e:38:f8:ad:ed:22:08:99:8c:
01:45:c5:6b:91:6c:48:6c:7c:4b:90:26:e5:05:fb:b8:3d:98:
d9:03:7f:cd:77:e0:92:c9:34:27:1c:e2:2d:02:06:bc:74:af:
35:a1:cb:08:d4:80:2c:08:eb:f1:b0:f1:b8:b4:52:14:17:11:
69:af:85:3f:b6:1c:83:71:5d:8d:ce:e1:32:9c:d7:ec:5c:ca:
91:4a:6f:b5:3c:7e:42:a6:26:db:da:e8:f3:42:53:a2:d8:70:
68:27:c5:85:78:e9:5a:a7:0d:d8:60:67:c9:f1:80:49:f6:00:
a9:d1:cf:98:5a:57:6e:8c:8e:d9:35:a7:87:f5:1f:9e:69:d2:
a5:8e:ae:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org