Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a2061b8-661b-390e-a1a2-b667480334c3.roa
File: 3a2061b8-661b-390e-a1a2-b667480334c3.roa (raw, json)
Hash identifier: rTJnn2t1V7Iuyc6fQgHyQNmSlzHeQUxrW07fdlUgyWY=
Subject key identifier: BE:D0:83:1D:5B:D9:CE:04:E4:B7:77:AA:FA:25:50:37:15:2F:E0:19
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EB177B853393CE1457C940
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a2061b8-661b-390e-a1a2-b667480334c3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:17:7b:85:33:93:ce:14:57:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3a0b7b3d-8f82-4f15-80ad-829b658c36d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7c:1b:04:61:e7:fc:00:d0:ac:b8:2f:3e:1d:
4a:35:b1:5a:e4:70:df:77:9e:c4:b5:ec:7e:08:8b:
a5:3e:45:06:69:a7:e7:2e:cf:2e:dc:83:0e:c9:a3:
c5:7c:af:48:7b:5e:f5:e5:01:78:1e:9e:d9:06:a3:
af:1c:83:f3:d5:5c:70:d1:7a:29:d8:34:b4:71:01:
d3:69:2c:4a:93:02:80:20:6b:80:42:3e:ae:92:ec:
2a:0e:c9:3b:25:9e:54:22:d0:04:8c:f5:d3:94:ec:
d7:d7:8d:2c:cf:29:3b:12:f7:46:d7:4f:ba:62:4c:
a6:ef:4e:72:b6:75:f4:b3:04:1c:ec:ae:6a:db:3b:
22:bc:9c:31:9f:08:51:5f:db:81:38:33:97:73:9b:
7d:d9:ad:76:65:a9:e3:1f:95:db:22:0d:9c:d5:01:
ab:77:2a:f1:01:97:ab:8e:7b:5f:32:91:8c:df:f0:
97:a0:9a:de:e1:4e:9b:61:ce:a6:ae:82:14:ea:6a:
ee:31:7d:0d:41:c0:fc:4b:db:b1:1d:33:56:56:79:
26:14:52:17:f8:14:d4:9a:e7:cf:33:4a:8a:54:c3:
f9:64:b5:76:b3:76:dc:12:fd:0c:59:0e:4e:a2:3b:
90:fd:2d:ee:d3:53:74:b9:de:b8:87:8f:c3:1c:cf:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:83:1D:5B:D9:CE:04:E4:B7:77:AA:FA:25:50:37:15:2F:E0:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3a2061b8-661b-390e-a1a2-b667480334c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a0:95:7a:dc:03:43:5b:bb:fb:e5:8d:27:34:bc:21:26:b9:
73:f9:7d:78:1e:72:02:e5:d4:52:39:de:e0:32:5b:f2:12:cc:
b3:34:02:05:00:15:73:9f:ac:01:80:e8:bd:b4:d3:93:d4:03:
41:02:41:bb:61:9f:93:8f:a6:28:ee:f9:bf:e4:0d:28:cb:8d:
85:36:5b:40:92:a3:a8:9f:5a:24:ae:3d:6d:3d:95:86:9d:53:
4e:b6:7c:67:df:82:0a:b2:88:b4:6c:fc:b3:e0:01:7c:41:9d:
b3:32:09:3d:c5:c8:6c:26:73:a8:96:ad:66:5a:14:b8:5f:dd:
bf:24:03:58:d5:6f:cf:bd:2d:03:0f:a2:57:3b:a1:b6:3a:56:
ab:97:23:8d:1d:09:6a:99:64:65:5c:27:bc:7e:4b:01:03:03:
a0:fc:7c:0e:d5:9f:e2:03:b3:c7:3c:05:c6:f2:c3:33:3b:b9:
12:20:66:3b:7a:5f:42:6b:db:62:e3:64:39:f9:68:0e:9c:df:
45:91:34:19:cc:72:cb:12:c4:55:9b:03:3f:cd:c9:72:8c:5e:
a0:08:52:b6:94:c3:5e:fb:2e:85:56:6c:86:b4:31:d7:27:75:
be:5a:2d:72:c4:29:1e:97:ad:fa:3b:02:05:27:40:04:4b:51:
26:43:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org