Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3eaae7db-6137-3de4-bee6-c29360472957.roa
File: 3eaae7db-6137-3de4-bee6-c29360472957.roa (raw, json)
Hash identifier: fI0EuP05MnSPNEd3AWbCrdAyH9C/SgdxduGAUOD4zdk=
Subject key identifier: AA:B1:AE:F4:78:AB:BB:DB:D7:36:4A:9B:04:66:A3:05:85:D1:85:C0
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1DA759DB31310A4DEC1D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3eaae7db-6137-3de4-bee6-c29360472957.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:a7:59:db:31:31:0a:4d:ec:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0d24eaff-dea9-4216-8541-f48b5f3e1204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:1e:d5:c8:e1:57:5d:b9:d5:c3:9c:04:3d:
3a:29:ef:71:31:45:79:a1:79:75:c5:11:83:83:81:
03:ef:2c:6f:9e:48:9b:08:f7:14:8b:bf:dc:1f:e8:
5b:8f:5b:5a:9f:8a:db:f2:c0:e7:0c:87:25:9a:74:
b1:65:94:7c:3f:65:32:72:a1:f8:48:9d:6f:ad:41:
c5:c1:b7:25:1e:35:89:1f:e6:6d:26:32:cf:a8:45:
cb:5c:c0:41:68:3f:ff:e8:34:aa:d3:a9:98:82:a8:
b4:4c:ba:59:de:b9:00:7b:ec:ac:82:b7:4a:03:46:
05:55:30:a1:5d:d6:e6:75:22:44:94:6a:15:e7:aa:
0f:79:b6:de:9e:88:27:a4:ca:99:70:e6:78:5f:7e:
dc:25:22:62:b0:d6:80:40:8f:d2:1a:9b:65:8c:39:
2d:46:55:3c:e9:4e:92:10:51:55:96:17:99:5e:d5:
4e:37:05:a0:af:f1:ee:7d:ac:ac:d4:dd:40:fd:0f:
80:74:ca:33:e6:1b:47:11:24:53:33:f3:ba:83:63:
bc:23:b2:37:83:23:39:ef:21:2f:32:ab:a9:29:76:
b5:c8:11:d9:0f:db:e5:21:09:e3:28:59:5e:b9:cc:
02:d1:9a:3f:cc:03:85:19:a6:07:11:6e:dc:f0:f2:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:AE:F4:78:AB:BB:DB:D7:36:4A:9B:04:66:A3:05:85:D1:85:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3eaae7db-6137-3de4-bee6-c29360472957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7d:34:19:b1:e8:71:66:75:da:5e:58:e4:d7:a1:bc:0b:62:
ba:a4:3c:20:7d:68:6e:2e:ed:c3:b2:b9:a5:5b:27:c5:ca:94:
79:cf:4c:9d:4e:d3:73:8d:c0:6d:a5:79:d5:9f:81:0f:83:64:
d0:af:75:04:fb:3b:ea:73:4f:5e:52:74:49:da:31:37:68:e6:
b5:79:50:b7:73:0a:dc:6a:4c:81:3c:54:1c:5a:59:07:52:55:
03:d3:f0:6b:cd:7a:24:ad:6c:bd:e7:43:c4:4c:14:ae:44:ae:
58:ec:1c:0d:da:43:a0:d8:e1:d3:09:37:33:b2:5c:f4:90:55:
45:f9:a6:22:03:d4:0d:90:e9:8c:eb:bf:35:65:8a:a2:93:0f:
fa:d8:3c:66:9f:2a:9a:aa:27:8d:37:82:b0:c6:f7:5b:38:40:
f1:5b:b7:7d:d8:40:b4:aa:89:86:9b:02:a8:de:1e:7c:03:2c:
49:85:c4:eb:9d:d3:27:a1:c8:f5:c9:7a:c0:d6:e8:02:32:10:
68:a5:ad:5a:c1:1a:25:2f:24:ef:ba:65:44:2f:a7:82:39:4e:
87:62:0a:68:0e:7d:07:86:2f:8d:f8:c5:f2:15:a8:8a:d0:0a:
bf:d1:51:05:a7:f9:4f:07:0c:8f:89:b2:61:93:ac:28:38:53:
93:37:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org