Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3fc59c5a-227b-35fd-ab51-54e340f3490a.roa
File: 3fc59c5a-227b-35fd-ab51-54e340f3490a.roa (raw, json)
Hash identifier: 4Z4fmGAeDpI3lTpQMFwHO2MOOKFOkhoz7jwcgaluSKY=
Subject key identifier: 1B:27:26:74:C7:A0:05:3F:B8:73:E5:27:C2:87:14:15:FA:C0:AF:A0
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A07C2611D404AAA3A61D300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3fc59c5a-227b-35fd-ab51-54e340f3490a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 66.249.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:c2:61:1d:40:4a:aa:3a:61:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fab01882-cfd6-475c-abf6-1b3ea8966b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:e4:f1:cb:4e:25:7c:7f:15:91:cf:41:81:
47:99:b6:16:96:55:37:c0:5a:6e:00:43:a5:5d:be:
0a:e0:4f:6b:71:ae:01:20:32:02:32:a8:1f:35:a0:
78:24:b2:83:eb:86:8a:d6:52:6a:1d:ea:06:be:43:
6a:18:1a:33:3e:c6:77:be:f4:58:b4:66:0f:8a:e2:
b3:02:83:64:26:f7:e0:cd:56:1a:11:10:06:9e:e5:
7e:fc:68:79:43:f3:1f:99:c0:48:91:a5:e4:85:23:
e0:34:62:c8:76:e2:79:5d:00:9b:f2:49:29:69:08:
47:f4:b3:04:1d:d1:e0:d3:ed:f7:10:56:03:bf:4f:
0c:83:ff:d4:b7:28:47:80:24:93:1c:44:ee:e1:dc:
6b:23:0b:20:e1:ae:7e:f8:48:94:58:be:a0:84:e0:
17:eb:15:ae:0f:d2:92:76:d7:71:97:c2:0a:43:a5:
d6:2f:55:ed:f7:91:4b:e0:98:66:8b:af:26:c8:96:
66:c7:44:5b:7a:e3:f8:13:d5:41:95:23:d3:fb:1b:
44:2b:be:f4:24:b8:e9:2d:23:e8:2e:af:53:ea:7a:
fd:a4:cf:bc:56:4f:0f:54:71:92:99:40:55:14:37:
02:f6:cf:93:c9:46:f8:16:fc:5b:cd:93:24:f0:93:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:27:26:74:C7:A0:05:3F:B8:73:E5:27:C2:87:14:15:FA:C0:AF:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3fc59c5a-227b-35fd-ab51-54e340f3490a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
66.249.80.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:c4:1f:63:b2:44:e0:7a:16:4a:e5:4d:88:c3:6d:b4:40:b5:
3b:12:ce:cd:3b:6a:ea:ed:b0:71:76:50:8b:be:46:32:47:e2:
60:41:3a:34:7e:3e:ca:ac:0d:16:12:14:0b:c5:4c:cc:7e:22:
11:7e:81:21:77:49:66:7c:d5:2f:6e:d8:9d:63:4c:f8:18:aa:
72:56:74:a6:30:b5:73:a8:08:f9:e1:f7:5b:fd:f6:b3:3a:1d:
5d:d6:6e:92:31:21:89:df:57:de:5f:74:0d:93:60:68:09:cd:
ac:b0:e1:82:91:7b:7b:24:5d:18:f2:34:fe:3b:d4:82:64:9b:
f8:a3:7d:9a:e1:66:9e:61:87:6f:8c:61:9c:96:24:01:42:d3:
fc:ee:c9:c3:ca:ab:9f:5e:24:26:9d:cc:8b:44:58:f0:4d:58:
2d:29:b6:b7:80:79:fa:44:7b:68:17:bf:52:0e:67:ab:99:f0:
f7:77:6b:86:05:8e:a2:90:ea:54:cb:83:37:f6:98:1f:15:38:
10:9b:cb:9a:eb:7b:e2:ba:a3:e4:00:be:c2:e5:e6:01:ed:51:
83:5e:a6:5c:0d:d8:f5:e0:4d:91:8b:82:b4:f8:21:2e:70:7d:
a8:f6:79:2b:b7:59:d9:5c:f1:a7:b2:0f:cc:f0:66:41:ec:df:
b7:51:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org