Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42285ac2-57b2-3090-8231-5f7791f2788b.roa
File: 42285ac2-57b2-3090-8231-5f7791f2788b.roa (raw, json)
Hash identifier: YKfgfEA8tAe8QzCBUfXBFHXtW+0Wilnk67MHrTYNN38=
Subject key identifier: 5B:93:4A:C3:40:59:3E:73:51:8C:37:EE:EF:05:2E:F4:3A:34:CA:E1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FE903285528C9B3FE73C80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42285ac2-57b2-3090-8231-5f7791f2788b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 70.32.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fe:90:32:85:52:8c:9b:3f:e7:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=41becaad-dca7-4929-8822-2a2cb962c250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:bf:03:14:a0:3d:2b:37:b5:37:df:dc:a5:
b4:33:dd:7c:d1:cc:af:25:a3:b9:9e:fa:e4:a6:86:
2f:42:a9:9f:06:03:86:0a:97:a2:3e:d6:25:0d:60:
3e:57:e5:d0:ba:93:59:e0:79:98:4a:90:9d:4d:70:
4d:26:d9:50:81:c1:90:11:37:f9:2b:12:cc:47:3e:
fe:95:e6:07:ae:9c:e7:68:b9:3e:31:17:a8:83:50:
0c:c1:34:95:3c:8c:b4:d0:0f:8f:fe:2b:40:5f:34:
09:83:ab:4a:0e:df:23:cf:c7:34:d6:df:4a:ca:24:
8d:72:b1:b0:76:d4:90:a7:a3:01:26:f7:25:88:c8:
f0:5e:2e:63:6d:ca:77:07:57:6a:e5:ae:74:10:4c:
29:b0:84:39:5d:92:94:f7:9d:c2:31:60:32:94:f1:
76:57:2b:32:36:77:08:33:86:2e:31:75:3e:f7:14:
6f:8b:93:2e:b2:2b:3d:65:65:54:f7:f5:d5:f6:c2:
46:08:0a:75:67:87:2c:e4:23:67:49:78:bd:7f:a4:
9e:e5:3e:36:29:fe:ed:98:63:ed:bf:87:6d:41:31:
fb:8d:15:0f:fa:35:0e:c6:6f:45:54:9a:75:1d:ba:
32:a0:8e:d6:56:ee:aa:8b:a5:d6:0b:dc:94:51:7d:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:93:4A:C3:40:59:3E:73:51:8C:37:EE:EF:05:2E:F4:3A:34:CA:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42285ac2-57b2-3090-8231-5f7791f2788b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:69:4d:4f:eb:ad:85:c0:31:30:55:ed:aa:7c:d3:cb:e6:8a:
6c:55:ec:92:f6:55:31:2e:ac:82:7c:de:15:43:59:62:b9:84:
8f:8d:d1:dd:76:76:25:d5:9a:62:7c:96:97:c6:e5:2e:49:66:
79:ba:48:7a:8d:a7:17:40:e5:12:17:50:a8:60:a4:97:ed:fd:
7e:0d:e2:f8:54:89:a4:bd:af:18:4e:5c:a7:6b:10:9e:96:c2:
37:13:70:f8:e7:2c:46:9d:12:38:64:a2:3c:0d:fc:17:3a:66:
50:5f:65:a2:d4:85:6f:0f:38:1b:05:c8:bc:cf:44:0d:10:74:
73:f3:30:54:a8:ff:3e:cf:34:66:af:61:8d:d2:73:a0:38:29:
33:b6:86:c5:ad:28:f7:ed:94:27:27:12:01:49:bc:50:e1:4a:
c5:d2:5a:4d:e2:bc:1b:d1:98:a4:21:f0:37:62:32:71:88:c8:
39:30:c3:0e:5d:28:ca:8d:6e:de:81:09:cd:d7:b8:71:c6:e7:
a3:cc:c9:ca:d4:d8:9f:bf:4f:77:7f:8f:05:69:a2:2c:ab:49:
ea:5f:5e:51:e3:ea:97:f5:4c:bd:ab:48:a3:4c:7a:52:bf:14:
65:2c:f3:d8:99:16:05:9e:a8:87:f0:b5:ab:f0:92:b8:41:b8:
6d:c4:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org