Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46144ab7-f4e8-3374-8c3a-80a84bd509aa.roa
File: 46144ab7-f4e8-3374-8c3a-80a84bd509aa.roa (raw, json)
Hash identifier: h2kv9zYaaLc1F1MZdI7NiSYIlSk77wAz6Rtwq2pouqY=
Subject key identifier: E7:30:10:C7:D0:7D:2D:4A:E5:2C:70:D2:32:3B:73:DC:18:7E:03:18
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1742C33902F0EA4F797300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46144ab7-f4e8-3374-8c3a-80a84bd509aa.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.158.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:17:42:c3:39:02:f0:ea:4f:79:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b2bf3600-4447-491c-a1cb-3e54e990089a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:6d:76:9c:4b:1a:c9:77:bd:24:09:2b:72:
be:b5:ad:bb:f2:fa:ed:4d:6d:c2:f8:bb:67:2b:3c:
7a:2d:2a:f1:1e:2d:d0:3c:59:57:0d:cf:c8:80:3f:
2f:85:54:52:2e:b8:18:e6:99:32:83:e2:df:4f:4a:
76:f1:58:f5:4d:27:be:4d:55:1d:1d:e8:97:f9:ec:
83:42:7d:a2:77:b9:74:78:c8:4e:55:06:54:20:02:
86:a7:59:50:d6:ad:99:43:1a:a0:6b:e2:31:75:43:
0d:9a:78:40:63:3d:15:75:f9:d1:79:f0:a1:3c:45:
5d:6a:38:0e:5e:88:bc:8d:aa:54:48:6c:bd:ec:b5:
02:2a:9f:ac:fd:40:32:c0:73:c0:5c:82:02:7d:d8:
34:a1:4d:27:4f:44:cd:b6:b7:59:1a:de:ce:b8:f5:
30:ea:51:e8:e2:28:a8:11:43:76:1b:13:5a:13:cf:
c8:3f:18:1a:5d:11:dc:61:61:dd:cd:f0:73:0f:43:
0f:8f:dc:56:08:87:42:32:16:13:cc:83:66:a6:75:
89:96:10:b3:2c:a0:17:d3:d7:bb:13:92:a9:9d:83:
9c:7d:99:38:cb:72:a1:08:d7:5b:d2:e0:d6:fe:7d:
c1:fb:d0:ba:73:e8:f9:10:1c:73:33:2d:a1:64:41:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:10:C7:D0:7D:2D:4A:E5:2C:70:D2:32:3B:73:DC:18:7E:03:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/46144ab7-f4e8-3374-8c3a-80a84bd509aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:ae:ef:b0:ab:68:4f:fc:42:92:09:10:15:b5:5e:ab:8c:cb:
15:93:e1:83:ef:ab:bb:32:48:eb:74:de:15:34:6f:70:6c:f6:
d5:31:b2:02:ed:21:39:7b:cf:99:c9:a6:2e:fb:8a:0f:56:5a:
85:ff:00:51:14:6b:19:0a:4c:fa:7e:c6:d1:36:77:c7:78:89:
54:ca:02:1f:e6:d9:5f:27:d3:9b:a3:67:44:e9:57:5e:fb:4c:
83:85:f3:d7:4b:66:bf:54:d4:05:79:5a:45:c0:77:6c:47:38:
48:2c:e9:5c:09:1e:58:53:49:6b:a8:b5:2a:0c:f1:96:e6:da:
f7:af:d6:1f:a9:93:f7:84:06:ac:3b:66:b5:6d:e6:6f:44:20:
e6:05:af:74:a0:4b:ab:84:52:28:54:4f:2d:20:d8:28:53:52:
6a:84:b7:00:be:d3:45:bb:67:19:96:1e:43:35:13:aa:aa:82:
4c:c6:5e:2d:e8:f1:a2:a6:51:6c:82:0a:c4:70:09:0d:2c:44:
f4:2d:27:2e:8a:31:92:23:71:2c:9a:73:35:86:93:4d:af:e8:
4e:8d:3b:4f:9a:07:bc:cb:23:25:3c:1f:e4:69:4e:65:be:78:
8c:6f:ad:af:01:9d:c6:6d:c4:b6:aa:e6:31:24:8a:46:5e:34:
da:9c:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org