Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/462d3679-3c21-3d7d-a248-47ee5be8da93.roa
File: 462d3679-3c21-3d7d-a248-47ee5be8da93.roa (raw, json)
Hash identifier: dJKj8CJfN6ko21Y7DY0776KN9UmWs+qlQSA9jLNMPzQ=
Subject key identifier: 66:16:50:1D:01:D8:62:AB:12:31:20:CC:6F:EC:FD:A1:DE:DC:75:C2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A209BDD15ECF83F6E887080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/462d3679-3c21-3d7d-a248-47ee5be8da93.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 208.68.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:9b:dd:15:ec:f8:3f:6e:88:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2cf977c8-7d7a-47eb-9a13-b701e859ef43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b5:b6:4c:dd:dc:47:78:65:a6:cd:37:7c:24:
41:ad:d7:f6:58:9f:ce:46:67:ed:a2:f4:3d:1a:c5:
1e:0b:f9:d8:52:17:e2:cd:88:62:ae:21:09:fc:2c:
c5:0a:26:ec:96:89:8d:50:40:d2:12:41:ac:2d:11:
a2:15:81:eb:1a:5a:d5:b4:5b:77:7f:48:06:05:20:
d8:01:a5:06:e3:50:18:cf:dc:3e:64:e3:1e:e4:ee:
d3:10:09:ee:ba:77:d0:61:cf:4b:10:fb:2d:75:13:
db:e7:44:b1:f4:7f:e1:e6:25:38:85:86:31:6f:a7:
98:65:06:87:f3:4d:5a:06:17:a0:ed:b1:e1:bd:29:
0b:70:57:42:28:6a:21:6d:1f:ff:3b:51:61:20:0f:
de:e3:1f:5d:3f:09:94:56:fd:aa:03:27:0e:a6:c0:
0c:3b:44:91:c6:88:6b:bb:f0:1a:b8:bd:87:9e:e3:
ae:64:8c:76:be:49:6b:ef:df:ae:1b:1b:e4:a8:ac:
c0:4c:d4:78:68:28:89:25:23:36:08:56:c1:1a:97:
96:b1:a9:df:4d:f9:d7:dd:28:03:54:32:d6:85:24:
eb:bc:ec:fb:24:02:26:87:3b:ea:06:79:83:ae:b0:
8c:af:9d:39:76:5e:c4:a3:5f:31:51:8d:71:b8:5a:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:50:1D:01:D8:62:AB:12:31:20:CC:6F:EC:FD:A1:DE:DC:75:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/462d3679-3c21-3d7d-a248-47ee5be8da93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:87:96:00:20:57:3f:06:01:dd:31:8a:0c:31:eb:1a:73:cf:
c5:a4:6d:66:1e:12:03:b3:53:c6:30:37:6b:8f:5d:56:d6:5a:
99:59:13:27:42:2d:aa:08:6a:97:f1:d7:57:1e:a3:a4:b2:f8:
f6:bd:b6:ab:ad:20:e9:34:e6:70:0a:08:22:3f:3f:2e:7b:5f:
ce:10:88:d6:18:3e:36:59:5d:4d:53:99:0f:05:97:ae:f3:40:
f4:85:ce:d4:29:91:38:d8:f4:b9:3d:30:2f:d6:e1:ab:ae:80:
20:86:40:d0:2d:1b:33:d7:d9:12:85:83:b6:f2:9b:40:59:63:
5e:7a:34:93:4d:08:63:56:dd:89:0d:ed:8d:cc:cf:03:40:25:
9a:ed:40:89:a7:a0:67:33:60:5c:c0:02:ad:73:ab:81:b0:7a:
af:67:bb:20:db:7e:a7:51:3b:d3:48:3b:18:45:fa:cd:ee:59:
3e:3d:5e:21:48:56:85:8c:82:ad:91:cc:f0:f9:59:5d:24:92:
17:c0:eb:6b:64:c3:32:d4:64:6d:41:19:dc:71:8e:48:a8:32:
6a:a1:df:f2:89:2d:44:9a:1c:e0:82:a7:d7:59:08:f4:d4:e4:
e8:a4:12:43:a9:02:35:4a:30:10:f4:d0:c5:87:25:a8:8f:08:
5f:e6:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org