Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/485c7aa8-316a-38f7-b1fe-de5577f6a6ac.roa
File: 485c7aa8-316a-38f7-b1fe-de5577f6a6ac.roa (raw, json)
Hash identifier: mJuvGKkoammYkM4ZsTzirmrOp1xrgQKjoZpJ0fZrxoY=
Subject key identifier: F1:68:08:A9:55:EE:A8:ED:E2:09:72:AB:A5:0A:FC:12:33:79:B2:7C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EC73463F8679E1B7E18080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/485c7aa8-316a-38f7-b1fe-de5577f6a6ac.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:73:46:3f:86:79:e1:b7:e1:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6af71dfb-bdf1-4ad2-bd39-310ce5664605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:68:2c:6d:f9:f7:b7:6d:b5:a3:3a:d8:70:
bd:dc:4c:bd:a0:3f:4e:be:02:9a:ba:7e:08:0e:93:
79:dd:91:79:b2:4d:12:fe:37:e9:60:ac:81:b0:b5:
66:6e:ae:e4:fc:12:29:f2:b4:ed:c7:3a:07:42:8d:
97:17:80:f5:63:64:cb:8f:23:60:48:04:5d:83:e5:
c2:19:bd:96:1c:f7:19:21:53:b9:a6:0b:f5:53:68:
1c:5c:4d:21:c1:e5:fe:af:d6:be:ca:ff:6a:db:d3:
83:c7:02:cd:41:a4:b1:39:25:1b:41:b8:80:c9:91:
29:99:3e:95:16:bd:11:59:70:bb:ca:84:85:82:01:
ee:ca:fa:5c:8a:89:3e:9b:e8:a9:29:ee:e7:5d:52:
e9:4f:8a:51:ef:a0:51:77:94:32:04:f0:03:4c:8b:
fc:46:96:31:a8:70:81:e9:18:87:0b:4d:d8:5e:03:
5e:ee:78:e8:49:99:46:41:c7:42:a6:db:be:3f:0c:
63:01:77:16:50:7a:78:41:1c:47:15:8a:ec:61:8f:
50:fe:1c:bf:9b:b0:f6:c3:0f:52:08:18:81:1a:08:
14:b9:55:7f:9b:79:9c:0e:af:d5:61:5a:08:18:ec:
9f:cb:32:87:f0:b2:59:c3:5f:b9:82:16:cc:7a:d3:
4f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:08:A9:55:EE:A8:ED:E2:09:72:AB:A5:0A:FC:12:33:79:B2:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/485c7aa8-316a-38f7-b1fe-de5577f6a6ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:67:7c:27:75:85:9f:b8:47:37:5a:08:38:44:ce:b4:7e:b6:
d9:89:4d:07:b8:65:64:e7:5d:c4:0f:f7:07:87:26:c8:08:8b:
2c:32:ea:2f:bc:db:4c:75:d8:f1:00:64:a2:b9:16:5c:d1:91:
12:73:63:52:0d:bb:aa:9e:a4:8a:b0:4d:f3:38:4a:a0:58:fc:
8e:fa:4c:17:e1:2e:d9:3c:b2:f0:be:d6:5b:37:6f:1e:46:27:
a0:16:14:e6:a5:80:cc:70:11:64:01:33:0c:25:9b:77:a7:42:
23:87:f6:31:1a:11:dd:74:e7:c9:fa:c4:e8:88:04:0c:0b:2c:
00:17:2a:98:68:28:67:c7:8c:00:89:92:ca:0e:61:50:f2:d0:
fc:ae:d1:bd:91:2e:38:f3:30:72:2b:13:40:09:16:9f:18:81:
82:ec:1c:be:f8:5d:da:07:4a:95:36:cb:96:f4:80:cb:3b:d3:
0e:ab:d7:e9:a5:b0:11:97:bc:17:66:f9:bd:b9:09:1c:60:75:
00:4c:46:71:b6:c1:a7:4d:76:2a:80:e9:46:81:5a:da:e5:87:
75:46:c9:40:6f:8d:da:62:f7:61:4d:ef:33:9f:03:9d:eb:e6:
cc:2d:e7:16:1c:5e:b6:50:08:59:01:99:2c:df:45:9b:2a:90:
f6:5d:2e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org