Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a990e0b-15ee-34c6-ace6-3810f879b729.roa
File: 4a990e0b-15ee-34c6-ace6-3810f879b729.roa (raw, json)
Hash identifier: pXSPRWo/6hR7Lw8XkyA8jyMkvbupe8ICklLjW2a5/Ik=
Subject key identifier: E6:65:89:4B:A9:A6:6A:07:8D:E6:5E:F5:A3:D6:57:F7:0C:62:FD:F2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EBB80E880C490C9949BF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a990e0b-15ee-34c6-ace6-3810f879b729.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:b8:0e:88:0c:49:0c:99:49:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=535a9701-f3d3-4026-b775-ec6d52e62f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:7e:8c:49:3b:3a:15:e6:a6:23:5e:3a:e0:
59:af:8d:de:f7:2f:c0:9f:49:ef:c5:1b:99:85:94:
48:d1:4a:a2:90:b2:29:bc:c9:06:60:29:52:88:0c:
66:9c:a4:80:e2:c8:71:d8:48:b3:3b:d9:e9:a8:60:
32:9b:bb:08:08:d5:57:40:64:52:0b:fb:c8:c2:e2:
d3:bf:44:fb:94:d2:c4:f3:67:c7:78:a5:5e:01:fc:
61:bb:b1:7e:7d:f8:fe:91:a0:80:4e:66:a1:7d:f3:
12:44:95:bb:ba:96:6a:28:49:91:50:d6:3d:99:aa:
6e:60:b0:9f:3a:ea:4a:c2:08:86:5d:19:73:7e:34:
37:ea:51:be:ec:6c:80:14:be:f0:d7:31:fc:a4:51:
b4:ff:12:07:94:3d:fa:93:84:fd:28:21:ef:ec:d2:
7c:e0:c7:4c:00:b8:9e:0b:7f:0e:98:df:56:97:e7:
fc:ad:50:32:39:e0:3c:7f:b8:16:a2:24:82:df:f2:
b6:09:df:fc:98:0b:40:d0:27:0f:78:b4:ab:a3:c8:
74:73:df:a8:df:f9:e0:4e:8f:44:88:25:53:06:c4:
ae:f7:d5:fe:94:62:51:61:76:94:a2:e3:75:de:04:
ad:ea:00:60:1a:bb:b8:0e:8e:99:5d:10:b2:f9:79:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:89:4B:A9:A6:6A:07:8D:E6:5E:F5:A3:D6:57:F7:0C:62:FD:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4a990e0b-15ee-34c6-ace6-3810f879b729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:bc:ee:85:a2:45:2d:cd:c5:23:27:23:de:2c:bb:28:c7:41:
d3:a5:2d:88:05:04:0f:74:51:23:03:30:78:66:4a:b0:00:27:
fa:7b:e4:07:7a:66:2e:b9:8b:1a:ae:78:50:3a:5a:32:ac:ce:
bd:45:36:3d:5d:d2:7b:99:81:38:dc:cf:34:1f:5c:85:c3:38:
b8:7e:98:34:45:6e:ed:1f:45:6a:aa:5e:85:81:e2:9f:59:8a:
0d:76:1e:f9:cc:7c:c9:11:91:44:bf:eb:fb:ec:a4:86:56:21:
7d:b8:89:b8:ce:b0:d8:62:0f:70:56:52:55:a5:ea:ed:df:15:
44:ba:4e:a2:43:a8:d2:45:d3:4c:ed:62:ec:62:dd:e4:7e:af:
26:32:45:9f:3d:89:d5:63:2b:c1:99:82:b6:7b:5c:22:69:17:
9f:70:94:f8:6f:a3:f5:26:7d:82:71:df:01:16:4e:a8:bb:3a:
6c:b0:b5:a6:23:85:f4:ff:88:4a:95:48:9b:28:e5:42:df:1b:
6c:c2:df:0b:90:f6:da:23:3f:b6:70:c4:8a:e4:29:89:94:d1:
4c:d2:30:80:d4:63:48:ef:7c:d9:65:c9:1f:28:4a:c8:ec:dd:
d4:8c:48:2c:99:f4:46:15:6e:78:c9:40:55:da:b9:af:29:b1:
e6:15:dd:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ67gOiAxJDJlJvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTM1YTk3MDEtZjNkMy00MDI2LWI3NzUtZWM2ZDUyZTYyZjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+h+jEk7OhXmpiNeOuBZr43e9y/An0nvxRuZ
hZRI0UqikLIpvMkGYClSiAxmnKSA4shx2EizO9npqGAym7sICNVXQGRSC/vIwuLT
v0T7lNLE82fHeKVeAfxhu7F+ffj+kaCATmahffMSRJW7upZqKEmRUNY9mapuYLCf
OupKwgiGXRlzfjQ36lG+7GyAFL7w1zH8pFG0/xIHlD36k4T9KCHv7NJ84MdMALie
C38OmN9Wl+f8rVAyOeA8f7gWoiSC3/K2Cd/8mAtA0CcPeLSro8h0c9+o3/ngTo9E
iCVTBsSu99X+lGJRYXaUouN13gSt6gBgGru4Do6ZXRCy+XnrVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZliUuppmoHjeZe9aPWV/cMYv3yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGE5OTBlMGItMTVlZS0z
NGM2LWFjZTYtMzgxMGY4NzliNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIq87oWiRS3NxSMnI94suyjHQdOlLYgFBA90USMDMHhmSrAAJ/p75Ad6
Zi65ixqueFA6WjKszr1FNj1d0nuZgTjczzQfXIXDOLh+mDRFbu0fRWqqXoWB4p9Z
ig12HvnMfMkRkUS/6/vspIZWIX24ibjOsNhiD3BWUlWl6u3fFUS6TqJDqNJF00zt
Yuxi3eR+ryYyRZ89idVjK8GZgrZ7XCJpF59wlPhvo/UmfYJx3wEWTqi7OmywtaYj
hfT/iEqVSJso5ULfG2zC3wuQ9tojP7ZwxIrkKYmU0UzSMIDUY0jvfNllyR8oSsjs
3dSMSCyZ9EYVbnjJQFXaua8pseYV3RI=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org