Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4c6412aa-de0f-3219-999c-ba9a6f322a51.roa
File: 4c6412aa-de0f-3219-999c-ba9a6f322a51.roa (raw, json)
Hash identifier: WfV5DzNzSr9az8fksYon8SRE5p7C+DzRuqiWtENUveU=
Subject key identifier: D5:AF:D0:48:84:92:74:B1:EC:5C:6A:BE:EF:46:21:8D:4C:A8:90:4F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F63F8447D4661479952BC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4c6412aa-de0f-3219-999c-ba9a6f322a51.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:3f:84:47:d4:66:14:79:95:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=883f477e-7f15-4859-8c71-3dc31dffe0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:95:fa:0d:85:aa:ea:6b:a9:a6:46:57:e1:
d2:e0:25:22:db:b0:59:fc:62:a3:c4:80:40:37:04:
25:ee:95:80:59:29:42:3f:b5:bf:fe:b6:db:c7:d1:
66:eb:34:4f:eb:ac:b5:39:b3:72:52:27:c6:37:8b:
02:f1:a9:82:0e:4d:c5:4f:0a:ff:6c:77:a4:67:7c:
d8:ad:03:a1:eb:98:e4:c1:03:97:98:ef:14:67:13:
66:65:97:df:2a:61:19:70:36:74:c0:c6:2d:23:1a:
6d:cf:35:5b:51:01:ff:e1:77:a2:c5:40:04:18:5d:
6e:7b:7e:91:f0:a2:71:be:67:58:29:49:40:a2:6d:
a5:5a:bc:0e:2d:72:3b:0c:12:b6:aa:df:b2:6d:e8:
e6:52:9e:3e:5e:68:2d:a2:24:3b:82:9c:2f:56:96:
fc:14:68:90:ff:58:84:15:12:14:c9:74:e1:87:b3:
0d:56:1a:69:6f:a8:aa:e4:77:f5:1a:5f:3b:e7:e2:
85:b9:7b:28:3e:6a:13:a3:0b:06:6c:a0:98:53:7a:
b6:e2:77:fc:a6:7c:94:15:7f:92:a7:61:2f:cf:76:
b7:7e:96:34:f3:15:57:ec:0f:e8:f2:d3:de:a9:e7:
74:ae:55:5f:4a:a6:34:94:85:91:b5:78:34:cf:8f:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AF:D0:48:84:92:74:B1:EC:5C:6A:BE:EF:46:21:8D:4C:A8:90:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4c6412aa-de0f-3219-999c-ba9a6f322a51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:34:03:3f:3e:1b:e2:28:01:a9:9d:b6:55:e5:06:0c:b8:e4:
1e:5d:88:e9:6b:51:3d:dc:8d:33:71:09:aa:e2:13:4b:9f:c5:
c6:bd:3b:0f:25:b5:c5:4c:52:5d:87:7f:03:e0:65:71:40:2b:
e9:96:42:1b:b5:71:d4:0d:11:1c:c4:9a:96:32:6f:e6:1e:64:
8a:68:40:43:98:cf:ba:24:3d:90:82:55:d8:38:5a:26:06:b4:
ab:b4:83:dd:ee:33:e3:37:92:cc:a0:63:02:8a:3e:8b:7f:3e:
57:52:f3:61:38:7c:4f:ef:e0:3c:b4:da:b4:22:8d:69:83:44:
8a:cf:46:22:e1:8b:a7:17:fb:70:3e:8b:67:4d:65:ce:39:e1:
29:69:20:8d:b2:d0:c6:13:8f:7b:34:ac:49:73:05:eb:05:81:
5b:ea:cc:21:77:0b:90:d2:a3:28:55:f6:55:e4:4f:e5:63:04:
00:69:bc:51:9d:5d:eb:ee:c7:f4:a3:a2:8e:bc:57:17:34:48:
9a:d1:ef:42:9b:10:57:92:9c:e1:ee:cd:78:1c:2c:f6:38:eb:
25:36:0d:1e:bd:e9:41:ff:f3:ad:a7:32:6a:2a:a8:7a:17:f8:
56:0b:1c:e3:e6:f3:fc:0c:84:08:af:25:31:7e:c1:27:aa:38:
84:cc:53:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org