Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51230741-4a1b-36be-a6c2-220e87e54967.roa
File: 51230741-4a1b-36be-a6c2-220e87e54967.roa (raw, json)
Hash identifier: ozoYdZpQ8tDkxyb63bHZ5JDgIBrBppHCelZT2Z9n2mM=
Subject key identifier: 2F:0F:C0:FC:6F:C2:39:A9:75:D4:29:49:B3:8F:32:9E:3B:15:46:32
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F23293B28D704BB7B44B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51230741-4a1b-36be-a6c2-220e87e54967.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f2:32:93:b2:8d:70:4b:b7:b4:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c2b710dd-62e9-4020-8194-99a47e97b811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:79:e8:ff:fe:58:14:d1:26:5e:78:a1:ca:
89:79:b7:f0:13:ca:da:82:ac:40:7c:a3:aa:61:01:
b7:89:b3:69:ce:92:ab:2f:04:70:b8:19:db:3d:da:
a0:42:cd:7b:64:b7:02:ae:51:d1:1a:74:72:72:3d:
9a:0a:6a:51:3e:d2:fc:dd:b1:de:4f:3d:21:ae:5f:
8a:ed:18:ee:63:47:3f:a5:8a:56:86:cb:b6:15:4e:
f4:87:a5:0f:99:6d:ff:7b:b6:a6:3d:90:a4:e5:1a:
7b:78:43:09:82:05:dd:6e:a1:38:12:d8:85:55:b4:
88:f5:ae:62:20:6b:d4:fc:e8:37:da:69:52:fd:15:
21:eb:8b:57:6a:73:65:b5:57:0e:ea:94:46:91:80:
42:73:f0:79:cb:95:07:d9:df:65:5c:b7:17:42:b3:
59:6c:cb:3a:b9:d2:82:7f:b9:2e:2f:e4:19:56:99:
20:a2:87:6e:39:0e:92:b0:f9:99:fa:77:bb:c1:b8:
d3:ad:eb:d4:17:94:3e:63:3f:55:bb:a8:3e:74:bb:
6c:37:40:24:ab:3a:42:94:cb:4a:0c:9a:de:c6:c6:
8d:ca:a9:d5:88:3e:d7:53:f3:9f:f6:68:53:ae:22:
ad:12:0f:a0:6b:64:7f:56:a1:1e:a4:0c:65:92:9f:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0F:C0:FC:6F:C2:39:A9:75:D4:29:49:B3:8F:32:9E:3B:15:46:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51230741-4a1b-36be-a6c2-220e87e54967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:71:56:c5:23:c3:e4:9e:2e:7c:20:a1:55:b6:4b:1f:a8:da:
0f:7c:f5:ec:2b:bc:71:dc:8e:96:0c:01:45:e1:60:3a:40:b5:
eb:0a:85:bf:3c:59:9a:62:13:07:ad:da:4e:48:11:53:cb:cd:
ba:ad:fc:d5:63:9b:04:a8:66:14:31:9e:3d:6f:2f:6f:a1:4f:
96:d1:ce:83:f4:90:2d:f1:d6:9f:d2:e2:ff:ed:6d:9d:64:3a:
b1:eb:8e:39:55:f4:61:39:7e:79:bb:4e:3e:5e:fa:40:9d:55:
f5:c5:06:fa:7c:1d:c4:e8:db:e3:e9:bc:49:00:57:34:df:2d:
81:c6:39:e3:a6:5c:29:2e:89:d3:42:90:38:27:25:46:e1:2d:
f6:19:5b:42:8d:d5:d5:48:90:50:a7:98:d4:32:fc:78:65:20:
27:6c:9f:f5:63:3f:4e:32:e9:9f:03:71:7e:bd:82:db:87:0c:
2b:47:f8:ff:a2:d7:8c:ab:82:f1:8f:7e:57:57:5a:d6:41:e6:
68:e1:10:bb:bd:95:24:a1:b9:25:5c:9b:a5:e5:c9:73:71:a8:
39:92:66:6e:38:8e:86:39:56:fa:40:e9:6a:ef:cc:3f:f7:38:
73:21:8b:3e:58:f4:5f:18:59:d7:f6:a1:14:5f:61:91:7c:f6:
b0:ea:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:23 2024 by rpki-client on console-fra.rpki-client.org