Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/535f6f04-110a-3045-a02c-9f6b3a886478.roa
File: 535f6f04-110a-3045-a02c-9f6b3a886478.roa (raw, json)
Hash identifier: dYsLt4ZYnjud4SGCfD3ZLU0VXuMuCDFsjnv+RKNdUEU=
Subject key identifier: 41:B4:37:BD:69:84:6B:45:E2:7A:82:D5:C4:7A:6D:CE:57:B1:E4:DC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0BE76F23F9774CD6426140
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/535f6f04-110a-3045-a02c-9f6b3a886478.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 70.32.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:e7:6f:23:f9:77:4c:d6:42:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8b30ceb9-6381-4b84-8f18-2cba2e89fb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:b8:83:be:13:b6:00:0d:0a:c6:8b:f1:7f:
10:d9:94:88:67:b4:8f:47:49:a3:73:2c:ab:dd:c2:
3f:aa:ee:9f:2f:aa:c6:39:f3:ee:e1:a9:6a:39:97:
ea:f4:b6:30:ca:23:87:45:77:8d:0f:1c:8d:00:a3:
b5:f2:c8:62:0f:09:a2:a9:27:f3:0c:9e:5a:4e:b6:
ca:b9:e4:c6:bb:8c:11:dc:6d:b1:f9:d9:95:e1:eb:
77:d9:62:fe:c1:45:31:b3:46:94:54:54:08:aa:de:
b0:86:21:89:4f:9a:ff:48:1f:87:37:cd:77:4d:7d:
cb:ef:84:a7:6f:29:8f:00:bd:a9:7b:b8:db:49:85:
68:96:af:0e:aa:bf:75:f7:2a:40:ec:eb:24:8d:93:
4f:43:d6:47:cf:fb:8f:62:0d:fc:69:e5:aa:ce:88:
07:58:e6:1c:b7:d6:d6:75:25:2b:fc:aa:44:67:45:
73:f1:93:25:4e:cd:5c:bb:e1:b2:b2:31:a1:0b:b8:
ad:4c:07:ca:97:f2:90:a9:b3:58:db:e1:f4:2b:87:
e0:75:75:ca:63:26:3b:99:19:22:71:b2:9f:31:5f:
e1:80:c7:b0:20:18:68:16:02:c5:c1:e4:be:93:e6:
a1:a0:86:c7:cb:59:6e:cd:4d:81:9b:58:fb:ef:ef:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B4:37:BD:69:84:6B:45:E2:7A:82:D5:C4:7A:6D:CE:57:B1:E4:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/535f6f04-110a-3045-a02c-9f6b3a886478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:2c:c0:5f:e6:dd:e4:2f:28:e5:a5:6c:cd:39:e0:5d:37:55:
ed:65:68:82:aa:b6:52:e9:6d:7b:01:f7:88:82:f8:3c:61:d4:
fc:9b:60:f6:07:33:ac:f7:66:bc:9f:e0:bf:e7:f6:97:5e:cc:
a2:ee:cc:c1:0d:07:d6:c6:0a:74:68:04:f2:b4:e5:04:37:5a:
89:f7:65:23:9b:4e:18:91:39:f2:da:af:50:9a:fa:d2:51:67:
53:86:de:5c:9c:72:16:7d:18:0e:fa:3a:e2:65:c4:4c:cd:ab:
0d:79:63:15:22:db:23:f6:1a:96:58:ad:11:2d:bd:c8:4f:33:
d6:04:a8:5b:55:a6:22:fe:13:aa:d1:27:ff:85:6b:8c:2f:22:
68:b5:a2:4e:5e:a8:74:3b:54:d4:d9:e0:ad:18:d1:26:1b:ab:
8b:0c:f5:9a:88:97:95:ef:a4:61:2b:8f:46:22:0e:2f:30:c9:
fc:7f:b8:bb:6a:1d:d5:32:c4:9d:e5:8b:8f:fe:40:63:a4:fc:
cd:f0:15:22:84:63:9d:38:9a:00:9c:12:70:2e:79:1c:16:db:
a3:d2:ef:e2:dc:03:48:cd:f0:58:b4:8d:24:cc:59:d8:aa:60:
c1:ac:9c:40:fd:60:a7:c1:eb:71:1e:5e:30:d2:bf:a9:89:6f:
ac:f1:69:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org