Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/680d1aa8-1d75-3ff2-83e2-11a564d83d8c.roa
File: 680d1aa8-1d75-3ff2-83e2-11a564d83d8c.roa (raw, json)
Hash identifier: 9AgVFOpjreAdOf9WlaPVVrXm+4PSo3ApnxTMyWjYtGg=
Subject key identifier: 99:8B:44:5F:B4:50:52:66:49:C6:85:36:C2:7E:DF:C7:35:4E:34:5A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A07CAD86DA3987CDE478E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/680d1aa8-1d75-3ff2-83e2-11a564d83d8c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:ca:d8:6d:a3:98:7c:de:47:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=24cdbcdf-50a2-4826-b7b9-0baf196ba235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:51:68:31:26:64:2b:e7:d6:ca:0c:36:e5:
9f:35:de:04:d0:98:51:06:41:82:e1:e3:2b:6b:95:
c3:b3:43:87:c1:71:1e:5b:6b:40:60:dd:76:54:ce:
43:ac:37:41:45:ed:19:a4:ba:d9:ca:40:93:df:32:
be:ed:ff:7e:2b:66:38:a0:19:38:9d:fa:13:e9:61:
b2:b1:a6:20:a4:dd:63:dc:36:46:c6:d4:97:da:44:
00:e0:ec:41:a3:5a:12:61:8c:8b:4c:17:dd:62:b9:
d8:4a:87:02:8a:aa:f9:c9:50:ce:43:d0:02:ee:d1:
13:25:6e:78:cd:0c:35:96:22:da:5d:3b:17:59:cf:
ef:95:cd:ac:3f:32:ef:83:0b:dc:24:dc:ba:5d:8f:
ff:3c:9f:b8:36:32:c3:46:3d:d4:65:c7:5c:aa:a8:
dc:dc:35:36:1c:a6:8e:37:00:63:73:b7:06:d4:1e:
ad:19:28:af:af:14:3e:c8:59:d3:ac:57:61:b3:6c:
3a:c8:53:8f:41:f5:72:63:7e:0b:c5:7e:4b:92:c9:
3f:86:7d:8c:81:87:ee:aa:85:bd:50:5f:7e:c3:01:
49:ea:bd:56:97:20:04:9c:52:fc:54:2d:08:62:05:
15:05:b2:54:e0:7a:73:a0:72:7b:58:94:d5:dc:05:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:44:5F:B4:50:52:66:49:C6:85:36:C2:7E:DF:C7:35:4E:34:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/680d1aa8-1d75-3ff2-83e2-11a564d83d8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:fd:92:a0:5b:a5:d1:99:41:63:2e:9f:98:28:23:25:19:92:
56:39:be:46:f1:05:f6:00:66:72:66:72:a8:b0:3d:f6:10:34:
88:03:fb:2d:5d:c8:87:67:b9:8e:b9:6c:9d:1d:25:72:79:fd:
25:f6:6d:50:41:9d:c8:29:15:e0:4b:bf:1a:73:25:b9:e0:e9:
5f:be:3b:69:dd:65:aa:d2:ae:ed:90:42:34:96:47:24:fa:85:
14:7a:96:d7:6e:bf:6f:8a:d0:b0:00:0c:af:26:44:3f:58:26:
ae:ef:56:29:f3:3c:36:11:58:39:75:58:17:a4:47:4f:00:9c:
ee:cf:3a:b9:fc:6d:11:20:96:bc:05:8a:45:2b:20:80:cf:06:
6b:8f:05:ed:2a:59:ad:c6:52:47:0a:47:fa:a5:71:a5:c9:48:
ba:75:45:8a:97:6c:25:c8:9a:80:61:ba:41:2f:fb:ba:12:1b:
4d:cc:64:59:55:79:85:2f:73:5c:81:7d:17:84:6b:7d:17:6f:
b0:21:64:78:37:5f:11:e6:e1:fb:1c:ed:22:ac:c5:6d:a0:e4:
02:e3:3e:5f:96:c7:6a:7b:4f:ce:7f:86:c7:69:5c:0a:03:af:
e2:8a:ed:60:b1:e8:04:5e:68:5f:bd:d4:b1:0e:a3:73:dc:29:
42:1e:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:39 2024 by rpki-client on console-ams.rpki-client.org