Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/845aed8c-2692-3b42-a11c-b2ea7a8ff264.roa
File: 845aed8c-2692-3b42-a11c-b2ea7a8ff264.roa (raw, json)
Hash identifier: 0+54Eby2I5PWgpXAfdeeFwkZyPQrTlWKTz0Qwgbm6KI=
Subject key identifier: DD:EC:79:43:53:92:10:60:3D:50:6E:71:C3:4F:3F:C2:31:D1:21:C3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A27C7A69A64D9FDBF319540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/845aed8c-2692-3b42-a11c-b2ea7a8ff264.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:c7:a6:9a:64:d9:fd:bf:31:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3760c644-b87b-47a2-8b40-81e2d692ff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:7c:7c:ac:ce:c4:16:72:bb:7a:ce:59:1b:
d0:1e:68:51:83:9e:22:1e:7c:7e:a5:f8:cb:08:e1:
2e:22:bf:29:cd:93:87:d2:0d:1f:1a:ea:1a:8f:3d:
5f:fb:c8:ff:81:70:9c:ab:cb:04:5b:17:6c:37:65:
b4:44:0f:07:89:f0:fa:2e:7d:e0:3a:5e:5a:5a:4b:
2c:ea:72:17:46:5b:3f:3c:95:e6:b7:cf:86:4a:0a:
1c:d8:d4:7d:03:7d:02:26:4d:6e:88:3d:60:8c:88:
8c:a6:b4:44:f5:93:33:5b:47:8a:7a:4c:eb:cd:49:
c2:98:b2:e6:63:77:58:f2:b4:38:5a:58:90:ca:c4:
dc:a7:8b:57:3b:85:d8:31:f1:7a:3e:1b:a0:22:fc:
12:3c:8a:22:38:4c:c8:62:d0:d6:70:5b:55:7e:f2:
ae:d3:99:14:41:0c:ed:eb:34:0a:c7:0b:89:15:61:
cb:9f:cc:ae:63:36:c0:25:d0:a9:7f:03:d9:e4:fe:
15:fe:b9:1b:51:01:14:03:f2:44:28:33:1a:3d:87:
74:5a:dc:eb:17:51:4f:eb:58:74:d6:b9:fd:7a:84:
92:06:54:e6:d6:80:2d:d1:88:76:85:92:33:5d:aa:
2e:d5:6e:0f:08:f1:dc:32:4c:1f:27:9b:0e:1c:68:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EC:79:43:53:92:10:60:3D:50:6E:71:C3:4F:3F:C2:31:D1:21:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/845aed8c-2692-3b42-a11c-b2ea7a8ff264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:35:9f:cd:c5:1c:13:e2:05:54:07:25:e1:40:1a:39:24:9d:
6d:b6:61:a7:31:32:de:2a:98:3c:6b:c2:dc:ce:70:d9:59:70:
bd:dd:05:ab:c8:fd:0c:10:8b:9d:d6:d4:12:04:37:a2:b3:a0:
68:81:8e:e6:0d:90:60:b7:9a:62:64:1a:4d:6b:c4:9c:17:37:
20:97:3b:7d:91:a3:c2:77:f2:60:ae:47:51:da:22:23:30:3b:
0b:98:7b:86:77:b5:11:af:6f:e5:b4:31:ab:2f:bb:19:e8:15:
58:b1:b0:9c:13:93:6b:05:4c:bf:49:3d:aa:46:d1:08:f7:70:
bb:54:1f:e6:ee:79:7d:4d:c7:cc:95:a0:5f:d7:a2:67:c3:70:
ae:7d:00:7f:2f:bf:2e:ea:f5:cd:81:83:ca:a4:e4:23:3e:34:
d6:d1:62:16:b6:4e:53:25:28:d9:4c:bb:bc:c2:65:f2:81:e6:
0b:ae:80:b6:4d:70:1d:05:67:8c:74:26:94:62:58:b1:f4:a9:
21:21:79:b3:44:29:0f:a7:ca:1c:9c:be:0b:d5:2b:8a:c1:dc:
35:91:9e:b2:55:4e:8f:df:e4:28:d9:12:f4:50:40:96:f5:36:
2a:69:ce:ab:f4:02:02:44:81:82:85:fa:83:13:82:46:19:1b:
36:84:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org