Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86571360-34f0-3d99-a1be-eb1c3a4c5ef9.roa
File: 86571360-34f0-3d99-a1be-eb1c3a4c5ef9.roa (raw, json)
Hash identifier: bUCfPEnaA8/W41yFLH+xoBZZoF9LLvAMep/KFF8AREM=
Subject key identifier: 5D:F7:24:B1:A9:4C:36:81:68:3A:73:A5:91:08:84:8B:6D:04:91:93
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F085E435813398F1D26780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86571360-34f0-3d99-a1be-eb1c3a4c5ef9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:85:e4:35:81:33:98:f1:d2:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=935b7ba7-2971-4762-bcf3-c707bd15a8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:54:c2:47:a9:55:7a:cd:77:5f:4d:cf:cf:
b2:60:18:a4:09:1c:51:fa:e1:bd:38:9b:b7:b1:fa:
f5:93:3a:07:5f:44:03:c6:3f:0c:4b:e5:e4:8b:d2:
53:ee:dd:0f:1c:09:07:ba:7d:f8:a5:a6:1d:98:a5:
c5:ab:30:2d:b4:80:12:eb:18:c7:76:5b:58:b5:40:
92:b9:c3:46:2b:3b:82:e0:ec:8f:05:98:08:5e:d5:
38:6a:c8:1a:c4:dd:44:a6:f5:9a:90:e6:76:54:ec:
04:4c:da:59:3e:69:81:a6:7b:ac:9f:40:f0:5f:58:
3b:65:47:cf:d2:62:bf:32:3a:9f:a9:5b:21:09:9f:
f0:12:6d:72:49:17:3e:bc:1a:38:9a:e6:2c:27:3f:
c5:5b:9c:2a:bb:16:3d:ad:83:52:c9:be:52:7d:af:
fb:9f:9c:a0:cd:e4:89:3d:59:cf:34:25:16:f7:d2:
4a:ed:8e:9a:44:35:b8:51:66:82:fd:52:65:3b:9e:
9a:9d:26:cc:2c:16:e0:b7:8d:c4:66:aa:05:36:29:
99:15:56:44:63:ab:9a:50:37:d8:d6:39:2a:b4:93:
62:fe:67:a1:ef:55:10:50:85:34:9d:07:7d:6a:91:
4a:50:a4:51:e8:f6:79:86:39:f2:6d:fe:b9:c8:67:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:24:B1:A9:4C:36:81:68:3A:73:A5:91:08:84:8B:6D:04:91:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/86571360-34f0-3d99-a1be-eb1c3a4c5ef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:cc:71:8f:5b:3b:6a:26:6f:25:a5:ea:92:d7:07:85:a1:98:
7a:fb:19:02:79:3b:cc:1b:ed:b2:d5:de:24:2a:07:3d:a4:19:
6f:b4:83:d0:35:20:20:21:2c:3a:f7:21:98:fe:85:53:44:75:
db:80:45:59:e3:64:3b:56:ab:47:94:83:1d:00:bc:e8:56:95:
9c:a9:4b:77:38:fa:f9:da:13:a1:24:92:e9:98:6d:38:31:58:
b9:c6:66:ad:7a:b1:b4:41:85:2a:d6:95:c1:2b:ee:7c:f1:94:
79:1a:5b:c6:fe:7d:8a:d4:52:8a:48:0a:fc:86:4a:ff:a1:95:
d0:2b:88:6b:4b:69:cc:a7:41:e5:5e:0b:de:d5:3e:e8:8d:d7:
14:eb:8f:65:d0:ea:10:5f:30:f8:c4:3d:1d:69:ec:62:1b:2b:
b6:5c:51:6e:48:b3:7b:fb:b8:19:a0:ed:35:1c:89:d3:9b:76:
87:b3:72:fb:b9:2f:f2:c0:10:da:60:db:51:98:92:11:de:29:
44:53:b4:f2:8d:bb:05:44:fa:7f:35:8e:6c:c2:aa:aa:e7:21:
85:87:15:ca:97:17:c9:fe:6e:15:fc:23:ed:01:48:b1:10:a2:
98:85:33:21:8b:61:67:21:0b:98:4d:ec:f5:be:2d:a3:7c:75:
d7:77:ed:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org