Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89dfcc18-a29d-3780-813a-8e16549aa687.roa
File: 89dfcc18-a29d-3780-813a-8e16549aa687.roa (raw, json)
Hash identifier: NmvDgwVi/r7gtapNx1Fmrk3N+X/cea//QG3919zAM10=
Subject key identifier: 23:B1:0D:C5:74:FC:4F:01:68:D1:A2:DF:D1:52:3E:F8:5C:EB:3E:EC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F4BA70D3334BE8BED37700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89dfcc18-a29d-3780-813a-8e16549aa687.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 209.85.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:ba:70:d3:33:4b:e8:be:d3:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9a5b3379-47db-44c8-bb9b-e857a1a1e4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:1c:d1:28:db:a7:29:20:28:00:3c:be:79:
f2:22:e8:06:3d:cf:3d:f3:2f:00:95:cc:6c:9d:8d:
7f:79:ce:e8:ef:d5:25:4f:2d:df:89:7a:f1:83:63:
01:84:a9:a8:c0:0f:11:62:fc:94:29:cd:9f:2b:31:
f6:5b:b1:f0:e1:19:b6:50:6a:d3:19:cd:c6:70:a3:
94:06:4d:4f:e1:7f:8c:92:90:7b:19:d4:be:61:3b:
a0:e8:a6:bb:69:b0:65:e9:99:63:23:04:fc:12:d4:
57:49:4b:52:67:81:c2:1b:96:c0:aa:18:6a:e3:9b:
a7:89:1c:3c:ac:df:dd:14:bd:cc:f3:43:d0:36:b7:
a6:ca:16:78:2c:ad:01:45:26:c9:97:9e:43:91:91:
48:5a:86:0e:37:47:a1:ab:f4:43:3f:3a:e8:5a:de:
4a:b9:60:77:f6:2e:8d:07:c3:7d:ef:bf:c7:ac:00:
2b:a2:9f:dd:43:3e:14:28:1e:de:ac:01:2e:28:eb:
f4:f6:29:e2:04:d2:9e:24:9a:0a:5e:35:6b:9d:11:
cf:b5:d1:e0:27:26:3b:1d:e2:00:12:25:43:51:df:
49:d9:21:2a:c3:29:ca:31:96:89:d0:d9:88:1d:7c:
26:40:e0:e1:55:56:29:e4:5d:35:db:e3:70:cf:b6:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:0D:C5:74:FC:4F:01:68:D1:A2:DF:D1:52:3E:F8:5C:EB:3E:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/89dfcc18-a29d-3780-813a-8e16549aa687.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:20:8b:b1:d6:73:1a:43:3d:32:a3:af:a2:f2:08:bf:5d:df:
d0:28:d5:0d:15:90:25:59:8c:f2:73:02:94:67:93:28:fc:3b:
46:01:61:44:c0:1b:0e:55:da:77:fa:4a:b6:9d:65:ea:2e:10:
b3:74:f4:19:7e:77:aa:4a:db:09:4e:74:98:92:37:b9:9e:48:
2d:78:bb:1f:88:1a:5a:32:d5:cd:51:ed:e8:22:67:af:75:87:
48:cc:f9:d6:2a:dd:bf:77:65:04:16:c1:63:c5:b0:b1:a6:a6:
13:90:20:59:75:b3:1c:03:d2:18:82:ad:b8:92:87:1a:e3:8a:
f9:a7:ee:0c:00:d5:a6:bb:54:8c:67:54:56:3a:74:3b:9e:f7:
2e:27:dc:e0:30:9f:f3:3b:d6:70:4c:a3:d0:cb:03:42:c4:41:
6a:4c:9d:cc:6e:2c:50:5c:1e:39:f1:41:94:32:a6:46:2d:f5:
a3:c4:0e:0e:aa:aa:4b:ab:12:c8:f2:81:e5:bd:be:6c:16:4b:
3b:5f:32:9b:aa:42:28:5a:b3:70:58:5e:2f:48:bf:3c:4d:eb:
b4:71:1c:11:82:8b:7c:41:d8:bb:e5:9f:cb:8d:eb:ca:6a:f0:
15:e8:a0:75:55:2e:05:0f:43:e0:e7:79:03:d0:eb:02:74:4e:
82:a0:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org