Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8dbc2a1d-1890-3a63-9ffb-9d1a4e327ddd.roa
File: 8dbc2a1d-1890-3a63-9ffb-9d1a4e327ddd.roa (raw, json)
Hash identifier: BCLk7YfW5rCR/OLOuVUOa8IQQhJUCAO4mZHTw42yung=
Subject key identifier: BC:70:F1:34:CB:7B:08:1D:61:8F:B2:45:D6:89:83:A9:FE:1C:06:8C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F312133300C466403A0E80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8dbc2a1d-1890-3a63-9ffb-9d1a4e327ddd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:12:13:33:00:c4:66:40:3a:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d834866b-50be-4146-802f-03e1fd29de4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:a0:25:a8:35:1a:5e:c5:29:3a:10:2e:d0:
ca:39:c9:f4:6b:d4:1f:cf:e6:70:d4:0f:4b:9b:ea:
f3:8e:2b:8c:8d:3d:9d:4c:6d:9e:0b:0b:c5:28:cc:
f4:92:c2:ff:73:48:ec:9f:1c:ec:ce:8e:3b:75:83:
e6:e3:f9:58:04:a6:94:77:c0:2c:1e:88:04:0c:7d:
03:d4:56:fb:a7:a1:f4:1f:9c:44:19:89:e0:31:3d:
14:de:0a:47:1a:ca:ee:77:c7:eb:2b:93:4d:50:60:
a5:13:eb:86:9a:f7:4a:12:6d:b2:c1:9c:e0:ae:70:
3b:d7:82:95:c5:38:3a:3c:57:e0:38:40:2c:6e:4e:
e5:7f:c0:0c:05:25:f1:79:d4:06:ed:2d:90:9d:bc:
65:70:33:aa:13:b5:ec:39:0c:cf:d0:99:1e:db:65:
c9:ea:98:49:12:1b:42:70:12:82:fa:b8:5a:3d:dc:
c7:25:6d:c3:90:03:82:db:1f:c3:8c:01:0d:7a:f8:
38:ee:15:d9:51:d6:34:c8:ae:ce:4a:10:3d:6b:7b:
15:c6:70:71:81:e5:bb:20:ab:fa:de:dd:25:39:b2:
52:71:a5:0a:81:d9:1d:2c:7e:e2:9f:e1:f9:67:79:
d5:8c:47:88:fd:dc:87:a9:73:10:8e:95:1d:1f:f4:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:F1:34:CB:7B:08:1D:61:8F:B2:45:D6:89:83:A9:FE:1C:06:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8dbc2a1d-1890-3a63-9ffb-9d1a4e327ddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:ec:d5:d1:81:b6:5f:c9:56:5a:d7:96:73:d5:23:d0:30:bc:
c1:fa:fa:55:56:c0:26:b9:c1:95:54:f6:c0:32:89:44:36:cb:
5f:02:e5:f9:58:9b:1b:47:15:21:ae:01:6b:8c:18:c1:ef:8b:
de:7d:40:72:7a:52:3b:53:65:08:b8:03:a4:e5:b6:c3:24:aa:
24:99:22:f0:4f:f6:78:2a:e7:0e:79:b1:ee:65:33:63:f5:7a:
aa:52:c6:0c:14:ba:f6:54:a0:87:1b:b1:16:2f:5c:d2:b8:2d:
15:b6:c0:a9:48:d7:3a:2b:57:3a:2c:ce:4e:88:fe:76:d4:ad:
59:f6:74:f9:14:e0:e4:98:1e:b4:9c:75:fb:2d:18:84:0e:20:
48:7f:c6:c9:de:cd:ac:42:57:1d:98:57:dd:f2:dd:a0:2a:53:
e9:1c:cc:15:39:82:5e:c6:1f:51:42:f0:e0:00:da:4f:81:d3:
19:d4:42:cd:1c:08:e0:c1:c3:6a:ef:05:65:50:24:2e:fd:12:
a0:63:60:68:e8:27:5f:54:a3:d2:ed:f3:20:94:4e:43:e3:ad:
60:b7:90:6c:48:76:91:d1:99:9a:76:02:90:83:e0:76:3c:ab:
82:71:8d:4a:eb:18:bb:b8:4a:c3:c5:2b:d2:78:45:cf:bd:24:
2e:80:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org