Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/93d64311-6717-3c0e-b41b-a61ba2f5b457.roa
File: 93d64311-6717-3c0e-b41b-a61ba2f5b457.roa (raw, json)
Hash identifier: KyV5PfQsM1P7gkTvSUKvej+MZel3XTs9nFkZ99ACmVE=
Subject key identifier: 34:69:52:35:28:D1:EA:EC:28:80:AB:41:F1:63:F2:9C:C9:90:28:A7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F0B8B69C1B1CCF6C701580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/93d64311-6717-3c0e-b41b-a61ba2f5b457.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:b8:b6:9c:1b:1c:cf:6c:70:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6dc7e967-88b4-4f21-a5af-efc7781eea4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:0d:ed:21:e2:3d:dd:e4:71:02:d6:53:df:
a9:1c:61:b5:cd:f3:af:e9:2d:65:0b:6a:c5:04:63:
78:08:8d:1e:c3:08:81:c1:79:06:77:e9:06:9b:12:
5e:87:82:c7:21:ab:de:80:47:9c:ee:15:37:02:2a:
db:98:63:9d:ad:ea:76:ec:b3:ad:22:5c:26:9d:e6:
36:1e:ca:20:53:57:23:e2:7a:42:c2:a4:dc:f3:28:
45:d9:1e:42:75:46:5a:98:22:59:e1:1a:37:fd:7c:
9b:85:0b:64:83:57:11:41:51:42:f4:5d:7b:88:69:
cc:93:51:f0:d2:4e:49:6d:a9:63:63:33:ce:ad:e3:
26:87:c7:9b:a4:6e:9b:6d:1d:48:dd:0c:5f:2a:85:
51:36:ce:2e:47:8c:32:b8:a3:0d:f0:fd:3a:7a:36:
e5:30:51:6a:27:20:0f:b4:ba:20:10:13:41:50:cd:
a7:f3:30:b9:f7:28:d8:96:87:6b:2a:e0:bb:2f:a6:
4d:07:b1:0a:1d:a0:78:58:52:de:9d:4f:7d:92:41:
0f:92:38:49:e8:fd:87:9d:af:a3:0c:39:91:2e:83:
f4:68:06:53:97:98:f1:6a:ad:4c:12:b7:1f:56:e9:
db:99:59:64:88:e0:03:67:20:87:51:37:09:bc:9b:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:52:35:28:D1:EA:EC:28:80:AB:41:F1:63:F2:9C:C9:90:28:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/93d64311-6717-3c0e-b41b-a61ba2f5b457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:70:24:c4:eb:56:77:49:34:05:58:ed:3d:4a:4f:70:e2:3c:
e2:19:38:c6:b7:f7:73:6e:c0:a3:0b:23:db:a9:bf:b1:16:25:
7a:3d:20:d5:65:bb:e7:d1:ae:62:c4:53:54:40:41:be:7a:cc:
50:b3:cb:9a:fc:bf:40:ca:17:37:d7:72:8b:b7:f4:40:14:d4:
e0:1a:45:0c:bb:81:a3:49:f4:03:e4:b5:66:58:1e:12:84:40:
41:89:d4:1b:05:40:c3:c0:18:54:4d:9a:89:c3:36:da:15:5a:
66:56:c5:26:6e:6e:c2:d0:a9:14:b7:5f:2d:33:59:b6:1b:9d:
16:14:28:f2:07:05:87:aa:19:17:18:20:2e:dc:d1:36:58:c8:
7c:cf:88:cd:a6:d0:72:96:09:49:fa:7b:d1:bf:ae:4f:0d:e0:
6f:72:2c:34:b6:f5:27:01:b8:da:02:46:34:5b:f5:5b:b7:0f:
89:9b:eb:22:9f:37:97:40:b0:07:ca:91:a8:11:ad:1a:8c:37:
c1:54:17:93:92:4e:b9:13:fb:87:ba:85:a7:21:44:9c:d1:91:
a9:b2:6a:5b:85:e3:0c:87:00:5e:a9:fa:a1:32:9c:33:dc:3e:
6b:3b:8f:9b:17:cf:35:a9:4a:08:1b:59:d3:35:a3:20:30:7e:
a6:b2:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:40 2024 by rpki-client on console-ams.rpki-client.org