Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97292bb6-de0a-36e4-8c3e-42a4b3ea0457.roa
File: 97292bb6-de0a-36e4-8c3e-42a4b3ea0457.roa (raw, json)
Hash identifier: aaCVnwpubqCAN9A8aT1YpW0fKawoPr9KtG1+9n8O6ts=
Subject key identifier: 1B:F6:55:F7:7F:44:D8:85:23:A8:F0:73:D6:F0:16:9C:4F:6B:CE:B2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A18757B4806F37F9D4BEB7F
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97292bb6-de0a-36e4-8c3e-42a4b3ea0457.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:18:75:7b:48:06:f3:7f:9d:4b:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c46fadef-6d16-4fa3-8715-c9440778c5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:72:56:41:a4:45:f8:17:5f:e9:a5:b4:48:
2f:8e:07:aa:d7:3a:ce:ab:2b:a7:10:58:28:eb:9e:
15:34:7e:7a:4f:08:e5:f6:6d:e2:47:5f:27:5a:2d:
17:f3:f1:e7:76:14:1b:d1:0f:17:94:c3:b3:c4:48:
ef:0f:0b:6d:b3:92:50:6c:fd:87:43:b2:b4:54:12:
ec:b4:d5:ba:df:be:ec:6d:fd:e1:2e:e6:69:15:02:
02:bf:76:46:3e:da:2c:9d:44:c3:d1:6c:0c:66:a0:
34:80:f7:50:83:a1:73:e9:99:2c:30:01:ab:a0:45:
b9:6e:9f:10:12:51:e9:b2:6d:c5:7a:7f:c9:02:30:
e1:0d:81:28:11:a0:cd:45:fc:8b:b9:00:91:51:c5:
e1:4b:dd:66:86:c1:a8:3c:0c:25:76:67:ec:fb:b7:
b1:56:4d:fd:b0:6b:3c:67:b0:1d:cf:d3:a7:49:81:
d3:85:f5:53:2e:a0:bb:1a:50:82:44:c6:5a:b4:07:
bf:d7:22:57:44:c9:b4:f0:b6:4c:9c:7f:93:63:6b:
d3:83:3a:68:67:66:51:97:12:1c:31:28:e3:d3:04:
8d:d8:e6:ee:36:99:be:f2:0e:b1:8c:98:ff:ad:c0:
1c:f0:8b:01:9a:d8:16:48:45:48:41:cb:66:cb:ab:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:55:F7:7F:44:D8:85:23:A8:F0:73:D6:F0:16:9C:4F:6B:CE:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97292bb6-de0a-36e4-8c3e-42a4b3ea0457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.62.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:42:6f:72:e0:da:f7:ab:0d:52:b7:73:d9:dc:d4:c4:3f:10:
05:4c:6f:17:70:c2:a3:d2:c1:f2:85:20:ca:c8:24:22:8a:fc:
db:14:11:6e:d9:e9:74:20:93:e7:88:b2:49:72:90:49:cc:37:
06:42:bc:08:d0:d5:84:b2:0e:6c:cc:c9:88:2c:c5:e8:45:0a:
15:46:9b:38:23:cb:b3:73:9d:30:38:c4:18:29:e2:4b:49:4f:
d4:c7:80:d2:aa:05:84:59:ad:87:f9:5e:c9:7a:25:53:5c:87:
f9:46:e8:1a:d4:12:61:20:b3:11:2c:cf:a9:e8:64:bd:ec:f0:
c3:c0:56:c5:e1:5c:67:86:86:23:03:0e:ba:47:6a:24:09:60:
3a:43:3d:e2:b3:19:5b:1b:32:d7:34:a4:8d:b9:03:72:c3:a4:
7e:dc:8c:8a:22:9a:b9:69:86:c5:8b:16:86:fb:d7:54:85:b4:
93:1b:8b:57:47:2c:be:d8:07:1d:4e:ce:d6:9a:df:d3:42:e3:
67:e7:0c:2c:cc:46:5f:e1:10:84:d6:33:6d:d6:af:c0:b1:26:
b1:38:71:fd:29:7a:28:39:60:6b:2b:ca:66:31:9b:b1:90:f0:
74:fd:50:6b:f0:88:4f:59:96:00:c9:ab:92:96:68:ac:aa:6b:
48:fb:2a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org