Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97f1cf44-0f26-38a7-bcc4-6212f58065d9.roa
File: 97f1cf44-0f26-38a7-bcc4-6212f58065d9.roa (raw, json)
Hash identifier: lWC/176BzIE1qCeTlnFTTe4TVNE8/rnb76Uk5Z/higI=
Subject key identifier: BC:C9:23:CC:E6:0E:64:D0:78:5A:FB:38:F9:A8:1E:C7:43:4B:F0:F5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FB88D83964891867EF3680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97f1cf44-0f26-38a7-bcc4-6212f58065d9.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 209.85.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:88:d8:39:64:89:18:67:ef:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=93d3d6f9-f156-4f93-9efb-792030eb17d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:49:b7:8e:8e:c9:e1:4c:10:12:ff:b8:21:
98:bd:13:f5:82:66:50:61:59:f5:fd:e6:31:e8:e7:
5a:0f:a7:02:0e:d5:10:2f:a8:8d:1f:2d:36:ef:fd:
b9:ba:ca:47:20:a7:4f:96:78:c8:2b:b3:8e:dd:66:
86:e5:c1:73:45:25:42:8b:8a:b8:db:53:30:40:01:
7e:c1:35:65:91:e4:01:27:a5:3e:22:d8:f7:38:3e:
84:10:97:54:53:c0:38:12:d5:6c:7b:a4:69:e9:83:
fe:ce:bc:45:d6:ea:db:39:07:d5:9b:73:11:e8:59:
6c:36:13:00:96:7d:f9:b8:6f:5c:66:0a:d7:62:d5:
88:c5:49:af:2e:f8:e8:f5:f0:75:b6:79:89:56:76:
0b:a8:6e:62:b9:f0:e3:13:cd:0c:7d:1a:70:ed:7b:
25:c8:db:43:dc:6c:00:d4:5b:cd:d2:97:1b:0e:dc:
23:31:6e:fd:cf:dd:b9:49:ac:f3:f6:11:e1:94:b5:
40:8b:07:2b:ca:57:6e:b2:6d:6a:8f:4d:49:10:dc:
0a:a5:42:86:b5:6a:7a:f3:30:83:93:d5:4b:2d:ef:
a5:ff:95:74:85:d3:83:33:6c:8e:90:71:53:21:7e:
0b:6f:4a:d7:0f:b8:a9:01:ab:f2:e3:c9:9a:6f:5d:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C9:23:CC:E6:0E:64:D0:78:5A:FB:38:F9:A8:1E:C7:43:4B:F0:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/97f1cf44-0f26-38a7-bcc4-6212f58065d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:cc:2e:d1:9f:06:45:fd:58:93:64:a9:ec:26:e0:12:fb:92:
f9:32:85:39:65:ca:6a:4c:8b:21:96:2c:0b:99:4c:ca:f8:8c:
31:28:6d:ac:d5:32:d9:3d:6b:33:7b:81:a7:d8:be:93:ff:f7:
04:95:72:52:15:b9:35:20:d0:14:f9:2b:d9:71:3a:b9:61:74:
58:66:93:b9:ca:83:cd:0e:c8:f9:53:4e:a4:ac:46:61:aa:20:
49:87:f8:ce:95:49:9f:d2:c5:c9:07:d7:cf:7f:c1:c3:c3:0c:
08:08:99:1b:65:11:7e:03:9d:ef:0e:e1:9b:f8:5b:3a:f4:a9:
17:36:f0:90:cf:a5:54:76:70:eb:5b:6b:28:30:dc:a4:3f:a5:
73:be:3d:7f:be:9b:ef:36:09:e0:c1:8f:16:d3:ef:20:8b:5a:
1e:7a:a8:d0:63:32:d1:15:8e:83:bd:02:34:3f:fd:3f:f1:68:
12:3c:c1:a6:b2:18:06:47:9c:0d:98:4f:8c:f5:fa:44:fa:45:
5e:00:6d:61:c3:d2:dc:a6:00:0d:71:f6:f5:ae:b1:13:3b:19:
03:ff:76:91:24:a2:a2:46:bd:34:3f:67:ff:36:17:06:4b:cc:
26:cc:cf:ff:44:37:c3:31:86:02:d3:e2:b7:99:d2:6b:5c:f9:
f9:05:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org