Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5699f89-5c9b-3211-abd8-9878c707cdab.roa
File: a5699f89-5c9b-3211-abd8-9878c707cdab.roa (raw, json)
Hash identifier: nk5TjeAXzlWprqKplRxPQcaLppRt7q6aaaBU//AeOs8=
Subject key identifier: 6A:98:E4:AB:2D:0C:67:39:8C:38:E7:07:7C:72:03:D1:A0:27:F3:D9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A28255F761D2E8F28BFB800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5699f89-5c9b-3211-abd8-9878c707cdab.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:28:25:5f:76:1d:2e:8f:28:bf:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b94612a3-8612-43a5-a087-95f1f0bf6a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:05:49:21:36:f5:15:6e:2a:f0:93:ff:1a:
78:1c:25:17:4f:cf:3f:1d:f4:6a:cc:42:43:9c:4e:
a8:9b:09:4b:8e:96:c8:5c:c3:17:9e:56:8c:bf:0e:
d4:b0:1d:17:3e:19:ab:de:9c:62:51:4e:6d:57:8e:
9a:31:ba:e6:22:7a:5d:fd:de:51:87:b5:3f:91:83:
e2:db:fb:0f:24:f3:a3:d3:a6:47:b4:d2:66:8b:75:
dc:6e:e4:4e:90:96:4d:c7:3d:67:68:39:cb:49:ee:
24:bb:84:c9:6c:8e:34:e6:93:3c:52:1e:f1:bf:8d:
e9:27:39:3b:22:49:4c:e9:64:c6:b4:95:4f:20:c5:
63:1a:40:37:96:a1:ae:46:02:cf:39:df:45:8d:22:
5d:90:f6:2e:e6:5e:96:1d:65:a9:91:f4:51:01:88:
f9:4f:8f:c7:e3:47:a6:c1:0d:a4:89:db:3b:cf:4c:
77:83:be:35:b4:52:77:57:5d:9e:4e:97:cd:0a:7a:
fa:2e:ee:05:97:93:51:44:6e:25:49:c1:10:c0:2c:
ef:bd:fc:76:49:33:f8:99:0d:14:1b:b8:41:13:51:
ed:1d:05:25:06:3d:13:81:dc:04:89:0a:e0:6f:c2:
4f:a4:4f:a8:3c:61:aa:cf:08:1f:f8:22:89:13:f6:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:98:E4:AB:2D:0C:67:39:8C:38:E7:07:7C:72:03:D1:A0:27:F3:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5699f89-5c9b-3211-abd8-9878c707cdab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:ed:5b:92:58:a1:20:04:53:57:96:82:03:f4:f0:01:7f:8d:
a3:aa:73:c6:c7:e3:5a:8d:c8:f2:b1:1b:77:e3:5c:f5:eb:70:
1a:53:8f:13:57:aa:29:26:80:ec:48:6d:a6:b8:39:33:7e:66:
25:53:ce:ff:12:b8:16:c8:bd:5c:ab:37:da:90:f3:11:9a:4b:
37:f7:27:46:a2:cb:a8:48:43:d5:10:e5:94:df:ec:15:91:77:
54:44:fe:6d:c7:34:94:e4:70:89:c3:26:32:90:23:a6:28:24:
3e:14:d8:9b:e3:c4:a8:d4:75:fe:69:aa:60:35:75:c2:0e:c7:
c8:0b:46:05:be:a3:91:c5:17:f1:ba:56:88:6d:7f:da:ea:95:
0b:01:86:77:81:8f:8e:15:3a:ea:39:4b:a6:5c:ae:e0:e6:0d:
3d:be:f7:2b:bc:60:cb:23:b6:e4:90:e7:9b:93:ce:65:97:23:
f2:a1:d2:3d:3a:57:11:a7:f4:e4:84:53:ef:20:fd:a5:08:86:
cd:30:0a:9c:a3:9d:e1:52:ff:eb:c5:0b:35:79:81:58:fa:94:
2f:18:69:7f:c1:42:bc:c5:3d:58:76:a0:7d:64:fc:23:84:23:
f9:50:60:8c:af:bd:21:34:23:16:b4:0d:3d:f8:6d:06:f6:21:
89:e4:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:41 2024 by rpki-client on console-ams.rpki-client.org