Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/abd6d1d5-c8a3-34c1-8ef1-f4c19506c121.roa
File: abd6d1d5-c8a3-34c1-8ef1-f4c19506c121.roa (raw, json)
Hash identifier: 6AViSeccAQcrYV+lRISfWJNGJTVMW7jy+3Z2WkfV0LU=
Subject key identifier: F9:DE:F3:8B:A2:DF:C9:BD:50:5E:D3:AE:EF:29:5D:F5:6F:9F:DB:5C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0E971290A92C129C73F380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/abd6d1d5-c8a3-34c1-8ef1-f4c19506c121.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0e:97:12:90:a9:2c:12:9c:73:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8c1d7679-838d-402a-ba0d-b9a71602d37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:87:99:fb:c5:dc:a8:81:ae:c1:0a:a6:bb:2e:
13:5a:57:46:fa:c9:0c:7f:1c:be:c9:e0:8c:69:53:
7b:71:6c:f5:f7:54:e2:17:ea:9c:32:37:dd:d0:5b:
6d:15:eb:62:80:ba:82:c9:4e:b5:07:97:b4:cd:ef:
6b:31:65:ff:f5:b8:71:a4:0a:ca:42:f6:6e:fd:90:
7a:79:e4:64:bc:3d:15:d8:15:dc:b9:10:32:b3:60:
d9:0a:f2:90:8d:01:30:30:0e:a1:c0:74:22:56:1d:
4a:20:81:34:29:e3:96:59:ea:f4:7f:8c:83:f5:bb:
38:28:f9:82:fe:e2:af:b4:af:53:bc:a4:f1:5e:75:
10:a8:5c:00:a4:02:78:2d:4a:49:86:de:3e:19:e0:
fe:3b:0e:65:c9:53:ae:11:73:ea:b2:99:00:a4:c9:
85:a5:54:4b:42:f3:10:ca:a7:58:06:a5:3d:13:25:
61:5d:96:ce:8c:70:04:1a:16:cf:99:62:37:aa:0d:
22:88:dd:f0:63:32:13:05:c7:da:84:43:6e:24:ff:
fd:aa:bc:f2:ec:cf:ca:6a:8e:54:0f:f6:fa:45:35:
5d:0b:f4:ba:ea:eb:05:4d:d0:3f:3a:fa:96:14:dc:
78:8d:d9:f9:c2:a7:27:19:9d:03:6f:a8:a1:7b:c2:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:F3:8B:A2:DF:C9:BD:50:5E:D3:AE:EF:29:5D:F5:6F:9F:DB:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/abd6d1d5-c8a3-34c1-8ef1-f4c19506c121.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:5d:98:0f:f7:97:da:a7:f2:0e:fc:c1:2b:21:1e:78:3a:07:
10:67:96:ce:8a:24:95:34:f4:6a:2b:fe:c1:d3:02:28:04:27:
23:ba:fc:62:13:e0:76:d0:93:f7:b9:93:54:a2:29:c4:af:bf:
85:20:97:5c:e2:45:d3:7a:c1:ec:09:cb:1d:4e:bd:13:27:ef:
3e:dc:d2:48:4e:46:63:7d:9c:73:f3:5a:56:d6:75:0c:d6:fa:
12:94:7c:2d:d5:26:c4:b3:cb:8f:09:a4:b4:ae:5d:77:17:27:
e2:a5:ec:95:8b:5e:68:c3:09:06:a4:8c:9a:a2:1c:5c:3c:38:
3b:a4:af:61:81:01:1a:bb:40:cc:47:e0:8e:ca:06:3f:31:81:
c7:a5:7c:85:a0:65:b5:31:7b:63:be:4e:e6:8f:92:2e:0a:92:
45:3e:3c:80:8d:79:b8:0a:51:0a:e8:94:0b:33:42:ae:37:23:
5e:07:d1:e1:cb:95:86:0c:50:63:c0:7c:8f:5b:fd:64:5b:d0:
2a:b7:a3:4a:f3:8c:b3:d5:51:46:eb:7c:1c:aa:1d:94:3c:31:
1c:fe:88:80:98:b6:a2:a0:e3:c0:29:7b:b7:82:2c:66:c0:7c:
a6:fb:5d:29:5b:66:3f:57:55:ea:be:d1:d6:87:50:f1:65:c2:
98:4a:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org