Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5df8de6-6301-3742-9860-b734e367fecd.roa
File: b5df8de6-6301-3742-9860-b734e367fecd.roa (raw, json)
Hash identifier: 4SjhvOcJmSdRsKY3aviR2grsvbVRNxQkNbofWxEnfuw=
Subject key identifier: 76:71:92:C0:A7:CB:FF:20:76:D4:15:88:F0:7E:65:2B:08:3D:02:49
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A02002BE47CB1FE6CCDE500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5df8de6-6301-3742-9860-b734e367fecd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:02:00:2b:e4:7c:b1:fe:6c:cd:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8fae58c6-76f8-4a98-ad64-36b8615a2659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:b7:64:74:21:eb:19:f6:46:fc:7b:df:1d:
12:88:1c:68:2b:5d:a5:49:1a:41:98:48:f9:9e:c9:
ec:fd:c7:8e:d1:a3:f6:37:51:45:77:1f:f6:26:73:
ae:5d:0f:f8:3a:bf:9f:3c:2c:6f:90:e1:4e:b4:e6:
75:a5:e4:6a:4e:c1:9f:4c:cf:96:ae:6e:32:d0:df:
9a:6a:49:4a:d2:92:de:a2:5a:1b:3c:b5:8d:b6:1d:
b6:63:29:af:59:e0:5b:99:1d:99:0f:f0:0f:78:5b:
ba:2c:93:90:64:c1:db:0e:21:78:9e:96:0f:9a:2b:
15:37:39:4e:84:83:98:c1:6e:da:9b:38:f8:33:a0:
14:60:13:25:f1:07:7c:dd:f2:2c:64:d6:23:4a:49:
fa:be:d3:3b:2f:18:14:be:7f:35:0d:c2:ed:54:8d:
f1:cd:f3:71:fd:6a:9f:5e:90:94:98:68:be:60:17:
4d:a2:f8:dd:0c:43:83:7b:bb:ec:50:d0:b4:3d:21:
96:0b:97:03:de:20:ec:17:bd:2c:63:cc:a9:7f:32:
45:ae:ee:0a:8e:09:05:d5:13:34:b9:64:fc:d4:c5:
03:ca:58:86:82:14:2b:5d:9a:7d:4d:e2:2b:7b:2c:
47:d3:9f:ea:dc:5a:89:2e:c4:a4:00:0b:2a:d2:39:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:92:C0:A7:CB:FF:20:76:D4:15:88:F0:7E:65:2B:08:3D:02:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5df8de6-6301-3742-9860-b734e367fecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:94:f6:45:94:53:20:d5:5d:0c:6f:28:f5:d6:3e:a3:a6:db:
f7:26:f5:66:19:b9:4b:7c:34:38:59:27:9a:95:2d:f6:10:d0:
9a:67:8b:fa:18:7a:f3:0a:2e:f8:2a:07:80:dc:a8:84:0d:da:
e5:27:77:14:46:71:cc:f7:ca:76:19:d3:cf:18:ee:05:77:39:
7d:b4:ff:7f:a9:27:76:33:31:74:80:fe:df:df:52:60:12:ff:
e2:7e:0b:de:1b:c6:9d:be:79:27:a4:73:d2:c2:78:27:06:56:
ba:3e:84:79:1e:80:f6:49:f2:e8:ae:c1:fb:2e:da:22:a8:b2:
ae:6a:47:4f:82:fd:b4:e0:d9:b3:9d:a3:1b:fa:94:c3:0c:dc:
30:98:4c:da:ba:90:10:d8:95:4c:33:e3:8b:5e:13:46:13:f3:
d4:27:52:ef:69:fe:b6:3c:91:3f:53:af:fc:d9:db:4b:ed:9a:
98:aa:3f:04:88:62:a6:68:b3:57:89:54:37:45:1f:c5:42:93:
9c:b9:f8:e4:a3:9a:c6:8d:69:b0:61:d7:d2:a0:57:aa:f2:34:
f9:94:4e:a4:6a:38:60:d8:31:1a:a2:25:04:b3:35:c8:1f:6c:
f7:dc:3a:da:ee:fe:7e:09:33:73:55:a9:29:3d:2a:dd:f5:d5:
cf:0b:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org