Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf84f789-1146-3fa4-ac0e-eab39d7efa78.roa
File: bf84f789-1146-3fa4-ac0e-eab39d7efa78.roa (raw, json)
Hash identifier: ZiNV3j+0vJfHI+Gd6wOCLSKqE1q0riJmWoV9SnHThfI=
Subject key identifier: 56:3A:AF:BC:C9:AD:A8:AA:FB:51:62:6C:75:38:8C:D3:5D:B4:6D:0C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EC2F8157F80CC86D8E6840
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf84f789-1146-3fa4-ac0e-eab39d7efa78.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ec:2f:81:57:f8:0c:c8:6d:8e:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c7dfeb10-7a22-4b04-8509-16593342c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:ee:0c:18:6b:4e:4c:9d:30:14:1f:57:ee:
84:42:39:f5:e6:4a:89:43:13:5b:de:d1:2d:ce:08:
2c:8a:39:c9:cd:3f:98:be:1a:73:59:52:f2:84:09:
b3:dc:9e:9e:c5:f3:a9:9f:c1:53:f7:66:38:cc:0e:
5b:36:9d:83:99:72:76:98:d3:7e:05:a9:fc:8d:16:
2f:70:e3:f5:e5:9a:44:53:a8:3d:ef:2f:35:f2:15:
67:9e:4d:d2:3a:2a:c0:66:46:01:e6:d8:85:db:3a:
3d:28:4e:7a:fa:75:9e:f7:13:e3:da:67:8b:82:16:
ca:31:f9:42:dc:81:7c:6e:bd:c9:0b:68:10:7b:58:
c0:84:e6:7d:56:49:e8:02:c7:68:90:11:35:00:8c:
46:67:6d:aa:69:a5:f0:31:69:25:8f:6e:9e:5c:be:
89:f4:dc:76:dc:8f:d2:f5:d8:ad:66:43:6c:7e:c8:
d0:be:55:bf:f1:e4:be:12:7c:6a:79:16:84:58:54:
b2:a4:36:0a:e7:bb:8a:34:97:96:37:92:2d:92:4e:
11:52:17:a3:91:a9:d9:92:66:36:b9:cf:d1:5b:a8:
f4:45:83:fe:11:8a:8f:c9:72:6d:0b:e5:97:e3:6c:
9b:da:90:30:db:7b:da:68:8e:49:06:5f:5d:4d:3b:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3A:AF:BC:C9:AD:A8:AA:FB:51:62:6C:75:38:8C:D3:5D:B4:6D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bf84f789-1146-3fa4-ac0e-eab39d7efa78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:a8:4c:fe:6f:f6:0e:47:ce:48:03:fe:ba:2b:9c:51:8a:ed:
53:81:62:76:59:07:eb:96:47:7d:d0:e8:81:6f:27:ad:b1:db:
a7:a3:d0:43:fa:20:bb:40:91:ca:35:7d:b3:ec:4b:5e:8b:99:
f8:82:e3:f4:93:4d:4a:4f:09:dc:ac:32:ef:07:31:21:c2:d1:
0c:d8:9f:b7:f0:42:83:2a:ba:c9:fd:5f:f4:aa:96:e9:59:a4:
e8:86:5e:ae:6b:17:4b:0e:e4:60:f2:45:fb:fe:e1:29:01:50:
41:19:bc:ac:d5:25:51:f2:af:ca:0a:40:7b:47:c0:9f:98:c7:
32:aa:6b:8d:05:e4:17:fa:84:12:03:80:5e:b2:57:76:36:4f:
32:3f:38:5b:6a:81:9e:48:8a:6a:3e:d6:05:d0:43:a4:3c:4f:
e1:db:65:31:ae:38:99:d8:fe:a8:bd:02:ff:cb:f7:c0:14:04:
b2:d1:8c:7f:66:fe:b6:c2:12:05:33:bf:5c:91:8f:f9:b8:d7:
4d:6a:ce:6b:7e:20:d1:bb:94:cc:b7:cd:b9:98:83:39:a3:bd:
bf:e5:31:bc:30:f7:27:8e:d0:f8:05:c8:fc:49:f3:96:a9:44:
3e:d0:f0:de:08:f4:f8:65:e1:de:71:c4:28:3f:ee:a0:6e:b3:
f4:7c:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org