Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1a8f20f-6835-31e4-a7ac-887fcecbca25.roa
File: c1a8f20f-6835-31e4-a7ac-887fcecbca25.roa (raw, json)
Hash identifier: 242YkgKn3SEM7Ot+J+6LgfvIcPUKRGg89XVflxvgvAg=
Subject key identifier: 0D:53:7E:1A:79:A7:6B:84:64:5B:A5:FA:49:C0:8E:E1:A4:E9:74:6E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FDB34B0FB2C911782A62B0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1a8f20f-6835-31e4-a7ac-887fcecbca25.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fd:b3:4b:0f:b2:c9:11:78:2a:62:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=906046dd-0089-4d56-ad7a-17811759900c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:5b:df:a8:fe:7a:6e:fd:81:01:3a:d4:21:
ed:19:8b:7a:7d:8f:6b:a2:64:56:42:f8:3e:0b:37:
9f:0f:34:74:6b:8c:b5:e3:7c:05:32:1d:df:5a:80:
70:16:a3:07:d9:2c:d5:5f:67:a6:94:f2:2b:63:cd:
7c:ac:55:13:d7:58:64:9d:3d:9e:fe:42:2f:bf:25:
1d:dc:9b:c6:cf:c9:98:22:21:18:49:6d:8c:6c:d2:
01:4a:26:5b:35:da:d3:61:24:2c:c0:f0:77:09:3b:
77:ed:8e:fc:7e:0c:8b:a7:c3:de:86:54:92:a6:85:
f5:77:a9:7f:93:1b:45:88:3e:6b:f2:a5:e8:8a:cf:
31:28:82:27:9a:b8:dc:2f:0f:04:fb:84:11:f8:ed:
49:8c:3f:fd:04:e2:a1:b8:b3:ba:29:7c:4f:e4:0d:
d7:44:19:a4:80:8e:a4:61:0a:0a:86:24:3b:57:0c:
7b:a2:c2:80:0a:24:3c:ff:19:13:ae:7b:28:78:bd:
d1:47:f4:62:ce:bd:3f:aa:46:95:96:39:2b:7d:31:
c8:51:0a:94:69:74:15:d2:04:6e:71:45:fc:8f:be:
2f:07:af:b9:0e:6d:7d:19:b8:22:33:3c:be:24:c9:
e3:0f:8e:64:b3:6e:d3:d9:61:57:71:0f:51:a2:6d:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:53:7E:1A:79:A7:6B:84:64:5B:A5:FA:49:C0:8E:E1:A4:E9:74:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1a8f20f-6835-31e4-a7ac-887fcecbca25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:96:17:bb:e0:2e:6f:47:ab:d2:33:df:5d:35:c9:1b:0d:4c:
b7:7e:3f:02:06:74:e3:85:79:2e:eb:a0:3d:83:10:c6:63:c8:
25:68:36:3f:81:0d:21:6f:ff:01:d0:41:89:d2:5e:1b:7c:e8:
f9:c4:f4:d7:de:24:7c:04:e3:a8:57:31:b1:2f:00:bf:37:00:
27:fd:de:c4:09:fd:b1:c0:49:7f:64:e2:4c:57:1d:7d:97:7d:
b9:0f:75:5a:a4:50:60:2b:52:ac:19:42:ea:ea:ce:05:4e:7c:
8f:e9:39:70:ab:de:ee:ef:73:f7:f1:6b:2f:bb:f0:12:4e:3b:
92:57:7a:9f:5f:82:9d:26:af:2b:30:ed:ae:10:bf:34:b6:24:
96:38:96:02:8f:c4:4d:9f:77:c4:6e:b5:93:50:c2:09:89:17:
fd:2d:74:a6:6d:5b:71:dd:63:3c:a1:0e:ba:54:98:a4:95:49:
93:a0:0e:04:d7:6f:18:cf:1e:ed:f5:b5:0a:da:48:fd:5f:11:
6e:75:bc:5f:0c:f3:a6:69:5a:e1:c5:dd:2d:d9:f6:0c:14:08:
b9:b7:05:6f:45:42:16:13:f8:bd:a2:18:54:60:49:56:38:52:
90:56:70:5d:15:81:c0:bb:f0:bb:a0:f6:28:c0:c2:2d:15:b7:
13:eb:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org