Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc0888b3-545e-3409-bda7-3f363a8b2244.roa
File: cc0888b3-545e-3409-bda7-3f363a8b2244.roa (raw, json)
Hash identifier: aLS/B6JZ4DXXdhpXFQuhVulJEwpNeSmhhjxYFSVrHDM=
Subject key identifier: FD:12:59:18:D9:CC:40:47:3C:E8:C9:3B:5D:C0:36:5E:C7:C3:04:E1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A269EA3838A895E03C04200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc0888b3-545e-3409-bda7-3f363a8b2244.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:26:9e:a3:83:8a:89:5e:03:c0:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=15efb504-2acd-4de2-85b5-8342a3c51c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:76:c8:c0:fc:75:3d:2f:35:84:47:6b:40:
b1:a4:73:3f:4a:eb:66:b1:29:9d:f2:a2:2a:2b:a2:
5a:25:52:39:69:24:d7:fb:13:05:f5:68:a1:40:fd:
86:80:99:da:f2:7f:97:a2:61:f7:d9:a0:b5:68:c8:
d5:77:bc:35:50:fc:34:fb:ac:ab:00:79:bc:2e:35:
97:15:41:77:b9:1d:5e:da:89:99:3e:06:4b:9c:75:
fb:3b:71:2d:6b:6b:3a:11:14:e5:23:c8:57:a9:2e:
57:08:bd:b3:33:b2:dc:88:bb:ed:1d:be:5d:bb:e7:
1c:3e:55:bb:d5:7a:bc:4e:0d:95:4d:68:9a:90:c9:
aa:8e:7e:ee:63:c2:ab:7b:13:86:b5:d7:c4:4a:5f:
b1:a6:fa:dd:91:c9:59:e2:dd:75:9d:9d:d2:26:bb:
7f:fd:ba:0b:a8:77:50:7f:18:5e:a4:e4:9d:fb:28:
71:58:06:7b:6c:39:59:8d:6b:94:37:f1:7b:63:61:
0c:45:0e:9c:a3:ba:4a:4c:00:88:af:de:ae:a6:df:
47:48:59:be:37:75:7d:4a:a2:b5:d5:70:15:c3:26:
b0:29:6b:12:07:ff:c9:54:78:6d:af:7f:17:34:0b:
a0:f7:ea:4d:d4:86:ca:69:d2:e5:0d:db:a0:8b:6d:
54:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:59:18:D9:CC:40:47:3C:E8:C9:3B:5D:C0:36:5E:C7:C3:04:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc0888b3-545e-3409-bda7-3f363a8b2244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:91:27:2b:99:f2:13:6f:93:51:6d:fb:62:c6:02:20:ee:ac:
09:46:81:76:96:23:9e:30:b3:4d:f9:87:77:8d:73:94:b1:66:
87:72:76:87:59:51:64:49:b0:1c:6c:53:52:db:e5:63:fa:53:
66:24:32:a1:12:68:7f:09:b3:94:a1:b6:13:ad:ee:ad:17:95:
4d:5d:6b:1b:15:9c:3a:54:b3:bc:e8:40:d8:01:90:d9:6f:eb:
76:9d:3f:32:c8:a9:c4:9f:e2:0c:de:28:aa:f0:e1:cb:21:76:
21:42:18:14:39:6a:f0:30:06:c4:d6:75:e0:8a:df:25:45:17:
86:c0:f5:25:3c:cb:8c:f6:56:19:f9:6f:d8:2e:3b:62:62:77:
2f:21:8c:bc:3f:a1:ad:fd:aa:c9:37:29:47:67:80:bc:16:bc:
ae:95:f4:04:1b:90:a5:87:19:2f:cf:cc:1c:a5:4b:b9:b4:30:
fb:ab:0f:39:04:be:13:bf:74:ef:ca:5f:51:86:3f:a6:1c:3c:
d6:8e:7f:a7:ba:4d:a8:84:31:b0:d4:0a:c5:20:85:82:00:63:
b1:ea:b9:ad:6e:c7:6f:c6:e7:3e:3c:82:84:eb:29:bd:45:d2:
dd:4c:ce:d8:07:12:09:05:b5:fc:47:7e:89:76:95:67:5c:4c:
30:e1:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org