Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05e7694-f2a6-3b4b-a437-dfb088ebd072.roa
File: d05e7694-f2a6-3b4b-a437-dfb088ebd072.roa (raw, json)
Hash identifier: ly3rjmEAbJwvxrnd7AHydSoIkHmb/N5oFLYE0ETw2Zk=
Subject key identifier: D6:0E:84:1F:51:2A:58:72:16:BA:2C:35:69:EB:93:97:4B:CE:82:51
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A07EAA413A9F394EF469DC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05e7694-f2a6-3b4b-a437-dfb088ebd072.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:ea:a4:13:a9:f3:94:ef:46:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8b93fab2-f5c3-4df1-ad21-656a9721671a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:33:07:17:48:e2:d1:b0:78:80:f6:be:e5:
96:59:51:3f:c6:bd:d6:e3:2e:58:0d:d6:ae:ca:3e:
5d:cf:a2:5e:5a:e0:fc:e8:30:ff:6f:b7:c5:c4:cd:
a2:e6:d6:7f:21:cd:94:49:48:8e:66:69:ee:6f:14:
5e:79:aa:b1:40:8a:ec:c9:ce:21:24:4b:f2:72:2e:
67:e8:4f:ce:ba:d3:08:28:62:a1:e3:15:e5:00:0f:
05:df:30:56:73:d2:59:ba:c2:f9:3e:e1:f6:95:7d:
b9:be:49:1a:59:6e:5a:d7:82:40:a1:12:cb:99:25:
5d:be:f6:83:11:05:92:52:13:03:06:5b:13:42:f3:
0d:90:71:d1:64:f9:67:92:6a:5b:4f:7a:75:ea:c6:
4c:a7:f9:37:b8:f7:6c:9a:00:dc:bf:a3:2d:5e:4f:
3d:9f:12:fb:1c:7d:17:10:3b:1b:59:48:d6:4b:cc:
bc:eb:1d:57:6f:92:cb:81:2f:ec:49:45:b2:0f:fe:
fa:8e:be:1e:28:c5:67:b2:37:d6:9d:cf:87:f3:61:
de:20:76:8e:b4:15:c9:88:b7:63:cc:15:00:5a:df:
38:4d:d0:55:7b:46:94:9f:2a:73:d1:24:7b:d2:92:
65:5d:45:08:85:ec:55:e4:f6:4a:c1:9b:de:3e:ed:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0E:84:1F:51:2A:58:72:16:BA:2C:35:69:EB:93:97:4B:CE:82:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d05e7694-f2a6-3b4b-a437-dfb088ebd072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:5d:1e:da:3c:73:91:ea:47:da:db:2c:5e:2f:b7:48:98:ea:
f1:82:5c:61:88:de:b6:d7:c7:f7:f9:e5:cc:3f:b1:9e:83:ab:
7f:03:06:9c:9d:d5:2a:ac:af:0a:46:cb:9d:f9:d7:b4:4a:83:
c4:e1:c6:a2:57:1e:aa:ab:39:61:d8:0d:dd:e3:d3:d2:34:2c:
16:4e:a7:af:31:49:18:d7:ee:4f:b7:6d:50:e5:93:fa:04:c0:
78:db:9d:75:96:bb:cf:2e:b2:95:b8:bd:9c:77:7c:09:cc:8a:
f8:78:75:52:72:02:98:94:cb:7e:fc:5a:f7:33:17:89:f2:f0:
6c:c3:1b:63:44:be:a0:88:2b:43:7a:fd:e4:a5:ad:a7:a7:20:
0e:4a:77:a6:7c:d1:07:47:b5:de:a3:60:23:b8:f2:ed:e2:59:
13:23:78:3f:16:d2:b6:c2:7b:9c:5c:9b:7e:08:52:71:28:4a:
99:c4:fe:f3:f6:c2:42:cd:aa:b2:e1:c5:bd:c2:05:28:3f:9b:
6c:68:16:87:89:a7:fa:08:aa:8a:c6:3e:f5:f2:e3:0b:c4:1a:
61:5d:8f:d0:eb:c3:28:ed:6f:8c:19:46:1b:2f:ca:c9:e4:91:
cb:c2:1d:f1:c7:de:b0:10:72:59:9d:d4:2b:1a:35:33:85:62:
ec:67:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:42 2024 by rpki-client on console-ams.rpki-client.org