Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df07dc06-09b9-32f3-ae27-6ae483289456.roa
File: df07dc06-09b9-32f3-ae27-6ae483289456.roa (raw, json)
Hash identifier: 8Vwx9IWAHYtmgHn+APeBQxfI/6cD1kaOcNAV2Kf/KcU=
Subject key identifier: 84:0C:8D:65:F0:F5:96:CE:59:36:E5:3A:DD:4B:DC:A2:27:9D:89:15
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A22F3F1B4584AA9558EE580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df07dc06-09b9-32f3-ae27-6ae483289456.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:22:f3:f1:b4:58:4a:a9:55:8e:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d8e9c861-ccb6-4b29-9f90-f2b8c791fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:b3:f0:19:c4:07:85:e1:98:fc:c9:84:ba:
4d:d1:77:cf:32:a2:5e:80:b7:e9:a1:bd:f9:ec:e8:
7e:87:58:c2:a0:20:fb:1a:0d:78:72:2c:52:23:34:
55:72:f7:6e:47:60:4a:43:c5:74:23:1a:81:cb:b8:
74:14:4a:06:57:2a:4b:b1:3a:73:e3:62:80:04:47:
d1:ce:ee:ff:14:06:c0:fa:c6:5c:bf:fb:00:b7:67:
3a:cc:c5:04:03:c0:4c:77:c7:e1:bd:be:7a:58:92:
66:c2:43:20:93:1c:37:82:bd:63:88:26:77:3b:4c:
ce:fa:a7:ab:42:db:18:e9:47:89:8f:33:a6:37:9e:
6c:d8:63:22:dd:f2:0a:a7:00:9b:96:35:01:70:29:
55:9c:c2:00:d6:9b:1d:f0:90:ef:31:41:9b:1b:56:
83:ef:79:12:ea:a5:7d:5e:f6:2b:85:88:23:01:9b:
9e:24:da:28:27:c2:3e:78:3d:19:b3:ad:d3:fd:2c:
11:dd:9d:c1:ff:75:7f:9a:12:ab:40:fb:16:d5:2a:
d2:c7:25:bb:cd:64:0e:b7:17:09:a2:8d:a4:a7:c4:
ef:7b:39:de:a7:7a:59:05:bb:0f:2d:bf:30:6d:78:
88:2d:58:61:81:89:d1:bb:f0:48:36:f7:7c:fa:39:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0C:8D:65:F0:F5:96:CE:59:36:E5:3A:DD:4B:DC:A2:27:9D:89:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df07dc06-09b9-32f3-ae27-6ae483289456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:11:02:27:b3:ec:f6:4f:a3:f7:3a:c7:6f:25:76:f0:5f:e5:
78:e5:dd:38:4a:93:32:3f:54:d2:91:92:18:ae:59:49:d6:67:
9e:05:54:03:fa:a0:41:91:a9:42:0b:2e:4d:66:ce:b5:61:de:
a7:74:68:4d:c2:4f:1f:53:37:00:6b:e1:ef:08:26:f5:50:bd:
08:d7:92:ac:a9:66:c7:9b:d0:69:78:d9:98:dc:41:d6:a1:c6:
b6:32:1a:f2:40:27:14:05:ff:27:77:af:72:13:81:4c:38:cd:
a4:e2:26:6d:4f:32:4c:d9:19:45:2b:32:05:0d:1a:d8:f6:80:
f6:a4:d3:f2:44:e7:85:73:fd:64:a7:f5:6b:61:0c:a9:3e:6a:
58:12:90:0b:74:c7:f9:c0:bb:db:52:13:66:ca:5c:cc:64:1d:
aa:46:a9:7b:e4:b9:0a:ae:b8:34:28:ba:b9:26:55:7d:86:07:
6b:4a:e8:9c:de:52:fc:ee:45:a6:35:a1:e2:5c:3e:14:82:b1:
7c:af:00:d9:cc:80:c5:69:be:b6:d9:c4:79:fa:21:89:a5:26:
f8:5c:5e:04:d3:7d:e6:8d:dc:80:66:92:d9:85:0a:db:3a:ff:
df:46:0b:7b:74:97:88:2d:ad:c0:24:4b:f0:53:d8:d5:ec:e7:
cc:19:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org