Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e0a9d701-81de-31ac-a5d9-651933ba3fb1.roa
File: e0a9d701-81de-31ac-a5d9-651933ba3fb1.roa (raw, json)
Hash identifier: C2S8zpyI/qP6LN59yE01MHEpCh0N634YEDmITnlnwL0=
Subject key identifier: A2:C9:A6:3F:89:D7:08:79:15:8E:8C:7E:34:CD:51:BD:F2:C2:75:E4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FAE05AD5322A7BC9427BA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e0a9d701-81de-31ac-a5d9-651933ba3fb1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 70.32.159.128/25 maxlen: 25
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fa:e0:5a:d5:32:2a:7b:c9:42:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bb08c609-92f1-495f-bfd7-f41ece82f093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:73:b8:6b:56:d4:5a:b5:26:40:f2:b9:87:
ea:31:05:14:34:63:4f:b3:d8:42:98:ec:7f:20:74:
ed:8c:fd:6e:45:3e:7d:f5:4f:ef:8f:70:e7:83:3f:
4a:cb:26:64:c5:b3:55:9a:3e:e1:0c:7e:57:55:de:
c8:a3:64:0a:b9:18:7f:4f:ba:d6:4b:b8:73:13:4e:
08:6a:64:e1:e0:44:04:0a:f2:ff:45:b8:22:ce:68:
44:0c:98:3d:6b:58:cc:16:ac:6b:aa:99:9a:c5:33:
86:f7:b9:43:12:8b:01:2e:ef:ac:b0:58:2e:f6:d8:
b1:90:a4:85:f6:12:32:6c:f3:87:16:a7:05:a2:2e:
65:e9:44:fc:58:ff:27:6a:86:d1:f2:a1:1a:09:19:
e1:03:4c:9a:ae:40:e1:f5:32:4a:35:34:ef:8e:f8:
cf:99:1e:4c:68:aa:14:e9:6f:ed:ae:db:e1:e2:49:
a9:e6:47:0a:19:53:0d:c1:29:6a:d7:48:07:8f:57:
f0:44:b5:39:4e:59:2f:72:20:d3:20:57:87:50:6d:
10:84:46:20:2a:22:ca:f6:55:29:f3:f7:1a:20:67:
98:cd:62:9f:2b:13:7b:69:4d:4b:b8:61:a0:d9:71:
56:5c:74:59:75:4d:b8:aa:cd:15:a8:78:9b:05:54:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C9:A6:3F:89:D7:08:79:15:8E:8C:7E:34:CD:51:BD:F2:C2:75:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e0a9d701-81de-31ac-a5d9-651933ba3fb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.159.128/25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:24:df:04:76:a5:2e:d9:6b:b7:16:18:37:a6:59:a2:a4:e4:
41:21:74:c9:95:da:01:fe:c4:66:99:7e:91:d3:52:3f:8c:70:
7f:19:ae:ae:d5:16:34:ea:cc:83:7a:b2:2d:23:df:59:27:97:
18:43:10:be:d6:90:4a:a2:f6:a5:ab:1e:1f:ff:13:40:ed:a6:
48:64:62:38:36:eb:d0:a3:a2:5a:8a:d9:9b:48:e8:ef:c3:d5:
ce:09:3b:dc:1f:59:a0:2b:ca:93:6c:d0:ee:b5:d6:0c:01:1c:
36:4d:db:f5:98:86:3a:7e:96:c4:4b:98:ad:b5:52:01:97:4c:
bf:fa:4a:f6:be:f0:d8:b6:c1:81:49:26:10:a4:12:ea:e9:b7:
1f:c7:23:f4:48:83:46:2b:18:51:b5:80:9c:2d:86:01:87:ad:
de:bc:13:95:08:57:95:ce:5d:24:04:3a:9f:4d:56:22:0d:4c:
92:d8:a2:bb:fa:b3:10:e1:7c:05:84:a6:0a:79:a8:7a:8d:ab:
09:f4:53:c6:58:82:67:e7:62:fe:05:d9:2d:c8:27:3d:57:19:
7a:d1:fd:76:82:2d:f9:f3:68:69:7c:e1:a5:76:bf:fc:4d:fb:
8a:fb:56:4b:ff:32:59:b2:c8:cc:ac:af:79:2b:d3:c5:15:39:
6a:11:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org