Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e11e1976-ae5a-30d9-8263-3189f875beff.roa
File: e11e1976-ae5a-30d9-8263-3189f875beff.roa (raw, json)
Hash identifier: TAG91SBPZ6e56aTO5vnvkjBI9BttlDsLBoW9jjcWRbg=
Subject key identifier: E5:DA:39:55:69:F5:E4:F3:55:40:BD:12:FF:D0:67:54:14:D0:D8:82
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FB6935BF60763903F04780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e11e1976-ae5a-30d9-8263-3189f875beff.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.128.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:69:35:bf:60:76:39:03:f0:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a96e37d9-d02f-4b4a-84cf-e1f293284c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:89:7d:d7:0d:40:86:4d:12:a2:f4:78:c6:
03:50:8f:17:d7:2d:13:34:09:c8:f0:61:4f:bf:8b:
a6:15:5e:11:4b:e6:64:a7:a5:5c:9a:63:1f:c0:25:
ad:fe:05:fd:56:18:bc:95:5b:2a:93:ee:3d:95:c6:
08:ec:10:43:d4:96:02:39:45:8b:ef:66:93:8b:23:
0e:e8:5c:c6:4e:0a:71:10:04:0e:3e:35:13:06:fa:
86:ea:52:e5:6a:3b:f4:72:95:80:89:c7:67:75:6c:
64:df:c2:46:8a:bf:dc:51:de:86:25:19:53:ec:b5:
4a:72:f8:9b:27:0d:b8:72:76:c1:28:2a:c2:fe:f4:
eb:c9:0b:85:cc:c8:2e:f2:c6:69:ea:9c:d7:2e:5b:
a9:e4:e5:01:47:80:1d:b4:81:e5:c3:9e:52:39:6a:
3a:6b:46:0c:b8:d2:7f:51:2c:5f:07:5e:53:d1:0d:
26:46:2d:ae:46:2a:b1:d0:41:62:43:e4:81:32:81:
ab:21:9b:a7:f0:be:91:a6:5f:de:fc:35:b2:53:cb:
e7:1e:b9:08:cb:1d:b2:51:ec:8f:37:c5:36:83:47:
31:3c:3a:16:0d:e4:91:cb:c1:06:e8:e8:64:e9:b2:
22:1f:28:af:b3:e1:62:25:c3:9f:59:f5:94:d2:c3:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:39:55:69:F5:E4:F3:55:40:BD:12:FF:D0:67:54:14:D0:D8:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e11e1976-ae5a-30d9-8263-3189f875beff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:4f:fd:32:3d:e7:ad:8e:dc:de:0b:ad:ea:fb:d5:9c:69:de:
60:41:95:16:e8:c3:85:a5:6a:a8:ac:5c:26:37:b2:0a:6d:7b:
55:bf:81:cf:7b:cf:e1:92:ed:d8:61:b8:8f:26:b9:23:8d:ce:
d4:fc:89:e9:16:60:b4:6b:af:00:e1:95:c6:b7:23:15:75:4f:
7b:7c:9f:4d:ec:fc:7b:09:83:b2:6c:88:5a:a0:ba:45:60:a3:
96:aa:ec:ea:e7:e7:22:79:6b:2e:f5:81:75:24:37:33:99:28:
47:83:b6:41:ca:16:07:e2:7e:31:0b:50:d4:06:4a:f5:f0:cc:
08:42:6b:64:d2:ec:45:64:62:9d:01:6c:35:75:09:ed:99:79:
19:a1:61:ae:74:20:aa:7a:fa:fc:aa:a1:2d:b8:16:c2:98:59:
58:d5:d5:f5:fb:c8:ab:b9:e8:b9:b1:bf:ba:82:ab:91:85:b5:
20:02:44:ca:91:1b:c4:40:12:02:da:58:58:7b:f8:41:81:62:
0c:9f:2e:03:62:cb:58:7d:21:b3:6b:38:04:04:64:7e:9e:f3:
42:e0:6c:a5:05:e1:66:84:75:9a:36:78:33:f3:76:cd:c5:e0:
42:9a:7c:e4:30:0a:1f:e6:4a:68:60:e1:37:e0:ff:0b:22:cd:
a6:b4:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:43 2024 by rpki-client on console-ams.rpki-client.org