Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e489d79c-67b7-3b11-ba0e-dbd29bcb4dd3.roa
File: e489d79c-67b7-3b11-ba0e-dbd29bcb4dd3.roa (raw, json)
Hash identifier: UuYS6BEWBzP960/uulCFIAwUDztAtAzWT1Z+hxw0DxU=
Subject key identifier: 00:B7:74:3E:A2:B5:CB:8F:B6:C6:6F:BF:CF:C2:94:B2:AD:91:D4:EE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1E903D05D893C6010D2840
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e489d79c-67b7-3b11-ba0e-dbd29bcb4dd3.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1e:90:3d:05:d8:93:c6:01:0d:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8709ccfa-243c-4595-a18f-905e240e83cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:26:64:d0:5f:41:77:64:52:01:43:97:b9:
1a:11:a0:cd:e1:0a:74:3d:cb:13:32:76:c7:f3:29:
e8:14:f2:97:6d:0f:7f:b8:fb:b7:4c:27:84:40:49:
e8:5c:77:f7:90:25:49:04:88:44:7c:0e:bd:60:c4:
71:e6:93:e9:f6:b5:e3:6e:cc:71:12:5b:fc:64:ca:
d8:bc:d1:ed:f8:d8:23:c2:c5:12:67:70:5a:d0:a7:
82:dc:78:0f:f7:b2:8e:e1:b8:d8:a3:d3:d6:22:f6:
89:dc:ad:5f:b7:c6:a6:0e:42:2d:e8:f7:e3:8b:77:
1f:c9:1e:a5:91:43:19:e5:54:b2:94:99:4b:e1:2b:
d9:35:59:7e:4f:58:8a:9b:c8:3f:9c:12:1c:e8:72:
b9:69:c0:cc:e4:b6:67:82:75:65:3e:8f:5c:32:68:
07:e0:58:5c:bb:56:f8:fb:e4:e7:a1:96:a9:06:92:
0a:d0:c6:84:1b:f7:1e:90:85:d0:9b:5e:cc:a2:6d:
21:4d:dc:63:e9:a1:b0:7e:e2:02:ba:07:3f:e9:79:
d4:0d:af:da:5f:cd:3a:04:dc:8a:46:be:ed:8b:10:
cb:e3:22:91:cc:ac:1a:b1:52:03:d9:64:9a:4e:98:
7b:06:e3:d3:55:e3:9a:2f:b1:20:29:af:a7:9a:9a:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B7:74:3E:A2:B5:CB:8F:B6:C6:6F:BF:CF:C2:94:B2:AD:91:D4:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e489d79c-67b7-3b11-ba0e-dbd29bcb4dd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:46:4e:1a:51:d0:80:ae:53:ba:24:2c:1c:31:44:80:62:de:
6e:e9:97:94:d6:bb:62:ca:89:30:00:9e:d9:40:bd:83:fc:ee:
bf:e8:0a:07:a1:c0:f5:ee:18:77:b3:0b:4f:e6:c6:39:fb:7e:
a6:82:95:5a:d5:71:98:21:5d:18:5a:3d:2a:a9:80:9f:c2:9f:
bf:9d:0d:4f:8a:27:ee:0b:d0:86:44:e1:dc:76:e6:8d:a5:19:
75:8a:f6:b0:31:26:b3:12:86:9e:cc:27:f6:e1:47:21:20:80:
6d:38:a4:78:73:fd:5b:6c:57:f5:6a:9d:55:c2:80:12:1b:b8:
fd:bd:2a:03:c4:7a:c2:e5:42:47:f9:1f:51:38:b9:62:fa:e4:
13:2f:10:4a:2d:56:95:d1:01:45:e7:f0:8b:3b:e4:5d:02:10:
aa:bd:d8:ac:5a:28:a1:e0:0b:fa:ec:cf:21:9b:f6:ff:c7:1b:
0c:84:b6:4d:36:99:e5:bf:4f:9b:c9:e7:a7:ee:f4:3e:25:4b:
c2:63:4d:e7:39:74:59:8c:c9:aa:07:a7:d9:ae:7a:aa:cf:48:
e0:61:9e:06:95:64:87:74:e1:c4:9e:c1:d3:db:24:01:5e:dc:
04:01:1e:3e:6a:a0:98:54:27:1c:fc:14:05:b9:1a:03:20:7d:
b1:ab:0a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org