Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5f74c8b-f6f6-3009-a6e1-241b353ef51f.roa
File: e5f74c8b-f6f6-3009-a6e1-241b353ef51f.roa (raw, json)
Hash identifier: 40Ui4D2sVQDgE4RpHK8Q5PtsvRjW8+tYotcg9DC4+1w=
Subject key identifier: 39:6B:66:B3:DC:C6:51:45:02:EC:EC:60:3F:D0:9A:AB:05:56:9A:CF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A2776F32649FB40E6014280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5f74c8b-f6f6-3009-a6e1-241b353ef51f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:76:f3:26:49:fb:40:e6:01:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6955110d-e410-4fe8-ab31-f290307e9e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:e4:e7:8c:cb:70:83:69:32:1b:4e:86:07:
29:29:ae:1e:06:b7:13:f2:2d:d4:4f:44:58:96:d6:
2e:f4:88:42:19:7e:e1:b0:a5:51:00:61:98:02:f0:
cb:27:58:6a:54:0c:d7:96:32:6f:2a:4b:3b:26:e9:
39:69:c5:01:31:18:02:a6:45:bd:b0:d7:7a:7f:e8:
6c:c3:24:bd:90:82:19:cb:ef:c3:74:d2:00:f0:c4:
d5:44:6a:07:99:8b:e3:a7:81:34:bd:b4:0d:6e:93:
c3:0d:b4:d8:fb:f8:1f:47:99:5f:d3:ee:3e:c1:99:
9a:b2:99:9d:0d:1f:8c:bc:94:b3:d4:8c:9c:27:0b:
64:50:2a:44:d7:6c:8b:a6:e8:0b:3b:5d:c4:38:e1:
18:d2:57:70:a3:e8:07:f7:90:69:f2:72:0b:49:c0:
f2:7d:8b:d3:04:cc:17:04:a6:ba:2d:c4:96:3d:a7:
3a:b0:ff:ce:29:50:17:72:ff:ac:80:36:75:c4:4f:
3a:16:b5:3f:5c:bf:80:93:9b:e5:43:05:72:33:47:
b7:cd:d9:10:f8:52:ea:64:36:e9:d8:97:61:08:1f:
07:7e:22:ce:ca:b0:e6:19:66:20:af:d4:c1:2d:cd:
98:2b:35:2b:43:27:ef:c2:2e:c7:a8:04:8c:0b:b9:
d0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6B:66:B3:DC:C6:51:45:02:EC:EC:60:3F:D0:9A:AB:05:56:9A:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e5f74c8b-f6f6-3009-a6e1-241b353ef51f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:3b:a7:13:36:a2:b5:ef:51:d5:e7:36:70:bf:94:23:19:ab:
db:4f:32:73:da:94:50:de:24:8c:92:bf:e7:91:4a:9f:72:6e:
70:ea:93:97:c6:ad:b1:87:21:61:c8:c4:5b:c4:fd:d7:2d:4b:
9f:db:1e:8c:0b:6f:ae:b6:e9:4d:36:4f:b5:84:1f:95:a4:4e:
91:5e:db:eb:90:b6:83:61:a3:66:30:ee:17:28:3e:9a:6a:80:
29:16:95:fb:75:63:17:d6:2e:fe:c6:a3:d1:2b:7c:ee:51:1c:
6d:92:20:98:5f:4f:2c:61:6b:d7:14:78:29:05:e4:be:d0:92:
28:70:31:44:cb:b3:6d:21:8a:5f:32:b3:d7:a4:9e:25:c3:b5:
bf:42:be:1f:cf:4f:35:66:6c:b8:90:29:b4:18:a4:7e:21:1e:
5f:c3:fd:a2:b5:5d:a2:57:8e:0e:da:87:19:b6:49:df:32:a7:
8d:e3:42:74:76:a6:b5:66:50:2f:0c:52:7d:79:26:02:7f:f6:
da:78:e3:3f:7b:8b:86:11:aa:76:44:f9:11:5e:bd:4f:07:a7:
cb:8f:b5:b0:0e:c7:fe:20:e5:bb:87:aa:ac:f4:c3:61:9c:8c:
e1:7e:48:db:c9:65:fb:52:9f:db:24:33:2d:ef:fe:6d:27:80:
93:c9:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org