Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f40ccbf1-bcfa-3759-8ba3-6619274fad55.roa
File: f40ccbf1-bcfa-3759-8ba3-6619274fad55.roa (raw, json)
Hash identifier: QVtqFpGl5uiYTSTC1fd0Roh5xoOyDVE0tt4YhNE+j64=
Subject key identifier: 33:AE:DC:4F:28:A9:CB:75:DA:14:FD:AF:FF:71:9A:EE:BA:E9:9E:19
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A12236EC8CC8F024FCD3040
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f40ccbf1-bcfa-3759-8ba3-6619274fad55.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 64.233.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:23:6e:c8:cc:8f:02:4f:cd:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=564f8910-a49f-43c3-bad8-b8aac9eb5d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:d8:e4:6f:99:97:c0:64:2c:66:7e:0f:27:
94:b0:d0:7b:2c:7c:dd:62:7a:6c:33:f7:a5:76:9c:
75:b0:23:dd:14:ae:8e:a3:98:28:73:19:37:40:23:
82:b1:00:ef:2f:b2:4d:6b:4b:e2:41:45:3b:39:2e:
29:26:e3:e7:ef:af:01:bf:56:6e:4a:b5:4c:de:bb:
c1:73:84:53:54:fe:a3:99:74:55:01:9e:01:38:db:
12:03:7f:d7:26:12:e7:da:b4:64:0e:63:51:78:2d:
42:8d:7c:26:e8:7b:6b:b9:53:95:c7:33:8e:a7:7e:
a5:e9:89:ef:01:4f:18:76:66:6a:8c:07:da:13:c7:
f6:63:96:d1:c9:14:f3:8e:9d:91:2d:94:d7:b1:d8:
45:c7:6e:4b:bd:1c:40:25:26:12:2b:db:f2:c8:f8:
95:dc:00:17:ad:51:74:c0:82:68:01:3a:1e:a4:43:
b3:40:d6:1a:e1:11:03:02:e9:36:bc:7f:bb:eb:8c:
6b:11:1e:00:78:0c:28:d5:04:0c:62:34:dd:19:e1:
76:10:29:b3:66:41:00:69:f0:dc:5b:75:54:c3:1d:
c7:b3:1d:2a:ea:10:46:20:72:b4:8f:99:af:5a:c2:
6e:49:7f:d8:c8:dd:62:e6:3c:c2:77:f6:4e:b5:39:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:DC:4F:28:A9:CB:75:DA:14:FD:AF:FF:71:9A:EE:BA:E9:9E:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f40ccbf1-bcfa-3759-8ba3-6619274fad55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d2:aa:4e:16:97:16:6f:b5:2d:ce:47:d2:29:01:04:af:17:
e3:58:d5:e1:93:95:1f:f8:85:e9:2a:b2:e7:d9:fd:53:b3:9e:
90:2b:3b:d7:f0:c8:b4:94:fb:25:9e:e5:0a:5b:94:c6:99:ba:
51:a5:03:1b:d4:a7:79:dc:93:03:47:9b:36:a6:b8:ac:25:76:
e2:35:e7:9a:ca:db:2b:3e:78:85:86:73:2f:6d:cc:d8:e9:b7:
77:7e:c2:51:be:16:4e:09:5e:40:6e:bb:55:c1:6f:22:29:0f:
c7:ef:ab:7a:c8:fa:02:36:5e:f9:a2:66:f3:1c:0d:0a:c7:83:
2b:ea:54:02:ed:fe:bf:ab:d5:a2:be:1e:db:72:22:ab:76:4a:
0b:db:c8:c2:1f:3b:fb:ee:cd:be:4d:9b:cb:b5:12:04:07:d8:
51:00:21:bf:05:e3:b4:b2:fa:2d:11:c4:21:8e:fb:a6:36:c8:
66:85:a8:21:6a:a3:dc:c9:c3:6c:a8:b2:9d:98:ce:a2:c1:7f:
dd:c2:35:bc:2d:d9:2c:f5:49:58:47:9d:db:1a:9f:2e:94:be:
71:2d:d7:dd:f1:0e:d1:79:56:05:6c:0a:85:42:34:6a:ae:a8:
50:0b:8b:fe:f3:84:30:a2:7c:60:ce:a8:40:e9:88:16:57:26:
f1:11:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org