Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5fe56ec-37ee-32d3-be6f-10546aa2dded.roa
File: f5fe56ec-37ee-32d3-be6f-10546aa2dded.roa (raw, json)
Hash identifier: WLnrDzCT2AnZn9aEFWgT6LTh4Pb/H2LvcMHCvtFOd2w=
Subject key identifier: 6B:ED:28:09:F9:86:9C:D5:9A:FB:D8:C1:43:33:83:83:CD:0A:1D:CB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0F18A1EB4A10B26BE65F20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5fe56ec-37ee-32d3-be6f-10546aa2dded.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0f:18:a1:eb:4a:10:b2:6b:e6:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5b00173f-047c-41e3-a400-fc7a782e19db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1e:03:93:06:e7:2e:92:fc:9a:f3:04:c7:4c:
fa:48:13:ec:4d:90:fd:2d:c2:2a:d6:72:5a:a6:11:
65:16:3d:de:30:ba:d4:5a:f1:bb:19:61:74:1d:f0:
f4:d7:17:76:3c:7d:d0:91:57:68:d3:6a:28:99:97:
21:2b:00:bd:72:7b:11:e1:77:47:e1:ba:b8:76:8f:
33:1f:c5:ff:75:fe:08:b1:58:dd:28:d9:61:81:b4:
84:c7:9b:19:ef:7a:ac:c5:fb:b2:26:8f:b2:09:75:
ec:5a:eb:fb:0a:24:6e:a4:0a:bf:c3:24:05:0f:de:
b5:66:a9:2d:13:19:5c:4b:96:25:10:af:df:9b:48:
be:ab:47:56:48:a4:e2:07:44:3d:44:c1:50:56:d4:
a9:53:cb:6d:3f:a9:87:45:c3:0e:e3:38:d7:df:82:
db:2f:06:77:aa:06:b8:64:ed:e5:c8:10:a2:24:01:
bd:f7:5f:c7:7d:28:2a:8d:ec:98:1e:31:ad:98:41:
0b:2b:9a:a8:b7:bb:35:de:6a:25:87:cf:b4:47:89:
37:ac:05:47:be:db:08:5c:51:b6:e9:51:08:eb:8a:
f2:78:22:83:bd:ac:e8:f8:09:2a:26:01:15:f3:7f:
b7:ef:ba:be:98:6f:fe:c1:0e:1e:48:eb:cd:f6:34:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:ED:28:09:F9:86:9C:D5:9A:FB:D8:C1:43:33:83:83:CD:0A:1D:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f5fe56ec-37ee-32d3-be6f-10546aa2dded.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:f5:e9:6b:26:26:13:0b:ed:a9:72:01:95:f5:28:ed:0b:30:
0c:50:d2:07:1d:bd:7c:8e:53:87:ab:ce:31:b3:07:02:69:bf:
26:e8:8c:f2:ca:35:db:5d:42:f0:66:07:dd:c9:28:24:bc:c3:
00:6f:da:20:74:71:70:95:cd:88:d2:17:11:31:67:9f:9e:ac:
f1:12:92:c9:07:6f:0c:4e:95:e3:6b:1b:c8:82:68:8a:65:2e:
5d:9a:63:4d:b5:22:84:96:96:e9:e0:ab:f0:37:24:32:85:db:
3f:65:21:25:63:d4:18:e1:bb:d0:d4:38:e0:52:16:15:d9:b7:
d3:68:a1:8a:87:96:c4:e3:63:df:22:6b:08:bd:bc:a5:47:20:
68:cc:bb:7e:1a:91:64:1c:d5:20:c9:25:ca:09:50:05:6e:23:
33:50:0c:10:34:be:22:19:97:6b:f9:50:4c:d3:80:04:22:b4:
85:e2:39:77:da:57:4b:3f:59:fb:08:6e:d9:cb:7f:cb:5f:c4:
bb:93:c7:8e:f8:04:aa:1e:9c:38:08:b5:0e:a1:0f:af:3a:39:
e3:59:2e:a6:6f:d3:61:0a:09:03:0d:df:d7:b2:3b:be:a1:cf:
c6:e4:c6:ea:37:f3:e1:c7:1b:ab:28:18:08:6a:79:5f:94:0d:
7d:1c:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org