Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbbb1f21-c817-3b79-829b-248eebe2fc52.roa
File: fbbb1f21-c817-3b79-829b-248eebe2fc52.roa (raw, json)
Hash identifier: sSJwd9gS+vG2rwW88AMa5ekf4/oK1IxHOMGV4jnulJw=
Subject key identifier: E1:E6:44:6A:3C:0B:07:95:F9:04:FE:A6:68:ED:66:81:15:96:E1:72
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FB47412FAB43DC20F3E300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbbb1f21-c817-3b79-829b-248eebe2fc52.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 199.36.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:47:41:2f:ab:43:dc:20:f3:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9136f81e-a536-4420-8126-b249bc0460e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:04:1b:df:21:b8:57:5c:07:cb:65:cb:b6:
38:40:de:93:ee:77:36:f1:6e:c3:21:68:33:50:28:
3b:57:f3:a7:32:09:79:b2:b3:f3:4a:93:aa:55:f0:
a2:5d:45:e1:59:25:dd:77:af:fc:78:5f:e1:7a:1a:
fc:da:4c:e4:f4:95:a7:dc:e3:1f:12:ed:a6:df:84:
f4:31:17:74:2e:f7:b1:39:fa:4b:95:87:62:80:0e:
28:90:30:94:6e:c5:07:91:6e:85:90:ed:43:ad:62:
31:28:90:3b:fd:22:2a:6a:36:7a:fb:cb:1f:df:e1:
05:7f:81:c0:0a:4f:58:d6:16:69:5f:c3:a9:69:83:
fb:76:0f:4f:03:0e:84:41:bf:46:f1:78:41:74:f2:
f1:f2:be:25:a2:07:92:42:0c:33:7e:f3:c1:6f:09:
e0:dc:2f:30:76:3f:6c:71:c1:ff:8c:62:af:91:84:
89:ae:fd:95:64:3d:38:4e:bd:43:38:fc:0d:3d:c7:
ac:c6:a6:7d:5a:c5:9d:f5:eb:2e:eb:3c:c0:e5:00:
08:c0:41:14:2b:c9:64:3b:8e:86:a3:d7:c5:20:45:
96:22:d8:7d:d9:c7:6e:ad:44:98:de:5d:a3:4b:45:
ca:63:c4:f1:63:32:14:f0:2d:b7:ac:cf:4c:ee:ea:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:44:6A:3C:0B:07:95:F9:04:FE:A6:68:ED:66:81:15:96:E1:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbbb1f21-c817-3b79-829b-248eebe2fc52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.36.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:d4:2c:39:cb:56:2c:95:90:bd:d9:38:1a:03:16:6b:d3:ec:
2a:bd:a9:25:57:d5:79:01:6c:04:00:5f:9b:32:2a:71:6f:2c:
f3:7c:ca:02:28:67:2f:57:a7:02:f4:da:0b:3c:40:aa:fc:27:
17:e5:5c:f2:5e:b0:0f:aa:c3:19:c1:8f:d4:84:a5:1f:37:e4:
74:d0:14:ab:b6:4b:52:d3:57:6b:8d:fd:cd:3f:c6:a4:88:e2:
03:5a:1c:ef:9f:14:00:92:75:bd:bd:5f:f5:93:0e:69:d5:08:
76:d7:a1:fe:db:82:14:a2:be:93:d9:ff:b1:38:28:13:35:68:
79:b8:7f:65:75:c4:51:ac:8b:3c:ce:5c:72:51:b5:ee:70:56:
32:e1:43:df:4e:4b:07:0f:d6:bc:2b:37:f4:b5:75:08:33:00:
bc:45:52:c7:44:58:58:f4:80:a1:74:87:70:0d:51:7a:9e:7b:
c1:11:9b:74:90:ae:fc:29:91:a1:bd:3b:d8:3b:6b:c5:2a:11:
f2:5f:09:ec:f5:6a:1d:46:4c:2d:06:7c:ad:e7:08:9e:21:73:
56:45:a7:93:a6:10:3b:b8:18:13:26:e8:9b:c7:f5:5f:3a:cf:
78:ef:19:22:3e:e7:a2:ac:e5:6d:2d:c0:27:10:c9:77:4c:d8:
00:76:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org