Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/033f52f9-1f94-315c-8619-df06430ab948.roa
File: 033f52f9-1f94-315c-8619-df06430ab948.roa (raw, json)
Hash identifier: IvGzdIkZc6ZvfJ1w+A6tp+MIv5O/Kek8vPqW1uZShPo=
Subject key identifier: 0E:DF:73:2E:69:0E:41:4D:F6:C6:FA:A3:71:4C:1E:EC:C4:D6:4B:47
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A225CC62DEEB9064D843B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/033f52f9-1f94-315c-8619-df06430ab948.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:22:5c:c6:2d:ee:b9:06:4d:84:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c8e76e27-0cd2-4869-b008-c193579409db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:30:2c:f6:48:28:12:1c:ec:92:b0:01:b7:82:
11:13:c7:0d:34:b4:1e:98:5e:77:a2:9b:40:18:9f:
e4:d2:2e:cd:7b:26:8d:c4:15:54:1a:f6:35:15:8c:
97:13:cf:8a:ed:77:39:8a:56:c7:a5:f5:42:0e:ab:
48:e9:7b:b8:fc:b0:e3:86:3f:bd:15:69:99:b4:36:
4d:2c:3a:76:5f:98:76:55:eb:da:9d:86:2b:14:bb:
5a:2b:ae:b4:01:9d:fc:4a:26:20:b9:d4:bc:94:b8:
5d:ee:9e:e5:92:02:f2:77:ec:d0:f7:ad:5d:8d:e9:
3a:b6:ec:ae:56:5e:e2:4f:32:85:df:61:d2:fd:c6:
1d:a4:76:16:8d:05:db:2f:a0:d3:bd:9b:1b:fd:c2:
c7:15:fc:33:4e:64:85:f2:20:53:3f:da:a6:40:fb:
90:f3:53:39:90:11:c2:33:a5:e5:13:4d:b3:91:89:
07:5b:20:19:1d:c7:a4:49:0e:24:a9:de:59:b9:b5:
44:e4:1e:af:4e:19:e1:df:66:4b:78:43:59:fd:ee:
21:7e:b7:fa:07:8c:3a:ad:56:00:b7:37:6b:98:e2:
42:e4:a1:7c:f4:88:94:b7:9f:0a:41:fa:5a:99:48:
95:a8:4f:5c:b4:5e:45:b3:bc:11:8c:3b:17:a3:8c:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:73:2E:69:0E:41:4D:F6:C6:FA:A3:71:4C:1E:EC:C4:D6:4B:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/033f52f9-1f94-315c-8619-df06430ab948.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:3c:26:91:c7:8d:7d:b4:a3:0b:e3:6b:66:07:25:29:c2:a4:
59:65:a3:4c:2c:92:c5:5b:85:f0:ed:e6:01:98:36:81:e1:7d:
7f:41:25:6e:81:96:fa:79:16:81:14:82:82:1e:92:b0:f9:61:
87:ec:1a:ee:c7:09:73:64:00:d0:99:d5:5a:bd:f2:4e:48:8c:
91:10:09:15:3e:72:00:21:06:cb:c2:06:74:5e:f4:3f:3f:18:
4a:a3:1c:aa:01:5b:4e:df:84:65:20:05:45:ac:c8:24:7c:73:
5b:45:bc:9a:57:70:d4:2b:62:48:97:32:73:7b:3d:7b:92:b2:
61:fc:71:4e:47:62:d1:db:7e:3f:1d:cf:7a:89:75:1f:e8:e8:
76:25:a7:1e:33:2b:5f:e3:b8:bc:1d:fa:06:e7:48:3c:51:7d:
eb:8b:bc:bc:f3:f1:48:94:f4:41:ba:4e:37:00:99:89:f2:b8:
c3:c3:b8:ee:0c:ea:36:3a:67:d5:f0:8e:20:24:04:1e:f9:85:
6d:dd:bd:b3:90:57:17:d3:2a:18:3c:58:f0:fe:84:bc:9c:6d:
e7:a9:5d:75:78:70:66:fe:b4:bf:de:a2:04:c0:85:64:e8:1c:
6e:44:9a:92:2c:93:0e:8e:bb:52:93:e5:a0:95:1d:c1:35:84:
28:91:57:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:35 2024 by rpki-client on console-ams.rpki-client.org