Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13e60cda-e239-396d-925a-6d5798a92b64.roa
File: 13e60cda-e239-396d-925a-6d5798a92b64.roa (raw, json)
Hash identifier: 1l73C/eJnPymCzhBMrMhMeSlErKIdrSY8ikqpTfi62k=
Subject key identifier: A7:3E:CC:A0:41:C9:33:75:00:AC:11:A4:E6:C9:DC:84:83:4A:DA:71
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F7A34B354E43B3309F4E54
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13e60cda-e239-396d-925a-6d5798a92b64.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f7:a3:4b:35:4e:43:b3:30:9f:4e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a6c5f67a-8cc3-4783-aa20-2dd70e24a9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:88:80:a8:42:7a:67:a1:81:b8:71:97:bf:
e4:78:f1:58:74:a2:f8:e9:a9:b1:be:9a:bb:37:06:
93:69:a6:7d:37:4e:ee:98:b6:17:67:b1:ca:d4:8c:
41:50:07:0e:d9:6b:53:23:bd:1f:4a:33:b9:b7:a3:
9f:c5:29:1a:1c:0d:4e:17:8d:e0:2f:30:e8:31:1d:
f5:42:1c:fd:34:24:3a:c6:68:4b:5a:81:af:f1:bd:
3d:e4:16:84:ac:2e:41:6a:22:13:f3:9e:45:2a:90:
fd:3b:23:32:15:75:a3:40:13:ca:e5:4e:ff:c9:0b:
d1:57:48:02:f2:af:23:b2:64:fb:e1:9b:08:22:a6:
fe:c4:2c:ce:39:a5:60:89:50:a0:97:d9:ea:ec:39:
ef:18:96:1c:0d:c5:b6:38:4d:25:bd:95:f9:0d:82:
49:51:7a:81:24:7e:dd:d5:78:a8:fa:b8:ec:ff:ed:
d8:ea:5d:0f:cc:41:5b:d1:74:c1:ea:d0:cf:65:6f:
91:e1:d4:fe:27:97:b5:97:6d:d3:e3:bf:c7:c5:e9:
15:9e:cf:64:45:1b:4e:a2:ab:38:c2:0c:8b:80:a5:
05:be:fe:32:d7:b8:57:00:0d:7f:b3:82:8d:d1:89:
2d:8b:38:d2:f7:fe:d3:c5:b8:84:df:ca:7f:81:94:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3E:CC:A0:41:C9:33:75:00:AC:11:A4:E6:C9:DC:84:83:4A:DA:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/13e60cda-e239-396d-925a-6d5798a92b64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:83:49:d7:ec:00:3b:08:5d:64:61:b7:ad:3a:4e:e8:15:11:
90:ea:d6:02:f9:04:e0:20:b2:3d:cf:6b:6e:b1:91:d1:f5:76:
a7:53:13:67:c7:d2:2e:c0:c7:b2:58:f8:59:21:c4:65:af:fe:
b3:bc:0e:c2:d6:ae:ba:87:16:7a:2a:46:eb:21:ac:c4:4e:42:
21:c4:25:87:69:ed:45:76:a3:b2:b7:5b:31:60:61:b5:2c:c3:
e7:ef:c0:c3:fd:25:b1:6e:2b:69:66:f2:8c:a1:17:f7:e6:52:
ee:52:43:5c:f1:92:c4:77:83:41:0b:4d:a8:aa:aa:7e:e0:4d:
82:39:2c:75:09:74:b6:1f:03:2d:a4:92:fc:fc:11:46:fe:8d:
10:e3:d9:67:08:79:9c:92:ee:62:d2:05:8f:b7:ac:ce:4e:54:
1b:61:98:96:57:31:1e:06:52:3d:00:00:e8:9a:53:18:01:45:
5a:0d:98:1b:eb:a0:c1:5e:83:42:66:5f:18:62:c1:37:47:8d:
ab:96:2d:ba:80:8f:39:44:5c:c2:38:99:9e:e4:66:0f:90:7b:
47:1f:8a:7d:26:bf:58:68:20:a6:42:14:84:93:a6:b8:af:5c:
67:44:b1:73:c0:ea:48:81:2b:45:17:e1:b1:4c:c1:3a:c3:5a:
0c:21:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org