Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2981857e-f286-3835-b24f-922838b9e135.roa
File: 2981857e-f286-3835-b24f-922838b9e135.roa (raw, json)
Hash identifier: L/wZaVxn2WorxOcNbSlBvrmB3D+lyYJhpNbJ4tosHgE=
Subject key identifier: BA:38:CB:10:98:5A:6C:EE:04:8C:4C:FB:06:8C:2F:02:5A:83:E9:59
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0346B35A66B89DFE7F5300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2981857e-f286-3835-b24f-922838b9e135.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:46:b3:5a:66:b8:9d:fe:7f:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ff172293-fbee-4aaf-9a8f-e211ea20022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:73:11:ce:fe:f1:57:e4:69:6d:27:5c:e1:
80:74:7e:e5:bb:c4:27:38:d4:fd:1e:18:98:60:c0:
34:12:79:2c:d2:03:33:63:d4:38:2f:8c:c6:91:a4:
27:bd:81:99:c4:ac:3f:5e:56:57:d2:5e:de:01:15:
91:2a:88:41:06:2c:6f:aa:a9:a2:60:67:90:0b:36:
a9:92:0c:d5:7c:4b:3d:e8:7b:8c:ff:29:9d:e1:96:
fc:90:0b:2a:d9:4e:6e:27:2e:2c:48:04:c2:b0:bf:
50:a6:43:67:40:ea:5e:65:9a:3d:a4:12:35:3b:0d:
ca:0c:85:65:07:fa:59:64:57:7c:34:99:f1:2d:9f:
1b:a4:2d:c7:f0:5f:cd:c8:98:2d:01:9f:a6:a7:9c:
ab:02:25:bd:1c:02:37:0c:39:c9:bd:59:e6:d4:37:
02:d0:ff:6b:10:51:f8:93:6f:7b:0f:80:c8:d1:ca:
22:d4:96:52:2a:68:16:84:7d:e5:69:40:45:fd:fb:
c9:d5:fe:53:d9:d3:64:ad:d0:40:b3:9d:5f:78:89:
74:6d:01:7f:54:e0:00:47:80:9b:09:13:7b:3d:69:
0d:3c:0c:6e:6b:d3:1a:29:01:d8:a9:dc:c6:3c:5e:
bd:18:f6:08:5a:0a:eb:4a:28:a2:4a:b2:f7:92:d5:
6e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:CB:10:98:5A:6C:EE:04:8C:4C:FB:06:8C:2F:02:5A:83:E9:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2981857e-f286-3835-b24f-922838b9e135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:0a:7a:6e:20:26:2b:61:c1:f4:00:9a:20:a5:92:c2:df:ff:
42:f6:1f:f7:32:98:a0:1d:14:5d:91:fe:d5:74:cb:14:90:fd:
98:9a:f5:ea:98:35:80:00:fd:16:04:55:ed:e0:e8:c5:60:ca:
a3:5b:f8:12:7c:f3:c0:38:bb:f8:69:e8:6f:e0:f8:3e:0e:7f:
13:f1:bd:68:0d:df:e1:43:d6:d6:68:be:5a:7a:aa:cd:79:81:
77:aa:4a:7f:30:db:7c:07:1b:4b:91:b5:ee:df:8a:b1:02:93:
5d:4c:8b:e9:4c:60:c5:c3:e7:73:a6:5c:bf:ec:53:55:83:03:
5f:e2:99:bc:36:b6:44:ee:65:97:5d:3c:57:72:04:74:8e:e0:
6c:a9:d4:f6:4e:63:a3:3e:3a:a6:04:c0:fd:1f:c1:0f:54:63:
59:6c:8f:01:3e:64:56:d3:3a:ab:dd:05:22:74:be:8e:d3:e0:
83:d2:5f:6e:90:05:df:9c:0f:ed:df:47:94:07:37:3b:ae:24:
f5:5e:3b:b4:ec:c0:85:be:38:a8:7e:b9:d2:75:71:84:20:42:
9b:fb:51:33:d1:9d:ab:7a:e2:86:05:f6:0b:85:a1:9d:95:71:
61:3f:40:d1:59:6b:5a:1f:e4:ba:2b:2d:83:c5:14:cb:c8:8a:
15:b5:cf:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKA0azWma4nf5/UwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmYxNzIyOTMtZmJlZS00YWFmLTlhOGYtZTIxMWVhMjAwMjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42VzEc7+8VfkaW0nXOGAdH7lu8QnONT9HhiY
YMA0Enks0gMzY9Q4L4zGkaQnvYGZxKw/XlZX0l7eARWRKohBBixvqqmiYGeQCzap
kgzVfEs96HuM/ymd4Zb8kAsq2U5uJy4sSATCsL9QpkNnQOpeZZo9pBI1Ow3KDIVl
B/pZZFd8NJnxLZ8bpC3H8F/NyJgtAZ+mp5yrAiW9HAI3DDnJvVnm1DcC0P9rEFH4
k297D4DI0coi1JZSKmgWhH3laUBF/fvJ1f5T2dNkrdBAs51feIl0bQF/VOAAR4Cb
CRN7PWkNPAxua9MaKQHYqdzGPF69GPYIWgrrSiiiSrL3ktVu8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLo4yxCYWmzuBIxM+waMLwJag+lZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjk4MTg1N2UtZjI4Ni0z
ODM1LWIyNGYtOTIyODM4YjllMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcInMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADoKem4gJithwfQAmiClksLf/0L2H/cymKAdFF2R/tV0yxSQ/Zia9eqY
NYAA/RYEVe3g6MVgyqNb+BJ888A4u/hp6G/g+D4OfxPxvWgN3+FD1tZovlp6qs15
gXeqSn8w23wHG0uRte7firECk11Mi+lMYMXD53OmXL/sU1WDA1/imbw2tkTuZZdd
PFdyBHSO4Gyp1PZOY6M+OqYEwP0fwQ9UY1lsjwE+ZFbTOqvdBSJ0vo7T4IPSX26Q
Bd+cD+3fR5QHNzuuJPVeO7TswIW+OKh+udJ1cYQgQpv7UTPRnat64oYF9guFoZ2V
cWE/QNFZa1of5LorLYPFFMvIihW1z+E=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org