Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f97dd23-78de-392b-8576-59d84c84939c.roa
File: 2f97dd23-78de-392b-8576-59d84c84939c.roa (raw, json)
Hash identifier: dQG6mFA7FUJv698dyCJu2/vNuMN1+V191xjIVJQjEeQ=
Subject key identifier: 86:05:A5:D0:FE:F7:A2:24:8D:D1:6D:84:0B:1F:A1:DA:3C:0A:63:1C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1411D6613A58BA8E5A1D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f97dd23-78de-392b-8576-59d84c84939c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:11:d6:61:3a:58:ba:8e:5a:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=17c17839-d7ac-4348-be23-a9c47e83915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:55:1b:28:f0:4a:99:43:51:ee:b7:86:aa:
9e:50:38:b6:2c:32:af:2b:fd:cd:f9:d7:32:ba:0a:
cb:20:ad:55:6e:d2:7c:dc:b8:41:34:4a:35:99:10:
07:dd:c2:a7:10:2a:01:a1:29:21:a4:86:a6:0d:27:
6a:38:6d:cd:8d:0a:56:34:81:b0:34:05:1f:67:79:
5d:77:5e:38:94:b0:f2:5b:68:ef:1f:37:e7:08:44:
a4:04:ce:65:4f:e9:eb:d8:76:5d:a3:84:1a:6c:a8:
cb:ab:c8:33:34:c6:62:91:f5:04:a5:1c:cf:76:95:
f2:ab:fa:1e:e8:07:9d:65:00:81:f9:07:77:1c:bd:
20:5a:d4:b9:8a:d8:22:fe:4f:c1:68:8b:c2:44:41:
2d:8a:33:fa:d7:fa:17:80:0c:d5:62:79:08:01:65:
28:66:d9:c4:12:b9:d7:cd:b8:7a:76:d5:ea:ec:73:
da:bb:d9:ac:fa:2d:66:e5:b1:cb:e3:cd:46:0b:e9:
33:97:06:ec:70:bd:67:30:6d:12:42:6a:37:2e:32:
7a:6a:ae:2e:f5:09:11:9f:95:a7:fb:ac:0a:4f:27:
96:0c:e3:d3:da:ca:c4:b6:59:e0:7f:e1:f8:05:a7:
1d:dd:b6:97:cb:30:ae:98:69:93:3c:c9:3b:91:28:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:05:A5:D0:FE:F7:A2:24:8D:D1:6D:84:0B:1F:A1:DA:3C:0A:63:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f97dd23-78de-392b-8576-59d84c84939c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:53:f9:a8:32:4c:05:b4:d2:88:a4:95:05:e5:be:82:9d:a3:
72:ad:93:94:9e:e6:59:04:be:87:14:2d:79:34:2e:c5:4d:31:
de:09:2e:34:68:23:aa:6b:d6:d6:e2:dd:ef:1f:2e:80:a8:28:
a7:60:9a:43:0f:9b:6d:08:48:e6:4f:02:b4:42:ae:b5:17:99:
9a:24:f0:64:e2:e9:84:41:24:eb:65:f0:16:9f:c9:9c:fb:9b:
b4:06:8a:ae:9a:dc:6d:20:b3:86:37:8e:e7:03:f3:20:5d:8b:
97:85:b7:79:27:1e:f0:21:25:04:5a:fb:17:52:99:b1:da:e9:
84:60:21:0c:dc:be:f0:a4:33:45:df:ed:e2:f3:51:45:63:78:
f4:f8:b2:b4:ca:6b:3b:88:df:cc:71:07:b6:c0:da:d6:dc:2f:
b4:5c:82:2f:d6:7c:e7:be:20:67:6d:26:a2:de:73:3b:5f:21:
2f:2b:18:75:88:8b:0d:1e:ae:26:81:d4:eb:e5:a5:88:2c:67:
a6:63:50:65:a7:db:8a:c8:de:28:04:e3:f4:cf:d3:66:5b:98:
b8:b9:fb:54:6f:6d:6e:77:a0:cf:24:16:8a:90:56:93:b5:63:
09:f7:a7:b6:ef:af:40:25:76:b0:a3:aa:6a:f5:59:cd:53:c1:
d0:7c:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:13 2024 by rpki-client on console-ams.rpki-client.org