Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f28ffe6-767f-3d0b-b4a7-6301f49ac56f.roa
File: 3f28ffe6-767f-3d0b-b4a7-6301f49ac56f.roa (raw, json)
Hash identifier: ir8SPp+35GSnJD19Joof9KbOGWVHosS10Xc985l8xhk=
Subject key identifier: 9D:7A:89:5A:2B:72:FF:18:FD:85:95:AA:EA:82:3C:5F:10:D3:1E:6B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0921CE994BBEB341C20F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f28ffe6-767f-3d0b-b4a7-6301f49ac56f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:21:ce:99:4b:be:b3:41:c2:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=303b0111-ab51-4c4d-8948-e1a8e6d03509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:71:75:2b:9f:34:e4:fa:32:64:d3:96:2f:
39:89:a3:78:d3:6a:3c:19:65:e8:69:e6:07:0d:1b:
71:71:62:13:20:18:1e:5f:18:55:24:af:96:21:aa:
de:a5:9b:a7:6e:65:41:0f:59:69:80:d3:d7:bf:e9:
aa:28:65:5c:4f:1b:9b:ae:4d:7b:0d:a8:b2:22:d8:
a5:31:1d:4e:34:e6:eb:89:44:ba:4f:30:50:09:f9:
7e:12:da:7d:4a:71:9e:0e:d5:aa:40:5f:94:41:50:
85:dd:e2:87:19:6a:29:2d:09:bd:19:8d:87:47:2e:
d9:45:a2:ab:5f:da:b5:68:11:be:74:d6:3e:ee:74:
08:ab:79:d3:8d:4b:4b:e4:93:bb:c8:9a:25:f2:a6:
1e:3b:1a:f9:a1:ee:ed:e3:11:5b:76:99:06:bf:32:
71:39:9c:07:7b:e7:e1:97:cd:73:31:f5:2c:cf:89:
57:12:d5:45:40:f9:4a:65:f4:b0:2e:8a:bc:65:ed:
07:5f:f1:43:1d:07:10:4b:45:21:84:73:08:77:f2:
43:f8:59:e1:eb:39:fa:5b:cf:3f:68:f9:9e:f3:0e:
75:75:45:d1:c1:15:5a:5c:e0:f9:da:3a:a3:56:cd:
fc:e5:30:5e:9c:5d:60:fb:0e:48:6d:f6:7a:a3:8c:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:89:5A:2B:72:FF:18:FD:85:95:AA:EA:82:3C:5F:10:D3:1E:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f28ffe6-767f-3d0b-b4a7-6301f49ac56f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:73:88:5a:0e:1d:1a:62:df:4d:6b:9e:90:09:82:89:19:55:
d1:c2:9b:04:c8:5f:d3:09:bf:04:41:10:9b:56:56:78:57:4c:
f0:57:47:9d:ae:bd:63:64:04:60:2d:f2:7b:37:f7:af:9e:5c:
e2:1f:be:23:c1:dd:82:08:33:86:d8:bb:25:c8:63:45:04:36:
22:bb:c7:ca:9a:95:7b:6c:8b:48:1c:6e:79:41:ad:d5:ea:0c:
44:06:90:f9:2d:cd:e1:0e:6f:4a:ab:ef:6a:37:aa:91:e2:b2:
5a:11:3d:36:ec:f0:b7:4a:3b:65:31:e4:70:b6:a7:ef:f7:7b:
3b:01:7d:16:f3:c4:81:df:47:8b:4e:45:45:d7:4f:13:96:3c:
59:16:59:59:4d:a4:86:19:b6:91:0d:f3:cd:fe:38:19:b1:21:
54:1b:49:a8:f0:1c:ff:f9:77:75:04:59:82:d5:7a:7a:ce:b5:
2c:e6:57:c2:44:60:8f:12:61:ec:8a:7b:05:9c:f0:d8:1b:9e:
43:93:81:7a:44:fa:34:02:61:99:09:1f:2a:3c:63:dd:06:5a:
52:71:ec:d2:de:66:ac:f0:29:c3:8e:d9:0b:a5:88:75:6a:ce:
51:d3:38:a9:ac:db:32:25:6d:ce:bc:fc:77:ce:ce:dd:a4:77:
38:c0:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org