Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3fc4f294-d3f9-327d-b056-cdc0eb9b1c0d.roa
File: 3fc4f294-d3f9-327d-b056-cdc0eb9b1c0d.roa (raw, json)
Hash identifier: 1QYgv6wNWTEkNLnoSena7tM2nxsFDh+ATHuFjJGdnt4=
Subject key identifier: AF:C6:6A:0D:0C:82:E9:6E:10:86:B1:9B:FE:3D:8D:83:B4:4D:3D:86
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F9A4B7F8C8A435D5F25A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3fc4f294-d3f9-327d-b056-cdc0eb9b1c0d.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:a4:b7:f8:c8:a4:35:d5:f2:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=7b430c65-b007-4c57-9cb0-a46619f359f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:cf:df:b9:44:54:dd:fc:cc:b8:13:f5:a1:
56:09:4c:3e:7a:14:0a:b1:dc:2c:8f:ab:50:c3:de:
d9:96:68:f0:3c:79:26:48:65:ac:97:4f:ef:d0:47:
78:15:41:43:60:1e:8c:a1:7b:84:9d:6d:9d:6f:d6:
75:d5:65:c3:76:34:50:80:85:c2:b4:49:46:bc:43:
37:c6:7b:d2:fa:82:9e:a8:70:78:4e:f2:26:2c:f5:
ad:9f:61:63:1b:1d:94:ed:86:68:a4:03:11:cc:db:
10:1b:d0:86:ef:cc:03:71:1b:cf:b4:71:e4:cf:2e:
52:4e:73:d6:bf:62:c0:1b:88:6d:5a:70:76:c6:cb:
55:8e:10:52:b7:65:8b:b3:08:4c:82:cd:2e:24:60:
40:1c:18:60:4f:2b:82:bd:6e:ba:36:4b:2d:05:09:
37:c5:a3:8e:be:94:8e:ae:2f:b8:da:82:44:7e:8e:
33:75:5f:b3:56:5a:b0:3d:0b:3f:97:2d:ef:75:62:
4f:b8:db:30:d0:3e:1d:a8:c1:a9:79:d5:f2:ea:bc:
20:b5:d9:2f:44:27:cd:42:24:a4:9c:74:45:92:f4:
9b:9e:4f:3e:2e:be:18:f0:c3:25:06:14:ff:d1:d6:
15:e7:b1:2b:3f:43:ad:f0:e3:34:97:21:d7:22:ab:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C6:6A:0D:0C:82:E9:6E:10:86:B1:9B:FE:3D:8D:83:B4:4D:3D:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3fc4f294-d3f9-327d-b056-cdc0eb9b1c0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:8b:6e:e5:dd:18:64:e5:e0:e7:e2:bd:17:8f:c2:3f:89:c5:
9d:4d:da:87:6f:61:41:9f:97:fa:75:ac:b0:e0:80:d8:81:3e:
82:84:db:d0:23:80:ec:56:a9:75:59:c9:7b:6a:d9:51:58:f3:
c6:80:a3:ea:95:e7:59:fd:78:2b:f7:33:11:f8:14:75:0d:75:
fd:79:a6:b5:e3:1f:5a:b4:57:95:50:18:3d:1e:0d:18:4f:d9:
70:dc:36:fe:2d:be:6f:19:6d:65:fc:ea:6a:62:93:21:18:c8:
0e:d8:a6:3b:87:ea:55:f2:3d:a8:f8:59:a6:be:27:87:99:8d:
55:a4:22:9a:a0:95:f1:1f:e3:47:71:70:2b:e0:89:98:c5:1f:
0d:f3:85:8a:8e:e6:1f:fc:16:4c:06:8a:a1:ad:5a:f8:9b:40:
ff:80:96:5f:93:57:7a:b1:ef:b7:e0:48:ac:7a:be:b6:65:bd:
53:ee:3d:33:06:0d:a4:3a:b6:72:8f:b7:3b:81:0c:c8:3b:7e:
01:af:ce:74:b6:35:a0:6d:07:81:89:4f:63:8c:86:51:b6:c8:
d2:e2:48:c6:26:22:d1:a2:c7:12:14:6c:f6:79:84:b9:4a:86:
ba:b0:92:b6:8d:01:06:57:ee:08:b6:d9:e0:6d:92:a0:d7:fc:
81:48:99:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org