Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42dbc9a6-2688-3a0d-9bf4-e00930656ad8.roa
File: 42dbc9a6-2688-3a0d-9bf4-e00930656ad8.roa (raw, json)
Hash identifier: vosOi31Ry9nHJLtYZJK2dSHTdMayOKy71NSV/cLOPaI=
Subject key identifier: E5:1F:94:83:28:D7:27:26:47:CB:54:BB:3D:16:C7:F3:F3:6E:A4:90
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A03CE71A618A2F17D650600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42dbc9a6-2688-3a0d-9bf4-e00930656ad8.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:03:ce:71:a6:18:a2:f1:7d:65:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=13df327f-8c86-415f-9fba-9405a308a7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:96:42:02:25:8e:6a:3e:52:a3:0b:db:11:
93:82:b2:2c:e1:c0:c1:06:96:d1:78:1c:ad:eb:da:
a9:c3:65:8a:97:4f:7b:a3:86:dc:84:cd:04:38:82:
7a:e7:93:b2:ff:5e:30:0a:3b:32:5d:94:42:c6:d5:
43:9a:76:b1:ae:7c:96:4e:11:b3:89:d3:45:f6:a6:
63:0d:a4:1d:aa:14:c3:03:8f:2b:34:34:ce:1f:c8:
6b:2c:af:fc:fd:11:95:91:19:5c:26:58:f8:48:7c:
7e:f7:57:46:c1:0c:f6:2f:f1:45:9e:72:a6:85:82:
73:dc:82:30:2b:80:c6:e2:13:4c:a3:f5:70:98:fc:
18:8b:80:e6:1c:05:75:ba:1a:28:52:e4:6a:41:03:
09:3a:dd:b4:3d:2a:fb:3b:dc:0b:4f:05:36:15:73:
f9:af:40:ad:24:53:60:56:41:a9:ec:46:c5:3b:a4:
5b:e6:8b:0e:ea:53:5f:d4:f5:3d:81:80:da:ee:96:
d7:71:49:a8:16:53:53:dc:76:a0:36:99:7c:0d:d9:
23:f6:69:39:62:cc:3e:90:2e:4b:ca:80:1b:31:be:
35:f6:cb:f0:7c:d1:1e:ff:7f:74:45:24:36:cb:eb:
d6:36:a2:21:f5:73:65:4a:1c:f8:2f:b8:28:3e:3d:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1F:94:83:28:D7:27:26:47:CB:54:BB:3D:16:C7:F3:F3:6E:A4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42dbc9a6-2688-3a0d-9bf4-e00930656ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:4b:0a:66:55:01:01:58:b1:50:60:57:72:7e:c2:fa:06:4f:
52:5f:cd:77:17:c8:84:5f:83:4d:84:99:45:2f:87:22:6b:78:
2f:13:18:3f:89:73:0e:de:96:48:77:96:54:00:0a:e4:fb:b8:
39:14:2d:51:67:56:fa:11:6f:38:87:1a:c9:aa:bc:fd:cc:3a:
f7:4c:9c:9a:56:d2:49:cf:8d:26:01:28:c0:2c:66:36:52:d7:
b5:df:da:3a:ff:98:fe:7d:75:57:9c:99:92:83:42:4f:7e:a2:
be:f9:f6:ae:8c:39:27:09:7f:47:a2:b2:1d:6a:98:7b:d3:11:
7d:fa:09:9e:f0:31:ff:41:ad:7c:ac:82:ec:dd:6a:f5:7a:d9:
4f:97:fd:c5:26:f5:04:8c:bb:2a:4d:a2:28:b8:17:15:e4:d4:
31:4d:7e:f7:13:7f:d0:06:22:aa:59:fd:cf:60:d3:1d:fc:7e:
41:7e:79:9d:dd:4f:21:44:7e:7d:05:02:09:9e:36:54:62:44:
dc:cc:b4:8f:b4:cd:c6:3c:15:e5:49:0f:3b:f7:4c:a8:ad:32:
7f:bb:02:a3:57:82:21:ea:3a:f9:f2:d6:91:e2:bc:fe:ce:a5:
f5:b0:68:58:4f:f7:3c:7c:c8:ed:80:28:1d:ae:0c:99:99:fc:
cc:30:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org