Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/446367d0-153c-386c-9c9f-2b00747b61e4.roa
File: 446367d0-153c-386c-9c9f-2b00747b61e4.roa (raw, json)
Hash identifier: U0v6/XndKyKqgSg2NwA9EHAAy8fQSWt4lrrTK/0m7cA=
Subject key identifier: F4:2D:F0:A5:7D:0D:4D:1A:F1:9A:09:90:45:CB:25:6C:B3:0B:EA:92
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EE67C5F8A21E416FA46DC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/446367d0-153c-386c-9c9f-2b00747b61e4.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:67:c5:f8:a2:1e:41:6f:a4:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=af407c5d-380c-4744-85d3-ba9f0f6afa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:7f:7f:cf:d9:1b:53:97:a1:45:a3:31:19:
9c:97:20:e3:c0:b7:33:f2:2a:51:0d:dc:fd:d5:d5:
ee:bc:cd:8e:99:a6:73:6c:ff:0b:b8:88:b5:81:9c:
7f:a2:4b:d1:ee:78:af:f6:5a:69:26:33:55:18:dc:
34:a1:8c:d8:28:e0:bb:60:28:ee:8c:32:87:f7:fd:
3d:a5:99:45:a6:7c:b7:14:35:fa:2d:33:d9:17:28:
bc:b5:b6:ac:15:94:8f:a6:b6:3e:fd:9c:91:3f:f8:
81:2e:cb:6a:77:ee:f5:ff:9a:8b:ec:d1:2b:df:07:
b4:9e:de:8f:26:ec:94:1a:14:23:c3:98:24:65:ef:
c6:a8:a1:e9:58:87:70:0c:a5:1e:d8:5a:75:c2:f7:
be:2e:0e:33:2b:49:22:3c:3e:c0:3b:bb:91:95:f3:
e4:2a:0e:30:97:e3:11:7b:32:5b:72:ce:24:f9:c8:
ac:97:82:b1:45:84:89:10:ae:4f:68:4d:94:31:7b:
52:4d:9b:dd:9a:27:85:6d:f4:70:f4:85:17:64:23:
85:74:c4:fb:87:d2:bd:77:74:e6:26:58:b7:6a:06:
c8:43:5b:2d:f5:fb:e1:d8:e1:b8:de:3e:1d:d1:02:
97:49:45:46:7b:6b:47:91:9e:59:60:d3:95:68:a3:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:F0:A5:7D:0D:4D:1A:F1:9A:09:90:45:CB:25:6C:B3:0B:EA:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/446367d0-153c-386c-9c9f-2b00747b61e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:b7:40:dc:27:a0:88:8d:07:d8:7b:be:ca:01:33:e2:8d:af:
c6:72:d0:ef:98:4b:1e:14:54:85:e0:29:30:cf:fe:72:ed:77:
3c:7c:2e:b0:d5:5a:95:43:59:3b:d3:cf:d5:c4:a8:64:9c:c1:
a2:29:e1:c3:ed:46:7f:d4:a5:e0:60:5a:3a:a9:a0:a2:96:7e:
93:d2:91:42:ef:86:50:95:70:cc:be:c8:7f:6c:3e:c8:69:07:
7f:e1:b5:88:0d:48:11:a4:6f:4a:bf:eb:e2:b7:17:f4:38:f0:
2e:72:f9:de:0b:76:e1:da:be:a1:ea:cd:6a:2e:af:6d:9b:fa:
b3:e8:15:54:39:23:a7:be:34:7f:c2:57:12:36:7d:92:b6:6e:
08:94:a9:d1:68:d1:75:3b:b2:ab:25:fa:97:2f:c8:d9:10:be:
2e:76:ac:a6:c0:01:19:f2:0f:04:a1:9f:cb:b9:ec:af:0a:83:
58:a0:d3:69:4f:b5:b6:dc:20:6c:20:5a:30:d2:fc:98:35:8e:
3a:e6:a1:5a:9e:09:a3:0d:f3:6d:d0:eb:85:3e:63:d8:9c:66:
5e:71:de:23:20:c8:db:27:3c:14:3c:0a:31:c3:06:84:ed:c6:
a6:bd:d3:b1:60:a9:ac:ab:0a:db:56:64:c4:f3:63:b1:f2:c4:
ec:77:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org