Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bbe9a2e-dff2-370c-9c23-3594fbb52d11.roa
File: 4bbe9a2e-dff2-370c-9c23-3594fbb52d11.roa (raw, json)
Hash identifier: JIurn7rGG7hWW/9bnc/8Z/8Vz0gpJgRRnhuyYM1jCS4=
Subject key identifier: 90:8B:B3:F7:AB:B7:31:3F:70:8C:1B:23:CB:1D:19:29:8E:F2:81:7E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FB09A0F2A3C11692F66B40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bbe9a2e-dff2-370c-9c23-3594fbb52d11.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:09:a0:f2:a3:c1:16:92:f6:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=069697cd-38bd-4d6e-8d87-0004e3754e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:c8:df:cf:72:81:29:fd:47:9f:8a:80:c3:
40:2d:05:3e:af:8b:c3:78:32:f2:22:bd:43:0f:37:
1b:76:05:23:bb:06:71:14:42:8d:fd:fe:0f:7d:8e:
0e:3a:08:38:54:4c:90:9e:fa:4a:57:52:6e:81:93:
96:29:fb:a5:f7:80:f5:71:6b:ba:58:5d:df:72:1d:
39:4a:60:e0:03:e0:9b:cd:af:d6:7a:b0:02:fb:fa:
3b:41:0e:9d:32:80:b3:bb:44:5e:cb:67:d9:71:97:
55:35:f0:31:81:8b:c4:2a:0c:54:68:e2:82:cb:22:
21:91:2b:d6:6a:0f:ce:13:8d:e2:49:60:8a:c7:b9:
b0:22:28:a8:d5:46:dd:7a:32:b1:f5:97:94:0e:47:
74:0c:87:73:0a:9e:99:bc:2c:3e:b8:03:4e:bb:f8:
61:39:b1:f9:72:23:df:b5:59:8e:36:b3:00:0d:52:
a8:be:38:e0:e9:9c:7b:b1:5b:00:3b:7f:3d:77:dc:
b1:0e:97:62:25:4a:0a:65:fe:dc:8d:3b:03:c5:ed:
66:af:f5:80:d9:c8:2b:37:a6:f5:9d:83:66:e7:2c:
e1:03:95:5e:3c:30:a6:e9:7e:4b:6d:74:e5:12:70:
57:30:d7:5c:0e:4d:ff:54:66:e5:6b:f5:13:7b:02:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8B:B3:F7:AB:B7:31:3F:70:8C:1B:23:CB:1D:19:29:8E:F2:81:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bbe9a2e-dff2-370c-9c23-3594fbb52d11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:ad:43:ae:cf:fe:ef:e2:2d:51:24:75:0e:ac:de:de:4e:15:
ae:b8:0c:5e:d3:55:43:37:b9:0b:a3:66:0c:08:63:0e:94:3d:
8a:23:88:86:75:4b:e0:b5:77:5d:44:8d:3c:7b:a5:a8:8e:29:
48:ff:ad:1c:d0:67:ec:b1:98:0d:7c:68:fa:c1:42:72:2c:09:
28:1f:6e:c0:a6:a2:d9:c7:d1:00:14:2b:f4:68:d6:ea:df:dd:
43:27:9f:a1:aa:e9:84:a0:b0:23:f4:ee:5a:e9:8a:7a:b0:1d:
d4:bb:2b:4d:a7:62:ea:4b:b2:0b:bb:e3:44:f4:1c:01:78:28:
a6:b2:3e:f6:03:23:a1:8b:3e:98:30:78:a2:5d:24:8b:1d:1b:
eb:6c:2e:d5:b5:4f:d6:d9:14:d6:a2:69:22:59:c1:ed:ca:a7:
45:cf:74:62:55:f6:6d:32:ac:e7:d7:b7:5a:89:9c:a9:2d:30:
e9:05:e5:dd:25:93:2d:99:eb:8b:db:0c:62:68:a6:21:aa:2e:
6b:4e:a1:e7:68:22:e0:77:5b:d5:fd:86:eb:51:43:26:3c:b4:
52:6d:4f:f4:f0:1b:ce:9f:e9:90:f4:45:3c:a9:45:d5:62:71:
1f:96:82:0e:e7:71:96:72:fe:d2:dc:48:66:66:94:6e:30:d5:
29:bc:54:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ+wmg8qPBFpL2a0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDY5Njk3Y2QtMzhiZC00ZDZlLThkODctMDAwNGUzNzU0ZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3/I389ygSn9R5+KgMNALQU+r4vDeDLyIr1D
DzcbdgUjuwZxFEKN/f4PfY4OOgg4VEyQnvpKV1JugZOWKful94D1cWu6WF3fch05
SmDgA+Cbza/WerAC+/o7QQ6dMoCzu0Rey2fZcZdVNfAxgYvEKgxUaOKCyyIhkSvW
ag/OE43iSWCKx7mwIiio1UbdejKx9ZeUDkd0DIdzCp6ZvCw+uANOu/hhObH5ciPf
tVmONrMADVKovjjg6Zx7sVsAO389d9yxDpdiJUoKZf7cjTsDxe1mr/WA2cgrN6b1
nYNm5yzhA5VePDCm6X5LbXTlEnBXMNdcDk3/VGbla/UTewIpIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJCLs/ertzE/cIwbI8sdGSmO8oF+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGJiZTlhMmUtZGZmMi0z
NzBjLTljMjMtMzU5NGZiYjUyZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+tQ67P/u/iLVEkdQ6s3t5OFa64DF7TVUM3uQujZgwIYw6UPYojiIZ1
S+C1d11EjTx7paiOKUj/rRzQZ+yxmA18aPrBQnIsCSgfbsCmotnH0QAUK/Ro1urf
3UMnn6Gq6YSgsCP07lrpinqwHdS7K02nYupLsgu740T0HAF4KKayPvYDI6GLPpgw
eKJdJIsdG+tsLtW1T9bZFNaiaSJZwe3Kp0XPdGJV9m0yrOfXt1qJnKktMOkF5d0l
ky2Z64vbDGJopiGqLmtOoedoIuB3W9X9hutRQyY8tFJtT/TwG86f6ZD0RTypRdVi
cR+Wgg7ncZZy/tLcSGZmlG4w1Sm8VBA=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:45 2024 by rpki-client on console-fra.rpki-client.org