Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bc4f9a6-858c-33aa-846b-4d5a71de3b4a.roa
File: 4bc4f9a6-858c-33aa-846b-4d5a71de3b4a.roa (raw, json)
Hash identifier: RiGqTTivrXMMSVfD9/B7PQw0wGgwZih75hFSzuY3IoE=
Subject key identifier: 2F:8C:32:79:1B:FD:93:22:53:C5:9C:6F:1A:B1:CD:37:57:73:97:A3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1D277ED9F44BB747744180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bc4f9a6-858c-33aa-846b-4d5a71de3b4a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 172.253.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:27:7e:d9:f4:4b:b7:47:74:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=46834dab-62f2-44f1-beb1-65a3145d2a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:20:67:87:6b:77:ca:77:d5:47:d8:aa:00:
f7:78:d0:6d:87:ec:e2:58:f1:a8:0f:0d:d6:2e:7e:
70:04:79:d8:bd:ea:91:0b:21:16:54:9e:af:d1:69:
54:9d:bb:74:f1:88:c2:a6:72:e6:0b:f2:60:34:59:
61:aa:9e:0d:e8:e1:2c:48:f9:87:63:ed:62:9b:50:
0c:5a:df:ed:51:2e:c6:c9:83:4d:f7:f6:76:7a:35:
cf:53:66:3d:c6:4d:42:5d:8f:5b:92:9a:78:52:bc:
14:ab:9a:9e:ae:e3:75:9b:fb:25:d2:88:e8:39:2f:
45:d2:d7:b8:96:86:16:fe:c0:77:85:eb:10:f2:2c:
b9:65:0a:b4:33:04:13:e8:b0:d2:54:43:fe:e8:a8:
71:78:e4:08:7f:eb:e9:a4:fa:0b:04:30:73:c5:fd:
5a:0b:c1:ca:7d:cb:1d:c6:88:9f:d4:fe:62:e5:4e:
e5:49:cd:06:42:bd:d5:a5:a1:de:31:2c:b5:62:96:
b7:2d:45:bc:b4:9f:81:2a:a4:28:40:19:8e:52:fd:
2d:5a:e0:0a:77:f8:bd:66:8c:2a:9c:9b:91:95:ce:
ee:f9:be:65:d8:be:98:85:48:09:0c:ea:f1:45:dd:
49:ab:38:dd:e3:a5:0d:53:86:52:0c:c7:58:da:01:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:32:79:1B:FD:93:22:53:C5:9C:6F:1A:B1:CD:37:57:73:97:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4bc4f9a6-858c-33aa-846b-4d5a71de3b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:d9:df:d0:1e:c8:31:cd:61:84:75:cb:bd:33:c0:2c:e4:f2:
3c:8f:99:28:a1:47:89:43:cd:11:bf:d5:5c:72:41:f0:4d:a4:
56:21:24:e8:30:bb:79:4b:f7:cd:6a:0e:0e:2e:0e:8b:99:9e:
68:7a:05:d6:90:98:e9:36:dd:51:09:d9:03:b9:60:4c:69:c0:
0b:27:00:85:68:93:6f:89:c5:8d:33:e1:e4:7a:e6:83:8a:22:
1d:84:a5:ce:3c:f9:c9:12:ac:a0:fa:9f:47:9d:4d:50:07:88:
31:6c:10:36:69:00:8e:72:ad:7a:bd:68:4a:7f:9b:03:b8:a5:
a0:d2:05:db:a5:0b:a1:cc:b1:42:b6:47:ff:6c:1d:10:75:90:
60:69:16:40:1e:ee:1c:01:05:ff:fa:88:7d:27:65:9b:b2:84:
4d:04:9b:38:fd:39:42:e1:00:a0:e8:a8:df:81:43:d4:e9:7d:
bd:99:73:6d:1d:25:2d:5c:32:19:9f:e2:71:1c:01:4c:79:7a:
79:6e:be:99:73:ef:ba:c8:b7:76:ad:16:a8:53:c4:8f:ff:54:
f4:60:e7:ee:cc:97:05:a5:01:d5:cc:0d:48:6b:3e:b1:ab:8f:
8f:b1:3f:01:76:bc:57:d4:18:a7:7c:04:2c:cd:7d:cc:4c:ff:
35:23:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org