Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5277bcf6-dadc-3010-b121-ec4f5496d472.roa
File: 5277bcf6-dadc-3010-b121-ec4f5496d472.roa (raw, json)
Hash identifier: ghMNCaEvNYO2G/J5c94ydGCn0hKyE65f0Wg0Q3t13C0=
Subject key identifier: 32:B2:27:24:24:DC:F0:22:FC:7D:28:05:9A:51:AA:79:31:AE:5C:7C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F9CAD886AAC7B938C7A400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5277bcf6-dadc-3010-b121-ec4f5496d472.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f9:ca:d8:86:aa:c7:b9:38:c7:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9bfbf375-622c-4b3f-8df8-082e4d49a164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:14:1d:29:91:a3:5f:e0:4c:c6:a0:a2:69:
97:79:ce:76:ed:cc:c1:f2:03:23:55:fc:78:39:8e:
c6:b3:9d:a2:4c:ec:fb:cf:ec:c4:26:81:0b:21:52:
63:02:cf:cc:81:94:b7:54:d2:86:bb:0e:dc:a4:92:
81:70:2e:83:c9:9d:78:a8:bd:50:43:48:07:0b:ec:
2e:e5:d3:21:57:ff:4c:0d:e8:1e:4e:d6:d2:86:e1:
1e:27:b3:79:f1:68:38:8e:ea:e1:a8:ca:41:fd:c8:
8f:a7:91:6a:77:32:14:42:a2:39:b4:05:de:cf:48:
7b:28:21:28:c4:02:78:65:69:4a:27:8a:b2:51:c0:
47:b1:58:91:12:f2:02:06:fe:5a:f1:63:96:50:44:
74:f9:39:3d:37:a2:6b:40:d5:15:a6:66:16:3d:d6:
44:fd:37:04:87:ca:a8:bf:f3:3c:22:84:6b:ed:fe:
06:31:f1:8d:20:52:4c:0f:b6:a5:26:c3:10:f7:74:
f2:7d:3e:e5:e5:3e:43:55:d6:15:da:46:f0:ca:d5:
ee:df:70:71:e4:14:d6:85:70:01:75:8e:5b:f0:43:
53:db:e9:4b:d5:9e:54:55:bd:5a:57:62:9b:a3:99:
6d:6b:90:03:7b:10:de:43:17:d0:7a:78:f0:2a:92:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:27:24:24:DC:F0:22:FC:7D:28:05:9A:51:AA:79:31:AE:5C:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5277bcf6-dadc-3010-b121-ec4f5496d472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b5:6e:7f:48:f5:7d:67:15:27:94:2c:2e:bc:12:a0:a0:6d:
30:fe:4f:78:53:4d:11:1a:e5:e8:8e:66:b5:35:6e:b3:23:18:
41:5f:fe:f6:ec:77:35:a3:8c:31:c1:6f:82:e6:f6:7a:36:e2:
dc:90:0e:af:16:6c:82:f5:bc:74:70:9d:22:a4:2c:06:6f:a4:
f9:d0:07:71:a2:32:af:e8:77:88:cf:7c:d9:54:a9:5c:69:6d:
12:73:bd:c6:32:82:fc:e5:8d:08:bb:39:cc:05:e3:b5:59:ec:
06:87:4e:ef:f9:d7:7d:72:2d:7d:06:8f:74:40:dc:a7:83:cd:
19:91:f6:ed:3b:2b:04:d5:cc:aa:f1:72:53:f9:bf:47:90:2c:
54:37:55:24:16:be:04:5c:34:bf:f9:36:7a:7b:16:25:69:18:
29:10:8d:30:bb:c2:7f:45:e6:65:55:8d:d8:c5:42:98:05:e7:
81:3e:80:9b:1b:24:ea:37:53:c0:39:a9:7d:18:72:80:3b:7c:
77:87:28:8e:54:83:6a:c4:88:29:11:c8:41:9a:6a:41:d6:7f:
2d:d8:b2:d0:25:73:d3:9e:27:92:3f:ba:28:86:17:18:6e:af:
18:0e:78:02:61:de:62:86:17:2b:10:39:96:48:7e:a9:57:90:
73:17:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:23 2024 by rpki-client on console-fra.rpki-client.org