Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55b1246f-2d94-3c88-8203-db6a6793199c.roa
File: 55b1246f-2d94-3c88-8203-db6a6793199c.roa (raw, json)
Hash identifier: UNInffizYGlbTqbDLt7VG6eYllzUsGsVxhWiik8g50Y=
Subject key identifier: 70:F4:94:9D:8D:E9:B0:F2:10:73:2E:F2:02:39:F2:51:C4:CB:99:A5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1FEA2A20A700A2CF991900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55b1246f-2d94-3c88-8203-db6a6793199c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1f:ea:2a:20:a7:00:a2:cf:99:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5933befb-32e5-437c-8882-22be799560dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:25:b9:de:b4:0a:2f:49:29:94:0b:ff:9c:
2e:c0:db:dd:dd:3e:ca:48:a3:34:db:ac:01:df:db:
ca:2b:88:a8:f0:a7:d6:66:d3:95:cc:94:e8:30:a3:
f6:99:ea:22:87:49:87:38:35:b1:54:82:a6:45:c6:
62:f0:4f:d7:00:a5:08:fb:8e:bb:cf:6d:bd:42:84:
54:12:db:93:b5:21:27:21:bf:cc:42:03:30:2a:0e:
e2:31:4e:95:0a:ce:e3:19:e6:02:8a:69:4f:ac:a0:
49:0d:a5:08:4c:50:64:1e:73:ee:54:20:93:de:75:
c4:4e:2e:c4:8c:0f:3e:d1:06:16:56:30:e2:2c:b7:
34:65:6e:b8:3a:e7:d3:c0:79:ca:f4:97:25:5f:ec:
e0:81:7a:37:44:df:0c:70:38:61:34:b4:c9:2b:65:
32:db:d8:81:6e:dc:09:6b:24:ac:33:3a:d0:27:ef:
81:85:e5:bf:3b:4b:d5:bb:44:56:f1:d9:7d:e9:5b:
6b:a5:3b:bb:8a:02:04:87:f3:91:73:03:53:c3:3e:
7e:10:5c:d3:cb:4a:a3:d0:85:06:9a:03:bc:b7:ba:
18:7b:86:ab:03:ab:1c:5a:12:3a:b8:9f:b5:8e:01:
5b:a6:c6:bd:40:88:b7:d6:8a:b3:bf:2f:60:d9:93:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F4:94:9D:8D:E9:B0:F2:10:73:2E:F2:02:39:F2:51:C4:CB:99:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55b1246f-2d94-3c88-8203-db6a6793199c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:26:fb:73:1e:c7:95:39:7a:e6:94:d1:40:a3:4a:af:ed:af:
4b:63:b0:7e:3c:c3:32:23:65:5c:46:df:a6:b2:44:16:a4:c3:
d4:5b:c2:68:c5:a5:b3:5f:5a:56:e0:71:47:98:e0:dd:7e:f7:
34:00:36:d8:d0:74:f8:66:55:a1:ab:f5:f8:7c:3d:bb:b7:1d:
fc:0e:b7:b7:4a:6a:76:3c:13:03:21:e1:06:d5:c3:fb:2b:a7:
03:af:ec:22:0e:a2:73:79:4f:5c:cc:62:5b:70:15:bc:d3:43:
96:d8:2c:51:b0:8f:60:ba:e2:c7:76:2b:f7:96:9f:c8:0a:86:
74:42:1b:8e:ab:fc:d2:0f:32:c0:eb:aa:af:aa:db:4d:f6:78:
8e:e5:41:84:3f:6b:29:73:43:68:5d:a7:5e:01:c7:ce:a7:3d:
07:3f:84:1e:8a:b6:a4:e7:7c:76:02:ce:be:82:fa:29:49:df:
82:b1:21:0b:04:ab:b4:84:9b:50:ce:9e:dc:00:9f:b7:c5:95:
fd:79:8f:87:be:1e:4a:2a:f7:ee:91:19:db:3e:bd:d1:88:74:
bb:f6:00:17:52:63:6b:a8:fb:1a:87:ac:de:a1:bb:18:20:68:
07:73:70:86:7b:91:d9:af:87:79:88:0a:74:28:a3:9e:2d:99:
0d:5b:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:45 2024 by rpki-client on console-fra.rpki-client.org