Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68fe7a60-9a3d-3637-8f45-7c7b17d0a0ab.roa
File: 68fe7a60-9a3d-3637-8f45-7c7b17d0a0ab.roa (raw, json)
Hash identifier: jbNAWcVdCZtHQDf1AmMr+ru9oTHXb7f5bQLS2iD1lEQ=
Subject key identifier: 51:38:62:BE:A4:CC:EE:DD:20:B1:D9:9C:BE:E0:77:5A:84:84:8F:38
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FB77ECCD0DBA5EFADDC9D0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68fe7a60-9a3d-3637-8f45-7c7b17d0a0ab.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:77:ec:cd:0d:ba:5e:fa:dd:c9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=3a22098e-9cab-434c-8fc6-015c123888dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:6f:24:8b:df:cb:a1:2f:d8:70:9d:ee:63:
54:ea:53:94:6e:a7:89:9c:2a:76:61:88:c1:9c:e8:
c2:29:3d:fc:4f:23:8e:79:e9:d3:bf:d7:3f:47:23:
c4:c5:a3:85:4b:61:e7:67:79:a8:f3:9c:6f:5b:6f:
05:b8:ff:a3:3c:db:5e:9c:bc:bc:51:ee:52:a5:8c:
19:8d:fd:cc:4e:f1:51:38:b9:46:4e:2e:fa:e2:b9:
d7:9c:20:f7:3a:40:cb:ae:71:e2:6e:ce:d6:6b:11:
50:89:06:83:04:f1:8d:55:54:3e:6d:61:ef:e4:b0:
82:5b:5f:f1:68:72:2b:1b:0e:73:56:f3:67:b6:3e:
f6:a4:a4:6a:1e:67:e1:53:e9:d3:bb:9a:b3:59:43:
55:a3:36:c1:f7:e5:f4:18:76:cf:18:6a:c8:d9:a1:
21:a5:6d:de:d8:b6:23:1c:28:53:9e:5c:bf:7b:25:
69:c5:0e:ec:b2:57:d9:d8:fa:30:f9:92:cb:00:5f:
e1:92:1e:09:d7:30:c5:52:d3:f8:6e:3b:b2:27:e5:
f1:96:b1:cc:01:0b:85:f4:eb:4e:9a:ff:82:66:ee:
ab:aa:e9:55:c5:10:c4:89:45:c6:79:11:6f:82:0d:
79:7e:16:60:92:94:3c:74:5d:03:d1:08:f5:db:19:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:38:62:BE:A4:CC:EE:DD:20:B1:D9:9C:BE:E0:77:5A:84:84:8F:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68fe7a60-9a3d-3637-8f45-7c7b17d0a0ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:d9:a4:03:6c:0c:1b:a1:03:b9:54:4e:a6:01:c7:c9:59:f3:
98:0c:c6:48:a5:0b:cc:25:70:60:0d:f6:27:22:b8:28:26:79:
14:76:de:dc:5e:84:5b:05:99:df:71:6e:93:99:0a:a3:65:86:
9d:09:f1:f8:61:68:c1:06:f6:a1:0a:b4:49:11:f1:d9:93:92:
07:a3:65:47:2f:a9:d0:b9:2e:d7:8d:bc:a7:34:fe:3f:0c:f2:
ee:8b:c3:6e:7c:4e:c2:31:a4:c0:41:06:85:07:58:1e:d8:c8:
b2:63:da:af:9d:2c:32:e4:76:dd:a1:d8:60:40:3f:80:0b:0f:
21:99:2a:0e:2a:39:d9:fd:f4:a7:28:1d:59:23:2b:b1:66:80:
77:86:e0:1a:6f:63:29:55:75:98:fe:d7:7d:67:b4:ff:51:25:
a4:76:4a:f4:dc:53:3e:69:c5:de:03:de:d0:d5:a9:44:a9:d1:
da:1f:67:08:62:a1:b1:5e:5b:b9:6a:4f:c3:9b:78:81:06:d8:
0c:26:b1:1e:b1:03:f7:13:84:5c:12:5f:fe:68:f2:dc:9c:77:
a5:95:67:10:00:34:8a:f3:55:59:12:5c:de:ca:e6:b8:85:f5:
63:fe:b2:5f:9a:22:10:32:e0:62:16:93:7c:b8:db:e6:d3:7d:
c5:71:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:39 2024 by rpki-client on console-ams.rpki-client.org