Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8642bb87-4d60-3703-a307-2e6ea468a831.roa
File: 8642bb87-4d60-3703-a307-2e6ea468a831.roa (raw, json)
Hash identifier: 6j/9++9DMY6IXasZDMNGH6xl0z+Bn99PMeskYn8ZTLU=
Subject key identifier: CF:79:27:2D:28:B3:EA:3F:06:24:07:57:EE:B7:F2:F1:03:F9:CC:FF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FB2DADB03AE6727FA7F600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8642bb87-4d60-3703-a307-2e6ea468a831.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:2d:ad:b0:3a:e6:72:7f:a7:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=48686d69-6a78-4469-90bc-b81fefb04003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:b4:fb:a9:c2:90:4a:46:29:28:66:41:e4:
d1:98:20:8d:71:b6:ad:9b:63:65:22:9a:8d:f5:5c:
3e:05:e5:2d:77:a4:cd:b6:33:8b:84:ec:84:64:c8:
9c:ba:1b:c1:76:74:a5:63:0e:97:58:56:81:55:4c:
fd:84:51:12:8f:02:1f:81:b8:d9:08:ef:13:83:1d:
ea:10:5f:16:26:5d:87:3d:a2:cc:04:f6:44:3b:f4:
2e:9d:a7:06:c5:84:cf:2c:4d:a3:1c:9b:21:67:f6:
04:55:37:97:a5:89:16:a2:75:46:40:68:0e:e0:54:
b1:e1:fa:1a:d8:d0:cc:ec:7f:55:3f:d2:a5:63:1e:
f9:c9:c9:68:bf:f6:40:85:b7:c5:e4:f0:c9:f4:cf:
5a:34:d2:8f:de:5c:d1:fc:81:a9:95:b0:a7:7d:e5:
92:88:da:a5:86:09:50:d9:03:f1:1d:ac:4b:55:2f:
ad:b8:f8:8f:c2:8f:02:a8:4a:57:31:d8:ba:d7:6a:
94:78:63:f4:94:28:82:ec:81:1c:2d:54:f5:20:da:
fb:9f:0a:02:a7:b5:84:99:84:a3:2e:0b:43:e0:58:
6e:fa:48:c8:04:ed:38:18:7d:90:4a:eb:2e:f0:63:
f2:f6:d3:8f:5c:05:c0:15:49:e8:0f:0a:18:7d:78:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:27:2D:28:B3:EA:3F:06:24:07:57:EE:B7:F2:F1:03:F9:CC:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8642bb87-4d60-3703-a307-2e6ea468a831.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:a9:89:c5:68:42:ac:5a:6e:bb:08:82:4b:ee:d5:bd:98:29:
78:c9:96:91:ae:2a:6c:4a:45:5b:7d:72:b5:2a:a2:56:1a:41:
c9:29:e6:a0:14:21:59:55:b0:61:35:8b:e3:ec:f6:79:56:ab:
2b:d9:b7:f8:20:a4:bb:46:7e:7d:a7:0d:ae:30:7c:de:ac:a0:
e0:21:dd:f2:b8:97:53:7d:9d:af:c4:da:4a:b9:7e:31:b6:70:
1c:87:6b:87:84:c8:46:55:f2:d3:a3:be:15:f9:47:b0:7a:f3:
2a:15:2e:62:ca:2e:06:b3:a1:6d:ad:f6:3a:5e:88:78:4b:f7:
7c:92:4f:51:3f:55:ac:f9:f2:d9:bd:77:b1:dd:cc:2f:23:3f:
52:bd:4d:72:96:0a:58:89:ab:b3:3b:2a:e4:07:b4:2c:6a:1c:
be:7f:d2:3a:c2:55:c7:24:17:bf:c6:3e:84:e3:c5:68:a1:61:
4c:05:cd:3a:9c:0e:80:ec:db:a8:a8:60:91:06:23:d5:b2:28:
2b:e9:1a:59:a7:ac:16:ee:f2:e4:32:b1:47:62:ab:95:d3:4f:
3d:5c:d8:95:81:24:72:45:ef:38:90:0b:bb:11:61:d5:4f:5b:
d3:c0:cc:67:41:b9:fc:2d:62:fa:db:99:d1:57:c6:57:ce:08:
67:2e:84:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ+y2tsDrmcn+n9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDg2ODZkNjktNmE3OC00NDY5LTkwYmMtYjgxZmVmYjA0MDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4+0+6nCkEpGKShmQeTRmCCNcbatm2NlIpqN
9Vw+BeUtd6TNtjOLhOyEZMicuhvBdnSlYw6XWFaBVUz9hFESjwIfgbjZCO8Tgx3q
EF8WJl2HPaLMBPZEO/QunacGxYTPLE2jHJshZ/YEVTeXpYkWonVGQGgO4FSx4foa
2NDM7H9VP9KlYx75yclov/ZAhbfF5PDJ9M9aNNKP3lzR/IGplbCnfeWSiNqlhglQ
2QPxHaxLVS+tuPiPwo8CqEpXMdi612qUeGP0lCiC7IEcLVT1INr7nwoCp7WEmYSj
LgtD4Fhu+kjIBO04GH2QSusu8GPy9tOPXAXAFUnoDwoYfXj8+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM95Jy0os+o/BiQHV+638vED+cz/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODY0MmJiODctNGQ2MC0z
NzAzLWEzMDctMmU2ZWE0NjhhODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcKEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGpicVoQqxabrsIgkvu1b2YKXjJlpGuKmxKRVt9crUqolYaQckp5qAU
IVlVsGE1i+Ps9nlWqyvZt/ggpLtGfn2nDa4wfN6soOAh3fK4l1N9na/E2kq5fjG2
cByHa4eEyEZV8tOjvhX5R7B68yoVLmLKLgazoW2t9jpeiHhL93yST1E/Vaz58tm9
d7HdzC8jP1K9TXKWCliJq7M7KuQHtCxqHL5/0jrCVcckF7/GPoTjxWihYUwFzTqc
DoDs26ioYJEGI9WyKCvpGlmnrBbu8uQysUdiq5XTTz1c2JWBJHJF7ziQC7sRYdVP
W9PAzGdBufwtYvrbmdFXxlfOCGcuhMI=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org