Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8eb6c438-9148-3762-8c15-87b72fa98e6b.roa
File: 8eb6c438-9148-3762-8c15-87b72fa98e6b.roa (raw, json)
Hash identifier: hx6DNOv9eLZWQinEkIt6Oij22YBdQrZTp2TW4GkV0Wk=
Subject key identifier: FF:B8:A1:22:4D:4E:EB:C9:A5:17:6A:0F:94:43:1A:BF:3B:CE:F1:5C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F17135B85BF005DC5994C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8eb6c438-9148-3762-8c15-87b72fa98e6b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:71:35:b8:5b:f0:05:dc:59:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=de552096-e63b-43bc-918a-b0de5ac2b831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:11:bb:06:40:af:a4:30:e8:2b:36:6b:7a:
30:c0:6d:a4:5c:b6:86:15:1e:15:8e:0f:c0:80:73:
5b:c4:df:97:1d:cd:39:92:4c:73:d3:e9:97:00:da:
6c:e8:a8:9f:30:c6:46:17:74:60:45:d6:ab:bb:93:
77:6b:11:f9:fe:6a:8b:02:d0:e4:bd:8f:d3:bc:dc:
55:d7:ca:7b:a9:03:b0:9b:2f:03:9d:d9:74:c9:f7:
33:e5:23:2f:87:30:52:be:ca:9b:dd:38:30:cf:71:
33:56:c0:a6:bc:72:8d:ab:4c:0d:1b:4f:de:e5:75:
db:a8:29:e2:a4:17:82:d2:af:64:68:86:e5:dd:fc:
02:9c:a4:7b:14:04:fe:dd:76:58:fe:b4:61:5b:cd:
29:3f:e5:ea:4f:b4:61:12:90:d9:f6:2e:c8:47:97:
89:ee:1d:c4:27:e4:80:c0:4e:fc:3f:03:ca:3f:19:
ff:fb:38:80:0e:42:94:f2:01:35:25:51:f1:fe:5c:
34:68:bc:5e:18:55:97:78:a1:90:5d:27:34:ff:f5:
25:29:af:c1:38:be:e4:fa:6c:56:71:65:10:65:96:
b9:f8:47:63:ff:6f:cd:5e:0a:76:81:e6:93:51:c4:
89:c2:fa:32:08:da:6c:cf:06:75:07:4e:42:36:f3:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B8:A1:22:4D:4E:EB:C9:A5:17:6A:0F:94:43:1A:BF:3B:CE:F1:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8eb6c438-9148-3762-8c15-87b72fa98e6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:85:4f:65:ba:9b:ac:da:e4:a3:af:69:ec:2e:3d:f2:67:11:
c7:c0:63:b1:fa:ce:10:ca:15:7c:61:5e:95:ca:17:f5:81:82:
5f:78:44:e3:b8:11:39:40:5d:61:79:6b:c7:c3:35:65:83:2d:
e3:b9:39:b5:d5:4c:af:7c:49:08:68:fe:4a:84:71:66:9c:42:
8a:83:be:4b:00:72:5b:c4:1c:56:79:00:ab:76:6d:fc:d1:d2:
7c:a8:88:7d:07:a3:21:84:b4:84:5d:9b:60:a2:df:af:6e:48:
e4:f1:ab:ff:fd:fa:11:99:7b:83:f3:f8:e8:27:36:7c:a2:64:
e4:6f:1f:94:ff:52:96:05:12:09:ad:de:40:0a:29:7b:ca:cc:
18:39:b4:de:e5:41:8b:41:6c:9a:70:9a:bb:05:47:92:c2:3c:
43:c5:84:ac:f7:d5:94:58:21:f9:e0:a1:dd:1c:0c:18:ed:dc:
4b:d9:72:82:a7:31:0f:b9:13:cf:b3:b4:69:b7:be:50:82:ef:
65:e4:81:0d:d6:d6:ac:c2:ae:c1:aa:27:af:f6:1b:76:70:36:
8f:20:68:3e:ff:c6:61:4f:1c:9d:5c:ac:c1:b4:c4:ae:9b:c5:
7e:d2:07:8f:84:da:de:c1:57:79:17:08:71:6f:20:3c:ad:35:
70:9a:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:40 2024 by rpki-client on console-ams.rpki-client.org