Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a290faf7-0923-3d7a-ad08-3cdc127e1433.roa
File: a290faf7-0923-3d7a-ad08-3cdc127e1433.roa (raw, json)
Hash identifier: F+FPG8o7yFEoemD4Jpg8F/x7ru7rsvmn2NzTxyeCK7o=
Subject key identifier: EF:16:3E:3A:5A:6E:4F:10:89:26:5D:4E:39:97:CA:45:1D:EB:FE:1B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A2265389D04E71B6D49D300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a290faf7-0923-3d7a-ad08-3cdc127e1433.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:22:65:38:9d:04:e7:1b:6d:49:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ed31402d-8977-4708-ac93-0ed333dbf629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:91:56:78:0d:1d:58:88:a8:28:de:06:13:
0d:06:27:c2:ee:45:c6:72:ad:a1:11:4d:31:56:00:
48:70:83:31:b1:f7:ed:ba:d0:46:fc:ab:2e:b3:b3:
c0:3b:a2:d7:e8:a4:f0:f2:60:95:67:f4:28:44:79:
07:8e:f4:46:45:5f:bf:6a:1d:62:3d:da:4c:19:21:
61:43:57:aa:51:7c:27:f5:33:b6:d0:69:09:6a:4f:
fa:ba:4f:9b:e0:a3:98:88:e8:30:e0:49:0d:e3:cf:
47:2f:06:ba:c3:27:99:8b:c3:3e:cf:df:d5:3b:c4:
ec:a2:dc:e2:2b:a4:34:f1:91:d9:34:2a:f3:56:03:
ab:1f:48:b7:27:48:f6:93:cf:ec:f3:74:f7:49:be:
89:ba:ae:3b:4a:07:38:77:ce:72:e3:03:e7:04:04:
f1:42:0a:46:f7:48:fd:81:06:6e:b3:6d:3d:bd:b9:
e8:19:24:f2:f9:54:8c:64:b3:83:53:ea:cf:34:5c:
5a:99:f8:56:de:c7:50:5e:57:24:74:8f:b8:e2:c2:
a5:7e:16:55:d1:df:54:38:ec:9f:18:92:e1:3f:1f:
7e:e4:46:57:d6:35:b8:80:25:c8:c2:c5:92:60:97:
4b:4a:fe:c2:af:fb:9c:88:f6:30:30:c6:00:f8:01:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:3E:3A:5A:6E:4F:10:89:26:5D:4E:39:97:CA:45:1D:EB:FE:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a290faf7-0923-3d7a-ad08-3cdc127e1433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:85:60:11:e0:49:d3:31:8f:2b:19:a0:d4:45:ac:85:61:8d:
8a:b4:40:c7:38:1d:3e:05:fb:50:47:3f:17:8c:d9:61:7a:30:
4b:ea:80:86:4c:53:5a:8b:98:f3:eb:43:b1:97:eb:0b:f1:46:
5a:c3:7e:ee:ca:a0:21:26:e0:d2:63:13:c9:f5:da:05:c0:2b:
a2:6a:b0:46:53:88:72:4c:ee:88:e7:a2:ae:e4:d1:7f:fa:32:
7d:dd:a1:ca:52:7f:18:23:46:d5:8f:b8:26:37:b6:87:da:c5:
d0:78:89:02:75:ae:f2:50:eb:13:6f:84:76:ac:ca:9a:84:c5:
57:ae:9a:ad:49:7b:7b:82:02:13:10:32:28:26:00:8c:84:b8:
ee:6c:4f:14:16:d9:a7:5a:79:d4:dc:51:89:60:57:ef:51:91:
04:3d:1d:8b:34:9c:07:72:7b:40:d2:97:93:f3:62:27:d1:c7:
c5:ed:8c:85:43:db:48:2c:aa:fc:a6:54:c6:27:95:3e:de:f0:
51:77:d0:b7:35:1c:6d:ba:f6:20:14:d5:4a:34:0b:9e:86:aa:
05:6f:7b:78:8c:8e:bc:e1:f4:f9:cc:f1:7e:d4:88:27:b9:cf:
8f:25:1c:d0:6b:04:f0:11:82:9c:17:f5:7b:b2:e0:56:4f:38:
77:58:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org