Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a902dc81-3e5b-39e5-bcb3-4513c4c5c0cd.roa
File: a902dc81-3e5b-39e5-bcb3-4513c4c5c0cd.roa (raw, json)
Hash identifier: ED/N4Z4dfLxHZtYBrjKHCNy3s7HvpeTUCO75R9f90z8=
Subject key identifier: 82:1A:9B:E2:AE:F9:96:03:B9:FC:A5:A8:CA:71:9A:8B:8A:87:B9:1F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A142708CB4E60E91577BAE0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a902dc81-3e5b-39e5-bcb3-4513c4c5c0cd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:27:08:cb:4e:60:e9:15:77:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fbd90a07-731f-48d0-afdc-9a9794ebf330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:c9:8c:52:c8:57:fc:20:c6:19:25:4e:37:
5c:b6:a9:e3:d4:7d:26:18:38:79:75:61:c3:89:fe:
e6:31:bb:cd:15:0c:71:42:e1:e4:89:f2:35:d3:c2:
de:30:e8:ad:8d:c3:c4:a5:f8:48:eb:d6:d1:ff:8f:
ac:5a:98:f7:50:e2:30:78:5c:96:40:ce:c9:70:3e:
06:c8:78:cc:47:b1:75:dc:4e:5c:2f:3c:29:cb:45:
b2:e3:c8:ad:1c:f0:bd:bf:e5:6b:ed:19:1f:af:6d:
fd:fe:ae:f7:c1:8a:3c:19:c9:81:3b:51:ee:4d:09:
bb:12:2d:c8:d5:6c:a4:2a:47:2a:27:d4:87:b2:ae:
0b:90:d0:9e:45:5e:1b:fb:9d:30:4e:a6:19:5e:93:
6d:4f:de:43:48:73:ad:33:70:b2:34:37:e7:8c:e6:
aa:5f:f3:69:82:c1:fc:e0:3c:9c:0a:7a:90:6a:86:
89:03:bd:cb:6e:0f:73:f9:70:ac:31:c0:73:10:d1:
8b:c3:87:12:ba:ce:9e:50:0a:a9:18:55:c5:86:6e:
7e:51:fa:c4:0b:46:67:45:4f:89:cc:8e:2e:dc:75:
42:d4:ee:ee:a1:64:19:d3:60:af:74:3c:c4:dc:cb:
c5:96:02:ac:0b:54:ba:03:b6:ed:03:10:a9:25:4d:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1A:9B:E2:AE:F9:96:03:B9:FC:A5:A8:CA:71:9A:8B:8A:87:B9:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a902dc81-3e5b-39e5-bcb3-4513c4c5c0cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:8a:3c:cb:b3:5f:88:38:42:70:dc:a1:72:e7:bf:5d:c1:c8:
79:bf:7f:27:55:4e:35:61:38:11:92:7e:92:fb:21:60:52:89:
79:28:02:ed:41:13:6c:ff:f0:4f:05:8f:bb:db:90:7c:ad:be:
6f:bc:7d:4f:41:3b:af:b5:ec:6b:49:6c:cb:5c:53:4b:f4:3f:
11:87:da:3f:ae:98:db:2b:04:20:05:03:97:ec:59:79:ae:d9:
2e:ed:e9:cb:93:7d:74:7e:91:2b:9c:47:f5:63:28:3a:4c:51:
5f:07:8d:4a:cc:d2:fb:79:3e:a4:22:16:3a:03:6c:40:0b:de:
8e:a7:8d:44:ea:fb:38:44:fb:97:34:a7:f5:c5:e6:0a:28:d7:
e1:5c:e9:4f:bb:30:04:67:13:09:e4:14:44:8c:e7:30:3e:b0:
c9:c3:e1:54:08:b3:dc:f2:98:f1:78:f1:c6:47:47:f0:12:67:
67:be:2e:ed:42:3c:0a:d7:a9:bf:0e:dc:40:79:98:54:63:dc:
34:79:4c:95:b4:ef:b8:0b:76:a4:60:0c:00:ad:56:d2:5d:32:
fa:9b:c2:ff:e0:4e:a4:79:8c:87:ac:03:14:4f:09:e7:de:29:
9f:17:40:d2:e4:a4:99:ab:af:5d:4d:16:c9:12:7f:aa:2d:69:
e6:8e:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org