Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0ff6b00-5092-33e7-b6b8-a28dc575bca6.roa
File: b0ff6b00-5092-33e7-b6b8-a28dc575bca6.roa (raw, json)
Hash identifier: +AhbbqU8u6kplXunn1wb2/7Ni3eumoPo0Ul8KRKC7mE=
Subject key identifier: CB:54:6E:0B:A0:12:5A:F8:86:28:5F:0B:61:2B:75:85:79:D8:80:96
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A275B6D75B81ECE14148680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0ff6b00-5092-33e7-b6b8-a28dc575bca6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:27:5b:6d:75:b8:1e:ce:14:14:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ee8f8f9e-e7fa-4390-93a3-901f734412f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:cf:17:1b:b7:2b:e2:55:7d:22:a9:15:52:
ed:5c:fc:45:0a:ad:43:78:70:79:f4:94:68:04:07:
ee:8f:47:e2:58:30:63:b2:ba:c3:ea:c1:b4:21:fb:
a6:94:cb:5b:fe:c3:06:1f:e0:11:81:77:81:56:e6:
5a:fc:03:e7:59:8c:8f:cd:0a:a2:aa:64:a1:27:25:
97:ee:9b:72:40:16:ce:b2:b0:00:7d:e7:4e:32:12:
79:df:7d:ba:29:3c:29:f2:13:50:03:82:5e:ef:92:
93:73:dc:89:f8:f1:28:63:73:71:38:ad:fe:a0:20:
b4:9d:4b:fa:33:bc:94:21:38:14:19:f0:aa:84:20:
b7:a9:42:4c:bf:63:3b:35:81:ff:be:40:59:ab:c2:
f3:71:80:8f:db:9d:9b:58:0a:a8:2e:74:d0:7e:7b:
c3:51:e6:6b:b2:26:ef:49:94:d8:07:5e:6d:e3:82:
45:21:07:24:6d:d4:6d:5f:ab:b8:a8:12:a4:cc:c8:
30:e4:20:99:c2:29:7c:3d:f3:a2:ef:5f:71:6b:3f:
a5:c5:c2:2f:5f:54:0c:a7:21:a2:40:24:af:9b:59:
53:1b:38:34:7a:11:1c:4f:57:aa:4f:78:7d:55:cc:
8d:9f:c1:03:91:f0:04:90:78:51:f8:f6:f1:f6:92:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:54:6E:0B:A0:12:5A:F8:86:28:5F:0B:61:2B:75:85:79:D8:80:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0ff6b00-5092-33e7-b6b8-a28dc575bca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:36:e4:4f:73:75:70:d0:0f:17:f2:78:3e:5f:e8:e5:7c:87:
a3:be:f8:7e:ac:86:56:a8:94:91:6c:a0:2a:7a:be:8d:9a:ef:
9f:76:0a:42:94:22:f1:25:97:a2:54:c5:3c:10:d0:dc:80:91:
40:4a:1f:eb:29:60:3e:82:c8:0c:bb:34:01:92:9c:1e:8e:d9:
12:fe:1d:b6:64:ab:64:12:21:70:e7:e2:28:a4:e1:bc:79:9c:
d9:1f:9f:54:aa:16:68:ad:f9:43:03:90:45:5f:34:30:9f:a9:
d1:86:58:8d:5f:de:8f:11:ea:e5:0f:96:22:5f:54:37:67:be:
54:51:fe:2b:c2:95:d9:97:17:1d:22:93:0b:89:4c:a4:d5:c1:
cd:92:c8:bc:b8:d0:2a:82:4d:8b:48:9a:f9:57:1c:db:74:87:
0e:db:4d:24:e6:87:d4:50:88:0a:9c:c5:d5:d7:bb:7a:72:24:
0f:2b:68:1a:3f:4b:fa:d2:5e:23:a1:8a:c4:ff:78:af:b0:f1:
e3:4a:43:33:58:18:8e:83:50:a6:95:b3:52:bd:cf:be:ea:a0:
5e:d9:ef:80:60:89:ae:5e:b2:90:98:1c:77:9d:26:aa:a7:52:
a2:7c:b2:21:61:61:5e:4c:55:61:00:27:f8:88:02:12:ac:36:
41:75:01:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJ1ttdbgezhQUhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWU4ZjhmOWUtZTdmYS00MzkwLTkzYTMtOTAxZjczNDQxMmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBrPFxu3K+JVfSKpFVLtXPxFCq1DeHB59JRo
BAfuj0fiWDBjsrrD6sG0IfumlMtb/sMGH+ARgXeBVuZa/APnWYyPzQqiqmShJyWX
7ptyQBbOsrAAfedOMhJ53326KTwp8hNQA4Je75KTc9yJ+PEoY3NxOK3+oCC0nUv6
M7yUITgUGfCqhCC3qUJMv2M7NYH/vkBZq8LzcYCP252bWAqoLnTQfnvDUeZrsibv
SZTYB15t44JFIQckbdRtX6u4qBKkzMgw5CCZwil8PfOi719xaz+lxcIvX1QMpyGi
QCSvm1lTGzg0ehEcT1eqT3h9VcyNn8EDkfAEkHhR+Pbx9pKMfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtUbgugElr4hihfC2ErdYV52ICWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjBmZjZiMDAtNTA5Mi0z
M2U3LWI2YjgtYTI4ZGM1NzViY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQ25E9zdXDQDxfyeD5f6OV8h6O++H6shlaolJFsoCp6vo2a7592CkKU
IvEll6JUxTwQ0NyAkUBKH+spYD6CyAy7NAGSnB6O2RL+HbZkq2QSIXDn4iik4bx5
nNkfn1SqFmit+UMDkEVfNDCfqdGGWI1f3o8R6uUPliJfVDdnvlRR/ivCldmXFx0i
kwuJTKTVwc2SyLy40CqCTYtImvlXHNt0hw7bTSTmh9RQiAqcxdXXu3pyJA8raBo/
S/rSXiOhisT/eK+w8eNKQzNYGI6DUKaVs1K9z77qoF7Z74Bgia5espCYHHedJqqn
UqJ8siFhYV5MVWEAJ/iIAhKsNkF1Ab4=
-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:41 2024 by rpki-client on console-ams.rpki-client.org