Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1bebe79-25c2-37d4-89a1-3114357343ed.roa
File: b1bebe79-25c2-37d4-89a1-3114357343ed.roa (raw, json)
Hash identifier: ayT9ev4iYShoJA3z5lVCR0j8vw+INTonDqs0CeTBnPs=
Subject key identifier: 46:DA:CC:0E:9D:E6:13:43:5E:9F:10:60:8D:DA:7C:98:60:2E:2C:01
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F3EA143507B47790E1CE80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1bebe79-25c2-37d4-89a1-3114357343ed.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.138.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:ea:14:35:07:b4:77:90:e1:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=81944b61-87f5-4d5d-b7f9-8a80817de5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:ce:93:04:da:1f:8f:5a:52:6e:cc:8e:7f:
fc:af:ca:73:59:20:77:aa:73:ea:ba:a8:5a:f6:42:
ea:47:72:58:ab:9e:9d:be:ef:69:00:3a:2c:95:f1:
9f:c5:9a:65:ca:2b:a7:ff:2e:7a:49:88:a0:ce:df:
b0:f3:f4:18:3a:a5:8c:48:2f:e3:66:2e:f9:8e:bf:
e3:16:f2:a4:d1:21:41:30:36:87:91:96:82:d6:ff:
40:f6:2c:8a:b4:ee:32:7c:f4:28:2c:b0:95:ff:f6:
d2:b2:79:9c:81:2a:54:43:ec:56:65:f2:97:bf:b4:
81:39:02:e2:2d:40:21:99:93:4d:83:74:65:5d:f0:
72:42:63:04:06:db:75:ed:2d:5e:3c:c2:bf:37:81:
89:57:d0:fa:75:dd:56:ae:4b:a5:e9:77:69:4a:99:
d0:4f:ff:f1:e6:29:2a:4a:c6:0b:13:ef:18:66:8c:
f5:39:46:e5:3e:1e:77:95:8f:d5:73:d2:99:62:1a:
b7:20:b8:b0:6e:6f:43:3f:fd:f6:f2:25:c7:12:6b:
fd:ed:59:85:c1:80:5c:aa:f6:a0:42:2b:a0:00:f4:
4a:85:12:e1:eb:ba:d4:9b:74:2c:e7:34:9d:04:29:
81:7e:32:78:da:2a:60:a2:8c:f3:f9:4b:95:ba:f2:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:CC:0E:9D:E6:13:43:5E:9F:10:60:8D:DA:7C:98:60:2E:2C:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b1bebe79-25c2-37d4-89a1-3114357343ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:b3:00:19:d0:83:c0:77:92:9e:aa:0d:a5:7a:b1:15:b9:ef:
63:95:06:a3:cd:fc:b6:18:fc:08:1e:95:d0:60:19:93:28:e9:
87:d9:d2:3d:97:3a:90:91:71:dd:bf:a7:54:60:fa:2f:84:37:
25:44:21:4c:f7:04:33:de:50:e0:4f:89:98:37:b0:21:bb:d8:
34:38:cc:3c:61:61:32:77:0d:bc:99:02:95:99:20:b2:da:48:
2e:50:b9:f1:27:43:f0:77:16:61:47:ea:1c:be:76:f4:50:3a:
a4:3c:ef:0f:aa:02:3c:73:97:01:c1:18:d7:8d:ae:bd:de:d3:
3f:e8:8f:e2:7c:95:a5:12:c0:49:1a:97:1b:a8:55:ff:51:a2:
a2:f7:67:4d:bd:0c:90:21:62:53:c4:a2:f9:1a:c5:61:09:ab:
f1:9a:9e:16:12:3f:89:cd:db:77:ff:3b:99:0f:28:09:f6:0b:
aa:7c:28:be:67:d2:98:12:58:8f:d3:7b:98:9d:4a:1c:46:f7:
09:cb:05:89:e7:49:aa:b6:7b:de:a2:0d:ac:05:e6:b7:29:03:
35:7e:7a:ed:d7:c6:ff:85:2e:f2:51:87:f8:c7:4e:40:a0:91:
19:92:eb:93:ac:38:88:2f:0b:a2:b9:7d:9b:70:a7:d4:65:df:
ef:dc:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org