Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c26428-16d3-3256-a366-0b43aacb3982.roa
File: b7c26428-16d3-3256-a366-0b43aacb3982.roa (raw, json)
Hash identifier: qwv/9/OYqNt0o640Z/iSXDoJHnitXIcd4k+OtUsL6fw=
Subject key identifier: DB:BC:91:0B:9D:2D:92:E0:DD:9A:CE:25:6F:1E:1A:AC:2F:48:5C:69
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EE54A7DF8F94D948FD5510
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c26428-16d3-3256-a366-0b43aacb3982.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 70.32.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:54:a7:df:8f:94:d9:48:fd:55:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d7674fbf-c3bf-4769-8e20-4ebef046c9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:0c:5c:89:81:1b:b1:26:ab:62:d2:32:fd:
cb:f0:c5:39:97:c6:33:1d:03:92:f4:52:e1:44:8a:
06:a9:ad:33:60:74:97:9a:fa:bf:a5:1b:e0:75:66:
c5:13:7e:34:e2:16:7c:4f:5a:1d:3c:a9:4a:74:ff:
9d:b3:70:1d:02:0a:12:54:7f:c9:92:c0:1f:1a:e8:
7f:6e:4f:ea:6e:7b:cd:7b:dd:44:77:e3:39:28:02:
46:df:0b:c6:ca:6a:f7:8b:a0:33:b4:2c:44:9f:cb:
b9:17:53:f1:2b:2a:27:5d:d4:00:87:3e:9e:4a:98:
cd:7c:48:e2:0f:a0:9a:53:2d:45:28:e3:95:c5:8e:
10:70:ab:81:89:98:56:f9:75:c7:af:61:fd:4f:f9:
6b:1d:ae:ea:f0:1d:ad:9e:25:b1:e1:60:32:11:b4:
31:a9:27:ee:ad:f0:22:7b:33:85:3c:28:b1:81:f4:
5d:ef:44:62:c4:ea:67:e5:b3:a2:be:1e:b2:51:26:
d2:65:93:82:f6:b3:a6:05:51:fa:e9:08:62:34:3e:
2a:62:28:24:03:96:76:dc:1e:7a:71:df:89:91:b6:
2f:d4:7c:b4:11:ef:61:21:d8:a1:4f:51:9e:4e:b8:
32:e3:70:5d:ef:e3:ee:a0:ae:bc:c6:91:39:9c:3e:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:91:0B:9D:2D:92:E0:DD:9A:CE:25:6F:1E:1A:AC:2F:48:5C:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c26428-16d3-3256-a366-0b43aacb3982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:83:80:8f:84:d2:f0:ed:69:7d:66:61:08:bc:cf:ee:24:13:
c7:58:8c:46:31:0c:7c:f1:f6:d8:a2:18:d7:f3:ef:e1:25:61:
43:c9:3b:2e:11:e8:5f:78:68:14:b3:ba:b4:0e:34:41:3b:93:
5f:a9:dc:07:7e:9f:4d:00:8e:5e:6c:30:0b:8f:07:67:81:6c:
ca:80:a5:83:89:d0:ff:d9:77:ad:10:29:42:27:ae:8b:53:e7:
ae:75:32:7f:cf:11:df:bf:a8:9b:93:22:ce:a4:1c:85:09:40:
8a:67:de:4e:32:c2:e8:0d:0d:2b:47:88:5a:31:43:04:05:c1:
ce:b2:3a:47:60:29:3c:5e:29:48:40:e4:65:df:9f:3b:be:be:
9a:86:88:7a:15:9b:d6:f7:63:72:59:dd:6b:e0:d6:fb:1b:50:
b3:80:4d:76:7a:b6:58:50:f5:fd:53:5f:b3:1c:ca:33:e1:42:
1d:02:d7:b8:4e:9a:52:6b:47:d3:ea:70:b7:3b:ad:26:3b:80:
fc:a1:b6:05:fa:e8:ef:56:df:15:0f:77:b8:b8:e2:eb:67:ea:
54:57:99:b0:24:64:4c:4c:f4:1b:55:1b:bd:17:67:63:ab:17:
d1:6b:8b:eb:4e:78:b7:26:4d:8d:66:d4:34:c5:6b:54:af:33:
d5:db:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:42 2024 by rpki-client on console-ams.rpki-client.org