Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b84b2707-2981-3813-9e4c-7b8714f61586.roa
File: b84b2707-2981-3813-9e4c-7b8714f61586.roa (raw, json)
Hash identifier: Yrr9FcjNr54lqV/8DVkLI7Vtgda/PDjLQwBDR9a4SZw=
Subject key identifier: 4E:6E:C0:E1:65:62:F5:8F:10:57:3B:89:6D:33:BF:92:F9:D3:EF:3C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309ED793D8CCAEB8F52362800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b84b2707-2981-3813-9e4c-7b8714f61586.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 216.58.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ed:79:3d:8c:ca:eb:8f:52:36:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=600801f2-281f-4f67-861a-6e97e665f614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:4f:d5:99:43:01:9e:de:e5:ff:ff:3d:32:
4d:ae:65:4a:f6:9f:c2:0f:59:c0:dc:bc:fa:62:53:
70:9a:61:13:45:ee:95:fd:6d:0e:45:d0:6c:ca:68:
b8:b5:2f:d5:05:00:64:01:97:cd:ad:30:82:b6:e8:
9c:5e:f5:1f:1b:d1:83:53:d4:89:07:d3:1e:04:8d:
59:f1:ce:c5:c4:5f:69:24:9b:0c:57:64:3a:8b:4c:
a6:29:f9:a9:d4:df:79:3d:3b:a1:1c:2d:ee:9b:8f:
cd:43:f8:01:38:a0:55:dd:53:2f:f7:6a:70:88:9b:
bd:51:14:df:e3:df:87:21:3c:bb:b5:02:cc:78:f5:
a8:09:b0:a0:c3:14:cc:cc:2c:12:2e:c4:ed:4f:5f:
e9:91:41:ea:92:c7:2e:a2:7c:b0:ce:0b:a3:f3:9d:
de:d2:b6:05:02:3a:ab:4a:3e:45:9d:d5:dc:33:67:
84:d7:d3:bc:1b:f8:89:b1:dc:10:e4:aa:fa:8c:f8:
ee:f9:f5:f0:2b:a7:11:94:d5:2d:55:2d:ff:ff:14:
97:46:b9:fa:cd:a8:1d:f9:3c:74:1d:7f:77:8f:74:
35:24:88:1f:c7:bd:ad:9f:b9:92:37:00:cd:ba:53:
ff:a3:24:53:28:db:27:75:7c:8f:99:4e:15:1d:f4:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:C0:E1:65:62:F5:8F:10:57:3B:89:6D:33:BF:92:F9:D3:EF:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b84b2707-2981-3813-9e4c-7b8714f61586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b5:b5:c0:0c:92:04:81:91:cb:81:6d:1d:26:8f:08:c9:92:
2c:e9:12:8b:9a:39:ac:d3:49:a2:be:13:c7:70:5c:76:61:8a:
5c:22:7d:fb:40:00:65:90:e0:1b:96:04:76:f2:74:ba:d0:28:
f7:78:09:1e:62:fa:bd:7e:bc:bf:81:26:30:30:2f:9a:48:8a:
73:dc:37:c1:6d:cc:88:da:fb:8b:eb:b3:f4:73:23:44:8b:ba:
db:b7:85:48:2f:0f:f1:52:18:f4:3a:60:40:0f:9c:c2:2e:41:
26:b6:b4:fa:95:37:bd:01:44:ac:40:7d:b4:c1:18:ec:ed:18:
b4:8f:46:06:5b:7c:b9:a6:a6:88:0a:9b:cb:a6:30:45:49:84:
98:90:df:9f:17:a9:61:cf:7c:30:36:aa:ef:88:5a:ea:40:2b:
08:41:95:1c:84:16:75:bd:9d:27:bb:20:7e:d1:bb:ff:4e:c9:
93:67:11:19:7b:ff:e7:3c:dc:96:c3:cc:1c:f3:8d:54:57:d2:
05:8f:75:ba:f1:c2:11:79:22:91:f6:eb:ea:69:fc:c4:19:2a:
2d:c7:16:32:5c:e7:d1:d2:2b:2b:90:82:57:89:bf:32:70:02:
bf:e1:cf:b1:ef:8c:9d:b7:ff:86:ee:c7:bf:65:8e:7d:b6:81:
a9:28:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org