Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdf3f076-bbd1-3521-9281-27535782a7ef.roa
File: bdf3f076-bbd1-3521-9281-27535782a7ef.roa (raw, json)
Hash identifier: zQuQEV08/+KTFXL5mYMksPRSV07jT2ehP2jUKrBztMI=
Subject key identifier: 3A:E5:E7:C1:1A:EB:A2:33:C4:94:49:21:24:98:51:D0:74:54:C6:6D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A151F4BAB1176AD4EB17900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdf3f076-bbd1-3521-9281-27535782a7ef.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:15:1f:4b:ab:11:76:ad:4e:b1:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=95110984-8aa2-436a-bc75-0f9274d2643d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:a7:7e:0f:6e:7a:d5:ea:0f:8a:b5:a4:f1:
19:15:56:c1:cc:41:0d:1b:42:71:7b:f4:29:84:fb:
29:fc:43:b3:30:6f:61:be:97:58:03:05:4c:bb:17:
bd:93:f2:58:23:e6:5a:ea:a6:98:a6:93:42:c7:ad:
c4:1a:a2:b7:ed:38:19:f4:a9:76:a0:72:90:52:91:
82:2f:2f:22:5e:c9:10:60:db:c0:0a:05:cb:d0:a6:
e3:23:70:48:6b:32:ea:c3:6c:56:fb:9a:05:b1:ad:
b3:4d:7d:45:47:14:2d:22:02:21:9e:51:b2:ac:35:
c6:e4:1b:ae:8a:7e:06:99:a1:23:d1:67:68:67:4f:
bd:7a:29:87:84:43:ec:35:a9:cb:64:05:7d:04:0d:
57:ab:eb:df:c7:b8:ce:be:cd:50:df:e8:b4:bc:bb:
2a:cc:1e:31:e9:9e:f5:c9:e6:93:f8:3b:57:51:7c:
94:3f:69:96:11:65:9b:0d:ae:57:10:f6:3f:c8:a9:
a4:10:c2:87:25:b6:5f:bc:63:39:16:95:e0:07:7e:
d7:6b:95:51:14:55:72:e7:ad:9a:3d:2f:e1:9a:ca:
f3:eb:72:90:43:47:5e:5d:5a:25:9d:8b:dc:45:0e:
29:47:21:2d:e1:3e:41:2c:13:66:46:b7:85:0a:f3:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:E7:C1:1A:EB:A2:33:C4:94:49:21:24:98:51:D0:74:54:C6:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bdf3f076-bbd1-3521-9281-27535782a7ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:a6:cf:c1:18:31:96:76:ef:a7:a5:67:6e:ad:50:0e:ea:dd:
58:7d:7d:55:54:35:ed:61:dc:69:61:1f:c0:28:5e:b4:3a:c6:
30:8c:06:37:01:0f:b5:76:57:c6:55:1f:8a:d7:f6:46:0c:b1:
10:04:e5:c6:2f:32:8e:ac:b1:72:6a:9b:da:07:46:a7:69:76:
b2:40:34:1e:f9:1d:a3:7b:e4:7c:3a:6d:b3:bb:f3:8d:d7:d1:
bb:ed:d2:5e:85:22:a9:1e:a7:d0:c8:6d:89:dd:a4:71:08:0b:
a6:f9:a2:79:9e:d4:4a:7c:d0:d5:4b:fe:79:1a:cc:68:fd:17:
fb:38:d0:40:db:09:96:26:e6:8c:da:b0:dd:63:fd:51:7b:3e:
96:52:5d:3d:57:6f:d8:51:1a:67:1a:2a:74:14:b0:bb:c7:7d:
73:2b:35:77:c6:9e:58:47:64:d5:7f:ee:29:e6:ef:d7:8c:c8:
36:4e:59:04:0b:e6:79:91:1d:49:24:73:8b:37:7e:f2:17:46:
02:01:19:bf:6b:a8:ee:8e:68:13:13:3b:a8:1b:60:cb:d4:9a:
bf:48:10:4c:a6:13:1a:62:0c:81:91:6d:37:b4:17:23:36:40:
9d:84:91:88:6f:6d:37:8a:b6:1c:56:3d:60:38:5b:48:33:18:
6f:ae:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org