Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1a4f064-2bb3-3107-bebb-9b6f4d565af5.roa
File: c1a4f064-2bb3-3107-bebb-9b6f4d565af5.roa (raw, json)
Hash identifier: rYd0FNmtpBn+WTVT6XcC+TzgYkNjSqXvCQPWNDAmaAY=
Subject key identifier: F5:0A:2F:04:94:0D:8D:F2:E7:79:BE:B4:F6:48:2A:09:00:90:10:A6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A09AD8217677009799D6480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1a4f064-2bb3-3107-bebb-9b6f4d565af5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 108.177.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:ad:82:17:67:70:09:79:9d:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=9db08e98-d0f2-4565-af20-4bc4a2de80ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fb:e3:54:92:82:4b:8d:d3:92:28:5e:ff:65:
47:c5:11:37:9a:69:24:21:e1:5a:d8:b3:2d:c4:c7:
9d:d4:30:73:d2:8d:e8:12:62:04:98:48:d8:58:8c:
7d:78:1f:e0:5a:36:16:ee:27:c1:e4:e9:ee:fe:01:
b0:e5:72:0b:cd:3c:26:56:39:e3:10:b1:c3:6f:0b:
2b:49:bc:b9:24:93:d3:4d:d7:83:66:16:19:28:f5:
5d:be:6c:9e:3c:61:3c:7d:30:d0:fd:75:1e:f8:b2:
d2:6e:c9:43:b5:7a:60:ef:7e:37:82:2a:73:ee:2c:
25:68:c1:ec:a1:50:88:b8:39:b4:62:82:9e:8b:98:
77:79:4f:aa:d0:1b:6b:1e:1d:24:f8:24:6d:23:4c:
ea:fd:de:8a:ee:aa:e9:4e:9f:1f:d9:79:4b:f3:8b:
56:2e:b6:d2:6c:b2:f3:e1:ff:a7:b5:51:a4:27:80:
ce:14:9f:b3:05:e2:d0:53:b2:6e:5a:93:66:ed:1d:
30:5e:33:fb:f7:12:64:c1:b3:81:1b:61:7c:80:43:
f3:38:0b:78:aa:02:42:69:35:2d:d0:88:05:d6:3f:
49:f7:fa:1f:d8:f7:ff:ce:ff:5d:eb:b7:9c:be:f2:
9b:da:5c:37:63:4e:b3:06:02:08:d9:83:36:ec:0f:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0A:2F:04:94:0D:8D:F2:E7:79:BE:B4:F6:48:2A:09:00:90:10:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c1a4f064-2bb3-3107-bebb-9b6f4d565af5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.177.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:35:01:32:7e:31:c0:33:9b:63:95:4d:c4:a3:9a:a4:d0:22:
4c:c0:f2:14:d0:76:b7:12:28:b4:8e:43:97:e0:ad:88:90:8f:
a6:2b:e9:d0:df:8e:7a:3a:68:8c:94:7c:d7:f7:d7:18:4d:89:
7f:ec:65:8b:58:9d:61:dc:93:2e:5c:f9:ad:db:3d:5b:06:82:
a3:ba:d9:0c:ad:54:a8:2a:95:fa:c0:2e:4d:86:3d:69:e1:ab:
f4:ee:9d:8f:2c:96:11:73:0e:cc:64:fc:ce:07:05:a8:d0:75:
fc:1d:38:98:b5:b6:f8:0d:20:e7:d5:74:c4:32:39:f9:d9:5d:
56:52:cc:ee:d6:15:85:38:85:f8:3d:8e:63:6d:f1:62:d0:05:
2c:34:88:bc:c8:c8:f5:2f:c0:18:7e:37:98:5b:06:2e:1d:f4:
38:8c:5b:ef:3e:11:c1:74:cb:54:28:f6:21:75:d0:7d:86:f7:
d4:e6:82:1d:a4:57:7f:f6:60:31:a2:de:42:aa:86:89:d4:05:
25:62:f8:f6:02:53:2b:b8:56:8d:2c:60:50:2b:cd:a1:f2:f0:
53:e6:c3:57:ff:97:d2:fb:34:fb:02:0f:d1:8c:19:83:a8:82:
11:3b:b6:7d:a8:71:46:5d:55:14:ab:5c:d5:11:f6:8c:32:e7:
9e:3b:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org