Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ca2f3872-a5bb-3ab3-b895-f86bc13fd6f5.roa
File: ca2f3872-a5bb-3ab3-b895-f86bc13fd6f5.roa (raw, json)
Hash identifier: w7PcImf5xdGQM6Cyth6IdJqd7Wf2JZJKjH3o8ofQ+Fg=
Subject key identifier: E5:FE:C9:B5:B1:4D:BC:2B:4F:C9:3C:F4:E7:A9:C8:8C:21:31:BF:D5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A23B3B5CB3AF150BCEFFEC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ca2f3872-a5bb-3ab3-b895-f86bc13fd6f5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:b3:b5:cb:3a:f1:50:bc:ef:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=88994472-3204-4de5-b243-17d592b9ba38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:ee:a7:35:df:1b:59:a3:9c:63:cb:28:d4:
24:90:6c:10:e7:4b:a3:67:54:c2:89:a3:e6:c8:f6:
98:32:4c:0a:12:f3:78:e5:c3:23:44:5f:b0:6f:39:
9b:dd:00:97:c9:e8:87:69:84:0e:c7:69:07:e4:57:
28:da:d9:33:b1:fb:35:bf:cf:bf:1c:ae:a2:59:82:
1c:4a:6e:44:2f:5e:ec:f6:d1:88:ef:37:d7:63:3c:
6c:5f:56:2b:ed:b4:90:09:7f:62:65:e8:c5:22:6a:
60:4b:0d:ae:d0:55:85:ae:1a:b7:d7:26:61:38:10:
b3:64:da:8e:06:79:e0:eb:33:1f:96:a7:17:26:b5:
fc:0c:7e:54:fe:10:00:8f:15:70:0c:dc:38:9a:4f:
39:41:79:f6:84:e7:32:34:a6:bf:66:81:48:0c:8d:
67:9e:f9:c7:f9:c6:56:e1:05:82:8f:30:31:2c:4a:
04:a2:72:b8:9e:d4:f2:49:8c:47:6f:8c:77:bf:c5:
89:76:b8:a3:79:c0:c5:ff:68:10:b9:f9:9a:a0:23:
4f:b0:f6:cc:d6:e4:c0:6b:e3:8e:60:6f:8b:dd:3c:
d5:7a:a6:17:54:ea:cc:3f:bf:0b:6c:73:3e:36:4b:
dd:28:01:bc:60:44:93:62:52:f0:53:d8:0d:28:f8:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:C9:B5:B1:4D:BC:2B:4F:C9:3C:F4:E7:A9:C8:8C:21:31:BF:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ca2f3872-a5bb-3ab3-b895-f86bc13fd6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:ff:bc:ea:c9:23:75:da:e0:ba:06:80:c0:b4:78:e6:fe:d3:
91:78:a7:3f:90:21:87:d9:b9:f7:05:08:5b:2d:66:a0:96:0d:
33:ea:d0:cd:f9:15:c4:7b:13:87:b5:63:6e:48:c0:77:ef:58:
b7:e4:f6:1b:b9:13:c3:ce:c8:01:0a:c7:8e:5c:83:7f:f2:50:
78:1a:f2:eb:33:65:0b:af:bb:31:bc:c1:3c:7b:af:29:00:d2:
e7:ef:b9:b9:d0:81:f3:18:21:17:76:9d:90:8c:6d:0b:fb:1d:
57:c6:f2:4a:de:83:24:86:a7:a4:e2:fb:02:f3:c7:10:98:c5:
52:6d:8d:b9:29:ea:d4:4c:e3:0c:95:dc:d5:31:93:7c:19:93:
e2:42:a6:82:bc:9c:d9:1b:8b:06:8b:fc:9c:c8:2e:5d:ec:79:
60:ee:c8:d8:41:e9:13:d5:e0:94:e5:d2:5a:56:2f:0c:fd:29:
d4:ed:04:12:dc:95:6e:8a:29:bc:f7:17:58:3e:bf:7a:e9:f9:
2b:22:1f:7c:66:d2:69:02:90:38:3d:9b:08:ee:c2:3f:b7:a5:
d6:05:29:16:67:85:db:3f:cf:99:fb:53:fd:6b:73:f2:01:dd:
02:c4:9a:e8:d8:cb:2e:db:3d:fc:06:30:cf:e5:4c:26:e0:e9:
4d:26:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:42 2024 by rpki-client on console-ams.rpki-client.org