Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8ebd240-fdd0-3ae1-a32a-5587fa74bb68.roa
File: d8ebd240-fdd0-3ae1-a32a-5587fa74bb68.roa (raw, json)
Hash identifier: e6PVP9srIjuqO/MkVTAu0lVi5ZHUttFhnbKdXU1+Wac=
Subject key identifier: 2C:DA:E9:BB:4E:09:4C:69:AB:51:7D:85:8C:11:69:ED:AC:AF:F8:B2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F0EB8653F06995D2ABDF80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8ebd240-fdd0-3ae1-a32a-5587fa74bb68.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f0:eb:86:53:f0:69:95:d2:ab:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=811850eb-7d76-497b-a254-d1a63146b393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:d4:d4:38:bb:88:d2:06:3c:79:64:1d:fb:
41:0c:ec:80:56:47:c1:f8:2b:cc:c0:09:26:a3:f9:
07:22:23:89:90:1b:5f:2b:5f:e9:ed:9f:18:9f:f9:
76:aa:fc:ee:17:53:cd:2d:8f:d2:c1:d0:ce:78:cf:
b2:f3:3f:a1:49:99:1c:6f:b1:a4:70:2d:7a:fb:3c:
90:8d:fc:48:ef:66:31:39:0c:8c:e7:3f:ef:fa:8e:
8d:a4:3c:9d:e4:51:9f:ce:f8:41:25:2f:5b:85:28:
a8:54:55:95:a6:21:e6:e4:6b:49:88:5c:89:75:72:
23:9c:71:c8:97:e2:06:db:65:5e:e4:07:93:a2:6c:
19:a4:42:9b:01:6e:65:1e:bc:f4:53:77:d3:a6:d9:
4d:1e:7a:6e:98:1f:58:c0:04:c5:db:0e:03:74:0b:
df:be:77:c4:56:da:ed:17:ce:33:19:df:5a:de:06:
04:44:5c:a5:33:e0:c5:fa:bf:22:d2:e6:d7:be:3d:
ed:e6:4c:d2:71:73:e6:7f:af:48:09:15:9d:92:cf:
89:c8:53:0a:68:dc:20:0c:87:e6:7b:24:56:12:4a:
9b:d8:1f:91:e1:d5:02:fa:ff:7c:c8:a2:84:af:cf:
4c:fd:16:03:f3:16:a0:fc:0c:b6:42:53:af:7a:e3:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DA:E9:BB:4E:09:4C:69:AB:51:7D:85:8C:11:69:ED:AC:AF:F8:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8ebd240-fdd0-3ae1-a32a-5587fa74bb68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:7f:46:17:bd:29:33:03:da:ed:65:85:60:5a:b9:c9:bb:d4:
d0:80:7b:7b:18:2c:df:78:44:2c:2c:7c:bf:6d:d9:2f:d9:4b:
af:31:e7:2d:ce:bd:71:e6:6b:d4:60:37:1f:8e:f4:de:6f:32:
2c:73:bc:32:10:ab:e9:77:5c:0e:ff:78:f4:35:36:1a:cd:4a:
bd:28:b7:54:32:6f:46:47:05:9b:ba:6f:71:b8:d7:05:a3:b4:
e9:33:94:04:eb:76:60:de:3c:36:68:2b:0d:95:51:7d:00:23:
6c:cd:92:34:f5:88:5f:29:aa:bf:29:09:e3:6d:eb:6b:ca:02:
5d:1b:d7:c0:5a:b4:5c:f2:80:c9:a7:5b:2f:c6:f0:64:c5:4e:
36:b3:d4:a7:e0:e0:b4:38:55:7e:6b:a1:00:a4:2a:a3:0a:2b:
53:79:02:9b:90:6d:7a:15:95:d1:4b:c7:cb:54:ad:75:8f:ec:
b3:4e:e5:5e:d7:3d:f3:ec:8d:71:03:eb:0e:f2:28:ea:ef:d8:
66:49:91:f0:af:fd:f6:8d:38:80:79:00:91:7a:5f:b8:ac:42:
4d:e3:1c:38:01:62:4e:37:24:75:90:25:4e:7b:68:af:d6:17:
f3:d5:28:01:94:07:5d:82:93:97:35:80:1b:fb:85:19:01:75:
4c:34:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org