Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9e5fb6-8821-39d5-a552-c2a4a0100678.roa
File: ef9e5fb6-8821-39d5-a552-c2a4a0100678.roa (raw, json)
Hash identifier: Ra78cfBBQgGG5Hm1gycbNTf1uujq0e378txjjLVIS4E=
Subject key identifier: 2F:4C:34:07:0E:5E:78:A8:56:6D:CD:1B:12:85:BC:5F:01:1D:E6:DD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0BFA7817717C278F57C260
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9e5fb6-8821-39d5-a552-c2a4a0100678.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 108.170.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:fa:78:17:71:7c:27:8f:57:c2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8e14ffbe-7825-4fdb-9859-78c12c21f9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:3b:50:17:fa:85:26:f6:8a:85:9f:18:01:
7b:f7:d3:d9:8b:a2:27:be:b4:b5:2d:83:5b:5e:ff:
a1:36:ae:a9:22:b6:38:ed:7a:98:ea:3a:71:9d:d2:
dd:43:b0:f8:a5:21:64:b0:30:30:08:88:00:be:87:
c6:9f:52:bf:a2:1e:fd:b9:7f:20:b7:f5:69:f3:48:
c0:5c:a0:b9:5e:f1:f1:2a:58:3f:51:9b:54:83:d0:
0e:17:46:af:e4:cd:7f:3c:30:8d:d8:d8:58:fe:68:
81:8f:7c:12:42:d1:0c:1d:07:20:f1:c2:2e:f5:51:
95:0b:5c:0f:83:0b:d9:c7:a1:eb:7d:80:dd:b9:3d:
d5:7f:60:36:bb:19:88:fb:72:01:3c:9f:63:b1:c5:
b3:fc:3d:7c:a0:7d:87:1f:c9:ce:84:aa:8e:6e:02:
ab:99:63:03:99:75:45:b3:84:e3:7d:b1:6b:45:44:
1e:fd:54:2e:f0:0e:b3:c1:48:f3:e0:24:41:1f:34:
dc:57:e6:6f:3e:ab:f2:4b:b8:9a:81:4c:d0:cd:7c:
fb:37:14:30:d8:60:90:8d:c0:2e:59:57:90:82:99:
54:f8:86:e8:bb:ef:23:b3:87:40:8a:43:d1:86:f4:
10:62:65:f4:65:bf:46:99:9f:9b:74:b0:37:ae:be:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:34:07:0E:5E:78:A8:56:6D:CD:1B:12:85:BC:5F:01:1D:E6:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ef9e5fb6-8821-39d5-a552-c2a4a0100678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:61:8d:bb:27:0c:47:c5:22:ec:ba:03:88:f1:c5:e6:02:dd:
5c:c3:8d:86:1b:36:fc:6c:34:9c:2e:be:bd:8d:8f:dd:7c:33:
e1:18:e9:80:2e:ad:3e:4c:05:c7:2f:b3:4e:a8:f7:5e:c4:c0:
61:df:aa:f7:fb:e1:0c:71:f7:83:85:ce:47:1e:34:ed:7d:99:
8e:8c:b5:5e:76:da:d2:43:80:96:5d:c0:70:2e:61:52:ba:f6:
bf:71:31:08:9a:5a:79:89:37:92:11:e9:13:0f:af:4d:da:28:
0f:33:6b:00:a9:eb:d6:f4:5b:5c:6a:a9:35:6e:90:90:87:db:
ad:c2:c2:b1:aa:d7:2a:2c:22:46:e2:e2:b9:62:a9:8e:74:f4:
a6:e8:77:52:26:d8:44:3f:79:e6:27:5d:68:4f:a2:5c:11:57:
0a:38:6b:66:c2:a9:8f:1c:79:cb:62:01:ef:64:bf:13:77:b8:
20:fe:37:33:de:1d:d4:04:e3:7f:d0:b7:11:cd:5b:f1:9f:da:
a5:f0:de:7e:f3:fc:8f:6c:d4:33:9f:98:3e:24:ec:a4:78:79:
04:a6:91:da:f6:36:72:32:3e:16:5e:40:01:d1:87:eb:78:11:
cd:59:8e:21:be:39:7b:4e:c3:4a:c1:86:d3:e6:86:a7:9e:ef:
c6:1b:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org