Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbfc7b11-b75a-3467-aa53-552c87fcc9b7.roa
File: fbfc7b11-b75a-3467-aa53-552c87fcc9b7.roa (raw, json)
Hash identifier: lVtBfBEg8ZhoyOEGcnnmewim8+WN9sBckyA5Cbrmn2c=
Subject key identifier: 97:49:87:70:3F:1E:F8:DF:76:CE:CE:99:8D:8A:DE:0C:57:57:F7:83
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EEA30933B3B9F4CDB81218
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbfc7b11-b75a-3467-aa53-552c87fcc9b7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 208.87.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:a3:09:33:b3:b9:f4:cd:b8:12:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=08707d6a-b3e1-40e3-aaae-c13eecb060f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:70:bc:67:ec:92:30:b5:08:04:de:3c:a2:
60:4f:4d:ef:d0:2d:f9:5f:6b:ed:49:1d:cf:57:19:
1c:db:58:1f:cd:92:3b:82:cf:bd:c4:d7:da:ee:5c:
e4:6f:05:73:a2:4c:48:0a:3c:77:a7:ce:bb:20:1e:
af:fb:ad:38:ad:b0:45:11:0c:5a:0c:6c:76:66:a5:
de:37:ab:ca:fd:25:bd:13:1d:f4:c6:91:43:e6:77:
5f:07:38:67:38:87:d7:62:e3:73:b6:2d:ec:20:7a:
d9:ac:f7:f9:b2:35:79:ba:12:ba:1b:c5:90:b3:8c:
55:92:0b:dc:f4:be:e8:ac:92:3b:00:08:c9:69:f5:
f5:4a:52:1b:e5:e2:76:35:a6:99:55:84:a3:0f:ad:
73:b3:e5:38:70:59:f6:35:74:56:33:eb:39:f3:0d:
57:68:b7:0b:1f:dd:38:30:00:76:0b:9f:3b:f5:6b:
1d:f9:c6:58:dc:dd:fe:da:13:01:5e:fe:78:cb:c7:
04:24:02:10:26:cf:69:cd:07:3c:b3:d8:b8:b5:ce:
b9:9e:b5:08:ad:a0:d7:3d:f1:b8:50:4e:ae:47:9e:
23:22:dc:3b:00:7f:75:e8:d9:2f:12:c5:33:9c:47:
90:b4:35:7f:30:18:df:fc:49:82:36:c2:7c:f8:09:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:49:87:70:3F:1E:F8:DF:76:CE:CE:99:8D:8A:DE:0C:57:57:F7:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fbfc7b11-b75a-3467-aa53-552c87fcc9b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.87.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:e1:59:57:7a:da:21:3a:41:ff:99:cd:61:a8:5d:b3:06:b9:
6c:0a:8a:2f:ba:61:44:2c:4b:be:99:27:d1:42:35:dd:c5:32:
58:c3:42:06:7f:82:3b:35:87:6c:8b:a7:72:f5:ec:22:3b:96:
71:37:c5:87:0b:c1:2e:2b:b4:84:77:c9:dc:32:b4:3e:8c:c0:
9d:41:a2:7c:5b:f9:23:17:ff:df:0a:87:d4:44:c9:ba:eb:1b:
e2:0c:d5:ae:94:4c:02:60:f5:88:86:a6:53:85:38:8e:54:f9:
90:d6:28:dd:a2:29:55:09:5b:bb:e7:f5:9f:1c:73:17:b2:e3:
32:a8:8d:80:36:ca:65:4c:76:0d:b3:c6:5a:7a:20:cd:7d:32:
14:76:c9:1e:f4:05:ed:9e:19:9f:23:5b:fb:ea:16:32:b7:6b:
58:40:ef:79:fc:32:c2:c2:b3:c0:d4:36:7c:1c:25:e2:c7:7b:
9e:e0:c6:32:97:af:6e:75:16:1b:fa:2d:67:0e:13:62:ac:77:
6b:a6:73:08:81:d2:d2:79:dc:a8:be:de:94:d9:4f:9f:b9:e5:
67:58:39:b9:e7:df:d3:4c:17:72:a7:c8:95:36:8d:a8:fa:c0:
15:bb:80:97:3d:7c:81:40:0c:92:67:e3:5b:56:29:76:47:f6:
1b:f8:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org