Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/21b5d73a-2fff-3d88-8a1c-f7f912d25992.roa
File: 21b5d73a-2fff-3d88-8a1c-f7f912d25992.roa (raw, json)
Hash identifier: DroNQoFyVamtl4prtZB2/CR1fLR/hQsksKCdvo/24Vw=
Subject key identifier: A5:88:67:C2:2B:33:7C:3C:C2:98:94:12:F6:3C:78:B1:1E:40:1C:35
Certificate issuer: /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial: 010D0C9F4328584555FD8C94A5BD677FED6AA360
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/21b5d73a-2fff-3d88-8a1c-f7f912d25992.roa
Signing time: Tue 26 Mar 2024 13:00:35 +0000
ROA not before: Tue 26 Mar 2024 13:00:35 +0000
ROA not after: Mon 24 Jun 2024 13:00:35 +0000
asID: 204857
IP address blocks: 128.254.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 01:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:55:fd:8c:94:a5:bd:67:7f:ed:6a:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Validity
Not Before: Mar 26 13:00:35 2024 GMT
Not After : Jun 24 13:00:35 2024 GMT
Subject: CN=5c410785-b1aa-45ac-aca3-c7becdcbecde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:72:b9:0e:39:3a:2a:95:f5:d3:c8:f9:9a:
d8:da:70:14:e4:0d:38:d8:da:24:de:5b:27:0c:58:
f6:ea:f7:73:68:15:d0:dd:82:c6:4c:aa:5c:3d:cd:
95:8b:84:83:1c:7c:cd:49:df:14:2b:6e:36:05:af:
06:9d:1d:f7:e6:b9:76:22:be:18:5f:ae:de:a0:f2:
7f:86:85:2a:9c:7e:8d:16:0b:6a:a3:7a:b9:b5:91:
51:e6:25:ae:cf:00:fa:8e:d9:32:90:ff:e6:04:62:
0a:a5:f4:35:6d:37:22:cb:06:0a:a2:df:77:19:0f:
27:42:ae:f4:d7:55:cb:29:21:95:f4:f3:a3:02:7a:
96:a5:d4:35:b9:af:2d:bb:e3:df:32:b0:ac:0f:52:
af:29:54:c7:71:3f:c6:3f:c3:b2:46:b4:a2:99:25:
5c:77:84:f6:1d:a0:b9:93:03:83:74:48:27:5b:2b:
2c:c4:00:6e:1a:ee:9f:37:99:5d:ad:71:d6:e5:67:
b6:6d:bd:72:8a:4d:a7:e2:ab:c8:18:f6:9b:20:27:
5b:e8:c2:ca:4e:ff:6a:c1:06:0e:dd:2e:4d:d2:4a:
fd:ec:01:42:ae:bc:76:af:f0:00:7f:1a:d1:d0:73:
6a:71:2f:24:7e:5e:4d:cc:47:88:3b:8a:de:73:57:
18:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:67:C2:2B:33:7C:3C:C2:98:94:12:F6:3C:78:B1:1E:40:1C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/21b5d73a-2fff-3d88-8a1c-f7f912d25992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl
X509v3 Authority Key Identifier:
keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:85:34:80:9f:52:92:a1:75:1b:42:6c:5b:8a:2f:db:b2:66:
5d:43:0b:d3:c5:32:52:f1:a0:ce:ee:b1:f7:da:b7:6f:10:be:
28:e5:13:cc:56:f2:86:a5:21:57:be:a2:63:05:70:e9:e6:2f:
8a:03:71:c4:14:10:11:a7:2b:55:61:5e:b4:58:a0:28:05:4f:
98:9c:22:25:bc:5c:86:cb:92:2c:c5:ae:90:d6:24:ef:9f:e5:
46:20:0b:4f:54:49:91:29:10:66:f8:6e:e4:6b:92:8b:72:f8:
b6:3a:3c:b8:aa:44:1f:ef:d2:f0:e3:9d:70:a0:cc:7e:71:01:
4d:5c:a8:91:97:a6:36:f8:80:41:81:92:1b:e8:90:bd:cd:5a:
22:ae:4f:80:3a:24:b1:40:bd:95:fc:9f:dd:90:02:d5:4b:78:
d1:0b:52:7c:f4:89:3d:8b:8e:b9:b6:a4:ce:0a:5d:a1:81:1d:
ba:72:3b:99:f8:1e:1d:a8:2c:18:30:50:3f:f3:34:d1:1f:f0:
a7:d1:76:a9:e5:76:48:81:69:e1:b5:e1:4b:93:67:a5:90:79:
e2:77:13:80:ed:99:04:bf:d7:46:b9:98:f7:74:09:c8:59:48:
5e:2d:0d:0f:56:79:d2:c7:4d:eb:0d:ff:e0:dd:8f:c7:7a:bd:
b1:1d:1f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:43:08 2024 by rpki-client on console-ams.rpki-client.org