Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c352806-4e6c-36bc-8b19-279abb99f468.roa
File: 1c352806-4e6c-36bc-8b19-279abb99f468.roa (raw, json)
Hash identifier: lbg9jGuX8anXbtOEfM7Ufa+a1U7dV5wZx8h9EtVy6pI=
Subject key identifier: 41:5E:D1:27:85:8D:1D:08:97:31:7F:17:FE:0C:E8:42:14:2D:76:89
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A070E92C09F830F2B66B740
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c352806-4e6c-36bc-8b19-279abb99f468.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:07:0e:92:c0:9f:83:0f:2b:66:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=27331bb2-1173-4484-b350-8a4f789052d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fd:4d:7a:4a:0a:c4:9c:74:86:05:48:9d:ba:
c1:59:0b:a2:a6:cf:bd:06:d3:e8:ce:81:6d:f9:1a:
6c:e8:6f:b9:f1:98:66:b6:d3:48:9e:3d:7e:7d:b7:
3f:25:d1:57:05:91:64:34:d0:3e:97:99:4c:80:fb:
46:e5:18:6a:c2:70:4f:3f:ea:a8:69:79:1e:58:f1:
f4:0d:da:76:91:c3:49:e3:c5:e9:8c:61:52:d9:62:
27:40:79:0c:20:27:a5:95:03:0b:9e:ef:ec:09:99:
ae:b3:f0:d8:db:66:59:88:d0:e2:dd:d4:9c:1e:3a:
a7:aa:7f:57:09:f0:8a:21:86:c3:f2:43:2d:2f:4e:
ae:86:fd:45:08:0d:2a:e4:bd:13:15:9e:e6:31:90:
cc:a5:85:77:86:3c:c5:e7:a2:86:3e:d8:6e:c9:75:
da:0a:5e:aa:8b:76:8b:80:ab:9f:2b:19:40:fa:d4:
14:3e:ec:c2:1f:55:68:ce:ff:5c:c4:00:77:75:52:
1c:d9:b8:d9:53:72:f5:37:f6:5a:12:b6:d9:12:e1:
a1:5d:86:43:4c:c1:79:39:6d:73:3d:af:5b:56:1e:
d3:e7:99:76:0a:e6:00:45:3f:cd:c6:f1:14:90:02:
eb:f3:cd:08:e0:30:37:ab:69:d5:52:8f:77:d3:51:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5E:D1:27:85:8D:1D:08:97:31:7F:17:FE:0C:E8:42:14:2D:76:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1c352806-4e6c-36bc-8b19-279abb99f468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:3b:9b:53:71:86:50:16:52:04:be:4b:8f:6f:f1:05:9d:4b:
84:c6:96:1d:06:87:8d:8c:4b:22:8c:52:97:92:f7:ba:97:79:
e8:d5:e6:f2:d1:86:34:e8:68:9f:c5:40:3a:be:2e:72:a1:39:
78:44:85:90:d7:1f:bd:d9:99:b8:d3:df:5e:d1:5e:e6:2f:03:
b1:7c:2f:9c:83:fb:e2:68:8f:98:52:ec:d1:ff:a2:23:da:fe:
fc:bd:13:50:cd:61:8c:c6:d8:ea:20:6f:5f:3d:a0:06:6c:89:
23:9f:f6:e6:e7:d9:24:23:44:ac:72:20:70:fc:95:37:f1:55:
44:6c:9a:32:19:75:da:32:ae:c4:85:b1:97:0c:74:77:ea:6d:
0d:de:c6:c7:1a:27:9f:31:55:f7:a3:cd:d0:3b:00:a6:bd:e4:
ff:c1:9c:20:96:b1:ff:a2:f5:29:ad:5c:a9:c4:56:70:a8:3e:
ac:e7:da:ac:3d:3d:43:b0:27:dd:04:b1:3d:df:dd:1c:6b:71:
19:61:b8:e1:17:2b:6d:9a:1d:9a:bf:cf:d2:e5:ba:1b:2c:da:
cf:59:cf:26:d1:25:73:29:55:be:84:4b:86:83:34:09:75:8b:
ba:60:07:d5:f9:47:32:4e:80:ac:4f:3d:b9:d1:80:1d:25:55:
6e:44:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org