Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1f56b24b-fa34-3e33-81a1-312ff6fb96bd.roa
File: 1f56b24b-fa34-3e33-81a1-312ff6fb96bd.roa (raw, json)
Hash identifier: bcKgIMFRQr3qAeEQnQocvrVbGiUnH6aJK2kZn6CN6Xs=
Subject key identifier: 78:5A:B6:56:38:21:B6:D3:60:88:02:D8:C9:35:33:3A:2F:5F:11:4B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583FC4EBE4118ED28CDAC081D030
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1f56b24b-fa34-3e33-81a1-312ff6fb96bd.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Sun 02 Feb 2025 05:00:00 +0000
asID: 15169
IP address blocks: 142.250.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c4:eb:e4:11:8e:d2:8c:da:c0:81:d0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2025 GMT
Subject: CN=bf8864e4-f606-4973-9abe-9085c2bb8501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:5f:d9:4c:61:10:4d:ed:39:73:00:2d:f7:
66:93:39:4a:45:1c:e6:7a:6b:ce:24:64:da:d1:d1:
5d:db:be:fe:7a:b0:1a:48:bb:c4:c5:e5:47:13:79:
8c:10:8e:b8:24:85:ee:85:f2:12:3b:61:9d:67:0f:
6b:93:f5:64:40:c5:fa:32:f3:6e:ef:65:f9:c3:0e:
a6:11:55:6e:03:f3:34:62:9e:4f:5a:04:eb:c7:4e:
79:95:78:09:ed:0e:aa:2c:db:1c:9a:cc:e7:29:a3:
6d:7d:cf:4b:b9:a4:6a:cd:96:74:97:0c:d0:5d:0b:
7e:30:3c:f9:2d:74:5c:d6:c6:5a:db:bb:15:34:f0:
1e:4f:ef:32:96:16:3a:62:f0:b4:14:74:3b:83:51:
fe:76:ce:0b:ff:7f:a3:b4:75:88:41:28:0e:f2:96:
ee:56:a0:00:1e:e2:4b:3a:e7:e1:02:40:1d:8f:ab:
c1:85:9e:b0:a4:29:8b:03:12:45:8b:c9:93:fc:34:
a1:17:78:b6:74:17:fd:09:46:d0:76:d7:a4:33:69:
df:12:72:1b:08:65:43:c5:b7:8d:8a:08:fa:94:41:
65:0e:58:d0:3b:71:d0:04:35:2d:0f:81:dd:80:cd:
91:ee:f6:a9:66:20:d3:59:46:57:fa:6b:38:d2:07:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5A:B6:56:38:21:B6:D3:60:88:02:D8:C9:35:33:3A:2F:5F:11:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1f56b24b-fa34-3e33-81a1-312ff6fb96bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:41:4f:dd:93:f0:83:c7:95:7c:e9:d5:e8:27:f5:21:56:7e:
81:97:8c:08:8b:29:c5:d8:ec:03:05:81:d5:95:44:b8:8f:95:
72:63:11:59:70:2b:43:35:75:5a:8c:02:89:73:11:2c:34:c9:
6e:9b:ab:00:e7:53:77:c8:cd:6e:04:a6:5a:53:fe:3c:b5:dc:
a6:7b:83:c9:fa:05:26:6f:c8:01:27:88:c7:36:07:76:c6:b3:
11:9a:f4:a1:eb:5d:b3:89:32:ec:33:3f:a7:bb:b6:16:32:29:
76:6d:ce:9a:27:6a:d6:01:bf:4a:66:63:36:7c:33:ee:5a:07:
bf:c9:5a:32:be:b2:b2:50:b9:ee:15:1b:1f:d3:f3:bf:c9:98:
4b:ef:6f:af:6e:c0:ae:92:db:ec:4a:ee:42:c2:ef:b9:df:8e:
27:9e:d0:ea:2a:4a:50:7e:c2:52:0a:ed:d3:40:28:03:38:14:
fb:df:63:30:88:8c:15:71:37:13:d9:ed:17:c5:23:a3:2e:5e:
a6:fc:1f:d2:ca:3d:93:a0:f0:73:ad:92:db:d1:4c:d9:10:2d:
fc:47:4b:1c:18:6b:f9:21:c3:44:f7:b5:f3:39:13:fb:5e:38:
3c:7c:e5:20:52:d2:e4:cc:60:51:d9:32:3b:e7:1f:58:a0:33:
d9:b0:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org