Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a6c6002-eb9e-339a-b890-ed84c1c48c31.roa
File: 2a6c6002-eb9e-339a-b890-ed84c1c48c31.roa (raw, json)
Hash identifier: qNAfm5wvwOpOzox5WlUqCSiKROTdiFcQfSP0H87a8aw=
Subject key identifier: D7:80:75:8F:9D:78:92:B6:7C:20:0A:2C:BC:CA:22:65:DC:E7:86:89
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285842B06645AE732E6B55ADA30C00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a6c6002-eb9e-339a-b890-ed84c1c48c31.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 396982
IP address blocks: 74.125.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:66:45:ae:73:2e:6b:55:ad:a3:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=e8db3f25-0a8c-4a67-9f46-07b718ed8c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:ed:33:f8:8d:ae:13:a7:99:e2:36:ee:f3:
42:8c:bf:12:ec:cf:83:bd:ce:0c:a9:19:0d:22:3a:
fc:d1:1b:36:f0:af:d1:16:8a:70:26:cd:6c:6e:d5:
de:94:83:3f:ca:70:ec:04:78:aa:39:de:23:89:f6:
af:ab:47:c9:d9:1b:f0:b4:89:44:b3:29:c5:5e:8e:
b9:bd:79:54:dc:f8:9c:16:ae:7d:fa:81:2b:1e:e9:
8b:04:52:81:1c:4a:0d:01:3f:28:42:fe:8f:57:5f:
26:f2:d9:2e:4e:59:77:a8:a3:d4:57:97:05:3b:50:
0c:e5:aa:a3:70:ff:12:c6:ec:f5:ad:a2:34:1a:d4:
cc:30:cf:cb:9c:66:80:78:56:54:9b:63:04:03:f6:
0d:54:7a:2b:33:5d:a1:27:b7:af:cd:b2:c3:ba:97:
3f:03:e6:34:c0:4b:e6:37:37:42:f3:cb:8b:02:47:
0f:2f:f5:e6:32:d6:cb:45:e5:37:20:21:2f:52:8b:
17:c4:a2:4b:65:25:8b:b9:3c:bc:51:6e:0c:63:6c:
7a:1c:c5:79:35:fd:cd:1b:96:90:c1:ef:ec:b8:e3:
09:53:8b:e4:f8:30:a4:ee:62:50:fb:35:fc:7e:f9:
30:bd:79:e4:d8:cb:4d:30:57:19:06:00:33:80:4b:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:75:8F:9D:78:92:B6:7C:20:0A:2C:BC:CA:22:65:DC:E7:86:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a6c6002-eb9e-339a-b890-ed84c1c48c31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:32:30:85:7e:a0:6d:7c:37:37:cf:d2:33:c2:cf:78:83:27:
6a:cd:89:1a:4c:7b:df:20:2d:f7:e4:80:09:16:48:d9:1b:1f:
cb:89:82:4d:75:d7:6b:63:f3:f5:93:05:3a:64:3a:d6:35:60:
75:1b:ee:3f:9e:68:7c:46:72:dc:44:00:53:be:8e:9a:dd:96:
14:29:11:76:e1:39:47:96:ef:e4:f1:c6:98:a2:a4:27:c6:06:
46:27:85:b8:1c:ff:9c:03:3c:ff:61:43:1b:e9:50:d3:a7:ad:
16:3b:b1:c3:94:3b:d2:7e:56:09:fa:41:a5:cb:9f:6f:aa:65:
b9:e3:39:d1:cf:a1:f5:c7:1e:e5:33:d4:0a:2e:ae:c0:7b:72:
9a:b7:02:de:66:5a:fb:47:4c:69:1e:1e:85:98:42:c5:ee:8a:
76:0e:42:56:fd:0f:0a:ff:6f:8f:e7:36:ff:1f:8a:86:0d:61:
87:76:80:70:8d:ef:9a:bc:f7:c7:82:97:30:08:a2:69:53:2f:
59:85:4c:3b:5e:80:18:49:ae:05:37:fd:22:79:17:b0:95:90:
ed:06:14:c3:8d:49:ac:64:c8:b1:b8:b6:53:d4:a8:8e:1b:c3:
7f:9a:e8:2b:37:87:55:39:ad:06:59:35:5a:93:d6:c0:a5:62:
4c:8c:84:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:23 2024 by rpki-client on console-fra.rpki-client.org