Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4789af37-f52d-31bf-a1b9-7fc525a54a99.roa
File: 4789af37-f52d-31bf-a1b9-7fc525a54a99.roa (raw, json)
Hash identifier: Mhi/aqIOM3i5VueqZbNVDssUse5b5gBV1wMZfDvQRKk=
Subject key identifier: 0B:DE:C0:1A:5D:74:12:CF:E4:C5:3E:6D:C9:DC:91:25:1F:8A:2A:0E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1453950118558C6C9E6600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4789af37-f52d-31bf-a1b9-7fc525a54a99.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:14:53:95:01:18:55:8c:6c:9e:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=8594f445-a857-4b4d-bae3-f102a165d0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:db:ef:7c:bf:6e:f9:9c:19:52:18:83:86:
3b:9c:a0:aa:ed:74:be:76:60:ab:17:54:74:df:bc:
0d:4b:d4:ed:18:1f:e9:d9:a9:43:ea:9c:e6:8d:25:
4f:22:da:34:33:29:e8:3e:fd:bc:e8:f2:e5:90:82:
35:d0:f4:bb:95:e0:2a:e2:2f:2e:2d:11:39:60:ca:
27:6e:7c:1b:69:d5:62:b5:63:4a:e2:87:99:ef:e7:
95:77:2a:3d:29:d7:ba:2d:2c:64:02:b9:e9:95:86:
ec:9d:67:c2:2d:e1:ed:62:3c:b8:2e:73:4a:f0:45:
d6:bc:0e:2d:6d:c1:0a:cc:ff:59:0a:39:b9:ad:6d:
be:03:9b:41:bf:82:f5:c3:a2:19:77:9d:ae:ac:ae:
0b:c1:0f:00:5b:75:2d:ae:7a:f7:f4:e7:22:ec:b2:
3b:84:1b:42:4b:1c:ff:e9:2a:2d:be:50:ac:dd:39:
0e:79:e2:22:40:b8:01:21:97:eb:7f:61:49:25:a6:
ad:ab:39:b4:bd:a3:c1:a9:8e:fc:92:d5:d8:b1:ba:
06:46:09:4c:f6:ab:88:72:b0:5c:9f:ed:cf:f8:d1:
d0:a1:fa:60:3e:f1:04:78:e4:2c:ca:38:23:4c:8c:
9f:cc:17:bf:a4:35:45:e0:79:7d:8c:d3:d0:e6:33:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DE:C0:1A:5D:74:12:CF:E4:C5:3E:6D:C9:DC:91:25:1F:8A:2A:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4789af37-f52d-31bf-a1b9-7fc525a54a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:b1:04:73:6a:a1:a5:9d:5b:17:20:7f:5c:29:56:7f:45:b9:
ab:36:9f:c1:6e:71:c8:b1:ce:fc:ae:b0:8e:71:27:0d:dd:0d:
e9:89:5f:45:0d:14:bf:cf:1e:7b:84:a5:cb:96:dc:44:18:f0:
d5:7c:5b:1a:07:d9:78:bc:e1:1b:9c:57:9e:a1:e5:41:de:ee:
75:27:3c:9a:a8:aa:5d:0e:9c:32:d8:ba:d9:1e:36:79:92:84:
ee:6f:df:0a:e0:a4:13:6d:be:cb:f9:8e:e0:9f:3d:75:11:9d:
27:d2:70:26:bf:35:5b:20:bc:4e:67:b2:91:e1:f5:8f:36:08:
02:92:df:f2:8e:f3:3e:07:1a:75:e6:02:6a:f0:55:b4:e3:57:
67:1a:c0:c3:f3:91:f3:0f:3c:38:af:c5:ba:e7:25:8a:d5:c6:
b2:bf:e3:5f:99:81:34:88:2e:e1:5b:65:70:33:3e:4f:0e:94:
af:24:98:e0:1a:5c:fe:ec:db:24:12:d8:90:45:03:2e:b2:7a:
c9:74:c6:b5:81:db:7c:12:9d:04:d7:0e:55:30:ae:bd:33:6d:
44:ae:51:f2:40:b8:6a:65:ae:1f:42:ab:13:ad:c8:91:f3:a4:
6d:4d:01:87:37:88:15:f9:84:d5:bd:a8:1f:e7:6f:f9:01:cc:
7b:f9:07:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org