Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47e9e261-c0de-3ae0-be50-d890e9e925e0.roa
File: 47e9e261-c0de-3ae0-be50-d890e9e925e0.roa (raw, json)
Hash identifier: 58ixAK/+/wTshCqbsm3uwNkqow8xvCfRqOhGOpBJKF8=
Subject key identifier: 6B:4D:C3:29:76:DD:78:DE:C3:89:7E:48:29:31:8B:51:E8:F6:06:1C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0C958324507C796F043A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47e9e261-c0de-3ae0-be50-d890e9e925e0.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:95:83:24:50:7c:79:6f:04:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ad31d9ea-de92-4ed5-a6c0-52eecbea92dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:c6:29:01:de:69:6f:4e:31:1d:9a:03:33:
c1:d5:89:a2:8e:a1:39:da:f7:e5:26:21:9a:ad:3f:
c5:e3:76:27:6a:7d:5b:fd:2f:83:ab:7d:2b:68:ae:
96:25:ba:72:b1:ec:37:b9:6c:32:f2:e1:d6:ac:5b:
82:df:58:98:04:90:ed:47:78:b6:ee:d7:2f:a4:da:
5f:af:d8:48:7f:31:e6:88:47:a1:f0:50:46:a1:18:
d4:f6:87:14:50:61:e7:53:35:88:a4:8d:74:61:77:
f7:dc:4b:67:f3:7b:33:22:81:c9:04:aa:15:ad:99:
30:3e:68:ea:b4:1d:e4:c6:c9:8e:c2:d6:1d:6a:ac:
87:ed:1d:67:94:10:c7:47:d3:de:d9:19:f5:0b:7e:
12:df:6b:90:59:1f:76:f5:27:37:01:95:2e:a1:9b:
45:c5:26:2a:84:d4:c0:2f:e4:fd:9e:59:19:d8:56:
56:6a:e0:c2:c7:34:2a:ee:ef:8c:8e:ab:b4:8a:04:
fb:7f:e9:87:3d:46:45:0e:61:55:37:d4:2a:ef:af:
e6:82:76:d5:86:bf:70:4e:00:b9:89:72:68:e2:b5:
7f:b5:c7:df:e8:6f:3b:03:0f:2d:6b:0b:9d:d6:cb:
1f:cb:e0:37:c3:6a:7d:47:3b:49:69:ca:04:be:27:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:C3:29:76:DD:78:DE:C3:89:7E:48:29:31:8B:51:E8:F6:06:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47e9e261-c0de-3ae0-be50-d890e9e925e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:6c:d5:63:aa:f3:d8:08:11:e2:0e:22:00:33:3a:6d:b5:89:
d3:d0:08:f5:01:c7:6a:fa:99:80:2f:e7:0b:6c:9b:3b:a6:58:
7d:bb:09:0e:bb:15:2a:0d:8e:6a:73:8b:41:97:70:13:d4:36:
82:b7:e5:e5:df:f5:20:5c:f8:c1:12:c5:55:42:3e:f2:5e:60:
f4:38:ed:13:d7:1b:22:73:3f:c2:5e:77:64:bc:96:41:4f:d5:
2c:12:a6:6a:82:57:d4:c5:56:68:1a:9d:bf:37:47:f8:de:45:
5e:83:8f:95:05:08:9f:06:e6:20:d0:84:23:17:9f:c7:2d:c0:
de:f7:06:57:a9:9b:5c:e3:29:52:45:f4:b4:46:cf:08:8f:35:
61:2d:4a:14:4e:e0:da:60:4f:a5:5c:8d:ee:3e:6d:dc:c1:56:
42:2c:08:ce:49:ea:ab:c3:ae:1b:75:aa:09:d0:b1:69:6e:a8:
b5:a9:09:be:cf:41:81:6b:80:9d:a2:1a:db:af:9b:55:a2:65:
64:78:1f:15:c4:68:75:87:5f:b6:35:2c:a5:72:6a:2a:d2:f6:
a1:24:6e:a0:ea:83:fd:d0:b2:cd:ca:48:6c:01:58:75:4e:90:
12:02:93:32:f8:02:cc:4a:44:20:19:a1:fb:94:6b:42:36:3d:
d6:06:b5:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKDJWDJFB8eW8EOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YWQzMWQ5ZWEtZGU5Mi00ZWQ1LWE2YzAtNTJlZWNiZWE5MmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop/GKQHeaW9OMR2aAzPB1YmijqE52vflJiGa
rT/F43Ynan1b/S+Dq30raK6WJbpysew3uWwy8uHWrFuC31iYBJDtR3i27tcvpNpf
r9hIfzHmiEeh8FBGoRjU9ocUUGHnUzWIpI10YXf33Etn83szIoHJBKoVrZkwPmjq
tB3kxsmOwtYdaqyH7R1nlBDHR9Pe2Rn1C34S32uQWR929Sc3AZUuoZtFxSYqhNTA
L+T9nlkZ2FZWauDCxzQq7u+Mjqu0igT7f+mHPUZFDmFVN9Qq76/mgnbVhr9wTgC5
iXJo4rV/tcff6G87Aw8tawud1ssfy+A3w2p9RztJacoEvifB5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGtNwyl23Xjew4l+SCkxi1Ho9gYcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDdlOWUyNjEtYzBkZS0z
YWUwLWJlNTAtZDg5MGU5ZTkyNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvsTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJs1WOq89gIEeIOIgAzOm21idPQCPUBx2r6mYAv5wtsmzumWH27CQ67
FSoNjmpzi0GXcBPUNoK35eXf9SBc+MESxVVCPvJeYPQ47RPXGyJzP8Jed2S8lkFP
1SwSpmqCV9TFVmganb83R/jeRV6Dj5UFCJ8G5iDQhCMXn8ctwN73Blepm1zjKVJF
9LRGzwiPNWEtShRO4NpgT6Vcje4+bdzBVkIsCM5J6qvDrht1qgnQsWluqLWpCb7P
QYFrgJ2iGtuvm1WiZWR4HxXEaHWHX7Y1LKVyairS9qEkbqDqg/3Qss3KSGwBWHVO
kBICkzL4AsxKRCAZofuUa0I2PdYGtR8=
-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org