Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/484766ee-3d70-3acb-9811-0423f2f585df.roa
File: 484766ee-3d70-3acb-9811-0423f2f585df.roa (raw, json)
Hash identifier: ybYh7qHCa+SqcrJbMBqwbObsTBr1w9Ye0eQ5pVHZNkU=
Subject key identifier: EE:5C:94:28:D7:44:B6:86:5A:1E:4A:59:74:A8:FB:2D:2E:F2:F9:6C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F37E277DB689462113EB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/484766ee-3d70-3acb-9811-0423f2f585df.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f3:7e:27:7d:b6:89:46:21:13:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c9530fe4-7bbf-4ab9-8d4c-7feb8120e8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:c1:bf:29:11:f5:13:4d:fe:f2:b9:1d:35:
36:a7:cb:63:2e:72:76:19:92:ca:25:03:e3:56:93:
46:2e:16:d7:8e:f1:05:ab:d3:d7:e1:8a:ef:92:ad:
35:97:0c:d7:77:b5:4b:a2:bd:37:6e:f1:22:08:eb:
a3:8e:71:17:db:bc:24:8d:92:6b:ce:bd:df:31:a8:
08:e9:0d:2e:d8:a5:e8:63:fe:be:34:ff:89:64:b4:
2a:0f:45:52:3d:2b:a5:86:be:e8:b4:53:ed:8a:fb:
0b:d2:fa:41:8e:d5:d6:bc:22:35:cf:6e:13:7b:36:
a9:e0:f5:48:0b:fb:fa:23:59:d1:91:54:1c:8b:5e:
03:bb:5f:8d:4f:c5:6a:13:13:1c:15:72:c7:10:e1:
5d:b9:d8:31:4b:2f:74:eb:00:3c:81:f7:f6:03:4f:
79:2f:c9:a4:4c:5f:3a:a1:89:d3:10:9a:46:9c:dd:
32:57:ff:84:41:6c:36:ce:e0:bb:08:b0:98:11:1b:
f4:80:9b:db:ce:97:71:73:5f:7b:03:84:bc:94:ea:
e0:a3:0c:9a:3b:72:85:f4:59:a5:bc:27:b5:1b:0b:
85:22:c0:78:61:d6:66:7a:41:64:42:6e:5d:06:46:
e2:05:f1:11:34:f7:d7:6a:2b:27:43:ac:32:bc:fa:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5C:94:28:D7:44:B6:86:5A:1E:4A:59:74:A8:FB:2D:2E:F2:F9:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/484766ee-3d70-3acb-9811-0423f2f585df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:32:e9:4d:86:f4:ca:51:ab:32:21:3b:42:95:c7:eb:26:20:
03:f2:e0:8e:41:ae:1e:ce:f7:3b:d1:06:10:bd:7e:eb:4a:e3:
60:4d:72:12:2b:1b:a1:1d:f5:59:d7:9f:39:41:ae:18:24:c2:
16:3a:c6:cd:82:c2:f4:37:82:27:e0:48:2a:b2:be:6c:17:3d:
f9:0b:cc:d1:87:97:91:23:b5:2e:98:7d:dc:41:1a:ef:b1:7a:
fe:9d:ad:dc:18:de:42:e1:22:b6:ae:e6:22:07:f0:36:a4:29:
6a:8e:8c:8d:ea:52:8d:31:9b:8e:23:55:ea:dd:48:4e:32:12:
85:c9:61:40:95:59:d7:65:08:5e:d2:9e:43:78:94:1e:0c:93:
61:60:06:00:70:00:22:eb:ee:49:cd:52:87:e4:48:fc:b8:32:
82:ba:d1:45:ca:0e:71:c7:0a:78:e0:96:22:67:ff:35:1c:8c:
04:2c:39:2b:be:f8:29:a8:3b:42:a3:29:b1:14:37:1f:66:cf:
17:b6:f6:89:de:b1:a2:9e:03:f3:34:46:74:5d:35:ca:0d:db:
f7:cc:ad:36:11:3c:fa:65:9a:4e:1f:75:18:d2:df:f5:2b:a1:
e7:4b:e5:fd:2a:b2:71:9a:3c:8e:b8:f2:01:80:b9:11:15:13:
f8:98:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org