Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b0fe8a7-6f11-380b-b3e9-f92499a74993.roa
File: 6b0fe8a7-6f11-380b-b3e9-f92499a74993.roa (raw, json)
Hash identifier: sBkYpaNEucy4Bp3rJjBICCYO5nE+yONpjs8ZHkUrnNQ=
Subject key identifier: 71:4E:E1:D5:38:38:8D:5F:D6:0F:A8:E9:83:82:E6:10:E5:5E:16:2A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DDC1B4AF55C607C8F3D800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b0fe8a7-6f11-380b-b3e9-f92499a74993.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:c1:b4:af:55:c6:07:c8:f3:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=01748fb2-bf35-4d2b-95d7-affcd887e684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:20:20:28:db:b7:08:2f:cf:6b:da:84:4c:04:
da:58:0b:45:0c:b4:11:68:6a:75:cc:16:c3:ec:0b:
18:60:20:95:10:19:66:d0:79:8a:95:4a:d2:d5:8a:
a0:96:55:70:37:29:84:75:63:c4:14:16:a1:49:14:
a6:39:1d:8b:8d:b2:02:2d:62:40:63:6c:a5:b7:95:
8e:9a:d4:a5:b1:d7:fc:65:48:fd:cc:8a:a8:98:66:
64:d7:90:74:44:0a:ba:ce:f3:7d:54:64:7d:37:ec:
41:4f:ea:ec:2a:cf:cb:cd:34:e6:3b:e1:38:79:ff:
84:b2:72:ef:18:d2:05:d1:97:7e:a5:82:6e:7c:2f:
3d:23:22:32:5d:97:68:0f:4e:3b:96:9b:09:8a:ce:
d2:a2:63:38:e1:69:8b:76:81:27:9a:aa:61:ab:1e:
19:ab:7a:b1:18:4b:80:5b:38:f8:76:4c:b0:92:af:
54:d7:99:9f:b0:9d:79:6d:16:6f:f8:ca:c6:84:06:
28:44:39:07:0e:7f:8a:47:60:04:82:4c:53:99:3c:
63:68:8f:d0:90:bc:8e:bd:24:85:29:55:30:90:4e:
f8:ec:3d:fa:0e:38:cf:15:7a:f5:92:e9:2e:77:f1:
5f:b7:2c:78:a3:7b:e3:19:37:b9:8c:26:9a:02:9a:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:E1:D5:38:38:8D:5F:D6:0F:A8:E9:83:82:E6:10:E5:5E:16:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b0fe8a7-6f11-380b-b3e9-f92499a74993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:98:7f:fc:92:ce:82:0e:55:11:13:d0:9b:d6:7a:57:cc:c0:
94:ff:ad:8d:ff:24:8a:08:61:2b:da:91:27:99:59:f6:3e:69:
41:07:b2:32:ec:72:fa:43:51:b7:54:c8:f9:9e:fd:dd:74:6e:
0a:a1:2e:85:08:2e:2a:f7:d7:a3:32:62:74:80:2e:a9:9c:65:
39:96:ee:4b:d1:92:2c:6f:90:41:ef:70:75:4e:d6:36:de:49:
43:1f:c5:cb:72:1b:3c:05:e0:8b:ae:04:4b:38:ea:79:04:63:
8c:5a:b8:3c:be:05:b3:fc:97:1d:a9:64:07:b4:e1:b4:59:05:
34:e1:7a:62:9d:64:42:a8:cf:07:73:a2:4b:85:e8:41:8b:8e:
a2:96:22:39:9e:87:91:40:c3:ef:88:fc:e0:c7:41:a1:03:c8:
7f:08:85:0a:21:ec:16:d5:9b:fe:85:67:15:22:25:46:ce:fb:
c6:a3:62:6d:68:4a:85:b2:a9:b0:8b:dd:d8:7d:06:0d:6b:4d:
08:8b:0f:07:a8:c2:06:25:a8:ff:ac:a5:d6:2e:3a:89:0e:83:
48:3c:4e:a7:50:c8:78:72:5f:f5:96:15:5a:4c:45:75:af:3e:
04:b8:9c:2c:0f:79:b4:02:a5:3b:02:97:d9:5e:1e:cd:fe:21:
19:e9:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:46 2024 by rpki-client on console-fra.rpki-client.org