Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/740c026a-c707-3492-85c8-4ebe209a66e6.roa
File: 740c026a-c707-3492-85c8-4ebe209a66e6.roa (raw, json)
Hash identifier: yRaau9PawuxGd3RbvWYR+VS0hQygRJWdZ0zKNb8qte8=
Subject key identifier: F9:E1:F5:B1:81:32:62:1B:A5:1D:CC:23:01:8E:CD:C3:27:B7:93:7E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EF886D6692BA234F247680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/740c026a-c707-3492-85c8-4ebe209a66e6.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ef:88:6d:66:92:ba:23:4f:24:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2993ee0c-d237-4339-b661-ca6e7663427c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:22:91:cd:6e:ca:67:7a:78:08:b8:0c:3a:
be:fc:28:41:8f:1e:5d:a3:cb:48:c6:f0:76:bb:00:
9c:f0:43:dd:89:61:85:28:b6:88:4d:6a:52:30:8a:
76:56:b1:dd:6a:4f:57:a6:fc:51:d0:05:8e:b2:fa:
d8:47:10:1c:24:bf:77:6a:b6:f9:29:54:cd:bd:e8:
52:34:c5:8f:64:4a:cf:30:7e:a0:6e:2a:f7:b8:a8:
62:c4:b7:0b:eb:d1:b8:ac:5e:2e:ba:68:32:db:e4:
55:34:66:77:4a:21:09:85:fc:99:ea:ee:1a:4e:2f:
ff:32:78:f4:2b:fd:2e:26:75:ba:df:3d:64:27:52:
2d:ee:a9:9d:20:79:3f:3c:35:da:e6:e7:34:48:a3:
26:64:4a:06:b5:96:8b:75:9f:17:d1:98:09:b0:dd:
8d:ab:b5:5a:8d:bb:f2:a2:74:38:25:0f:46:29:52:
51:25:e4:a1:36:c4:d8:d0:ae:0e:bc:3f:51:0d:8f:
e3:4f:2d:fd:47:05:ce:e7:ed:77:1f:3b:d6:58:5c:
d7:15:81:a3:3d:f4:06:ee:23:82:a5:b6:f2:c5:b3:
a8:1c:75:d7:a3:a4:d7:a1:65:fd:ba:51:d1:2a:ca:
5f:62:a5:e5:eb:be:14:d4:07:4b:c5:c3:91:80:b5:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:F5:B1:81:32:62:1B:A5:1D:CC:23:01:8E:CD:C3:27:B7:93:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/740c026a-c707-3492-85c8-4ebe209a66e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:88:bf:89:db:b1:d4:b1:b0:19:b9:9c:ad:b6:5a:ea:b5:4b:
8a:ad:e5:7f:f8:0c:b6:78:72:dd:51:da:93:33:de:f7:9e:68:
f2:e9:88:95:a8:92:1d:d1:1a:7e:51:3e:e6:1b:5a:cb:a1:50:
00:67:1a:98:f7:ec:9b:47:51:94:46:0e:cf:60:a2:2a:29:ea:
9d:c1:79:11:52:a2:5c:db:48:b2:6b:b5:e6:ca:d2:4b:9d:af:
cc:c6:49:47:eb:12:0e:14:1d:69:e6:3e:d1:61:33:49:fc:93:
c9:f0:a1:3c:c3:0f:73:25:96:ff:71:d3:cb:da:a9:04:9d:7b:
9d:f3:59:aa:4a:f9:22:a8:23:6e:1c:2a:aa:6c:b3:df:20:e3:
52:a2:3e:59:08:ed:d7:df:f0:e3:91:42:44:0e:32:fe:fb:d8:
9e:4c:20:3b:50:23:0d:bc:be:dd:4a:a0:6c:76:13:6c:59:fb:
1f:a6:4c:a6:8c:b1:df:43:fa:87:07:e5:9f:17:38:f0:50:65:
60:18:6d:16:d2:0d:19:13:40:39:2a:07:db:0c:dd:42:2f:79:
23:88:bd:69:a8:1f:3a:d5:dc:64:3c:52:f1:98:3a:80:bd:03:
eb:a3:e4:8a:b7:39:f0:a7:7d:94:03:c7:f5:fb:a6:89:71:5f:
15:95:f0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:39 2024 by rpki-client on console-ams.rpki-client.org