Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74a1e58c-7297-325c-b39a-1cdb004cb2c1.roa
File: 74a1e58c-7297-325c-b39a-1cdb004cb2c1.roa (raw, json)
Hash identifier: QYtKxh5KuDFNn0P4U8xvr51mHxmT/Qh+/jNX5IM44Oo=
Subject key identifier: 06:DA:9D:7B:80:A3:B6:48:0B:C2:75:2C:14:F9:87:61:56:C6:A4:A5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A12F35BB6E7AE9A243C0880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74a1e58c-7297-325c-b39a-1cdb004cb2c1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.114.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:f3:5b:b6:e7:ae:9a:24:3c:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=96a5b590-6f51-4860-aae3-c881b611b16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:0c:07:62:a9:58:6d:c8:90:2c:52:f7:68:
93:10:03:0f:0a:a1:eb:95:44:09:a9:0f:e2:81:73:
1f:85:20:78:9b:c7:d5:e5:6a:2a:42:79:b4:42:b6:
a6:68:e7:ee:3f:78:5a:05:fa:6c:61:7d:d1:72:ed:
0a:a2:c6:41:85:66:58:f0:2c:d0:ab:45:77:3e:52:
f2:8f:9f:3a:2b:c1:38:1f:ef:5c:7c:b5:06:a8:3b:
01:f9:33:cf:12:70:0d:d9:14:1c:d1:b3:7d:13:8c:
21:0b:d1:a1:1c:84:40:53:b2:88:ef:2b:14:bb:61:
e8:ef:a1:31:bf:6c:5e:f3:65:6c:08:bd:ea:0c:77:
d5:91:5f:0f:8f:44:f0:4c:cb:43:ae:91:b3:0e:b8:
86:be:bc:82:ca:00:55:6f:09:07:1c:0c:a4:36:b3:
5a:bc:00:d0:7d:9a:f9:6d:a1:e5:51:57:8d:5e:13:
69:a7:5a:33:2c:e8:d8:7b:75:4f:84:f5:c4:b5:51:
03:7d:d6:09:e0:5d:49:f9:b7:ac:10:5b:4e:fc:67:
2c:f5:2a:bd:6d:cc:77:7b:79:32:d9:f0:49:e4:e8:
1d:ff:b5:5c:08:52:b5:6e:c7:d5:79:14:3d:e3:ef:
db:b2:a4:1c:33:e3:1c:e4:04:0e:8c:c4:4f:28:42:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:9D:7B:80:A3:B6:48:0B:C2:75:2C:14:F9:87:61:56:C6:A4:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/74a1e58c-7297-325c-b39a-1cdb004cb2c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:b0:20:e5:4e:66:c1:27:23:e2:78:f0:ae:63:2c:14:1b:b6:
e4:6b:f5:03:96:60:b4:d0:94:4f:24:d4:a4:d1:55:85:7b:fe:
f3:25:08:d1:48:01:9c:6f:86:80:89:42:66:af:29:be:5a:a2:
3e:46:39:d2:74:fe:2e:af:b4:1b:d0:61:a3:37:d9:55:e2:45:
45:5f:2b:2c:5d:8e:b4:49:c8:ff:97:4f:44:90:12:c0:49:9b:
75:ce:6f:b6:89:34:d9:d9:ee:b2:84:b1:38:18:be:f9:3d:8f:
5e:be:9a:d4:ae:b5:6b:2d:f6:72:d9:bb:0c:c8:d9:48:39:4e:
8f:03:3b:51:90:78:d4:bf:d8:34:49:65:8b:c7:96:e4:94:47:
ba:65:8e:a2:82:c3:e0:9c:65:f6:2a:47:76:4f:85:29:74:0b:
05:3f:a4:17:fe:a5:ee:6f:34:ea:cb:59:21:6a:4e:b0:bb:9d:
74:5a:db:ba:8c:0d:b0:7a:2b:35:7b:82:e0:58:db:90:57:3f:
08:d3:54:c7:e3:9e:fa:5e:a3:28:a3:71:f6:6a:06:88:14:ab:
91:c6:97:86:af:d4:76:d6:b4:98:9a:ec:da:11:09:35:20:c8:
12:95:1a:fa:32:6b:ac:39:3c:00:7c:ac:69:d2:26:04:7a:32:
e7:e0:ae:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:46 2024 by rpki-client on console-fra.rpki-client.org