Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/772e47b4-787b-34d1-8244-68e341e2f67f.roa
File: 772e47b4-787b-34d1-8244-68e341e2f67f.roa (raw, json)
Hash identifier: qwDQWKY78zKuLsaLDY++mNlU60WCHqIaHFeN8U9q66E=
Subject key identifier: A8:B0:1E:69:0F:59:C9:20:52:0F:44:40:D2:3D:C4:CC:77:E0:78:9A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F440E7FCBBEE95712E1E40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/772e47b4-787b-34d1-8244-68e341e2f67f.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:40:e7:fc:bb:ee:95:71:2e:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=04b820be-9ec5-4559-bacb-55abcaeed868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b4:ab:7d:9c:88:e9:e7:da:49:fe:84:85:32:
8b:04:ca:97:c1:0d:b5:ee:02:e3:a8:22:ae:1b:1e:
ab:f7:1a:ae:79:8b:d7:a2:59:b2:64:ac:c6:c3:c4:
13:02:a6:79:9e:e0:4c:f9:f9:8d:06:fa:ff:54:6a:
00:9f:f2:f3:ce:ed:c0:b4:ea:9b:06:70:33:18:ee:
7d:ad:5a:58:de:0a:9d:29:68:95:aa:92:f4:74:fe:
48:76:d0:45:3d:a8:21:7c:f6:b3:bf:42:24:f9:85:
be:ff:c9:7a:ea:7a:c3:54:ac:e7:5f:f5:6d:f8:93:
04:45:93:20:d5:82:3e:90:68:35:af:9f:be:33:9c:
5e:92:28:7e:5b:10:d6:de:bc:2a:1c:16:fe:76:45:
b8:39:73:c1:b2:1a:91:de:f6:27:7c:98:44:75:dd:
8c:31:56:35:01:50:c5:91:61:f8:3d:22:78:65:0f:
29:32:f2:9e:1e:53:a8:a1:6c:67:03:57:86:c5:00:
82:30:61:bc:95:fd:a3:74:1f:5f:9e:c9:55:95:04:
7a:b4:cf:a6:b4:95:06:cb:c6:0f:50:49:e1:82:9a:
79:4d:54:28:8f:a2:06:a5:02:9b:de:63:40:72:cd:
0b:91:7a:70:ae:1c:0d:85:09:c4:21:5b:bd:22:27:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:1E:69:0F:59:C9:20:52:0F:44:40:D2:3D:C4:CC:77:E0:78:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/772e47b4-787b-34d1-8244-68e341e2f67f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:6e:17:aa:c6:95:20:15:35:f0:e7:ad:aa:d0:3d:63:08:f9:
32:2a:54:53:1f:cf:64:a4:1f:b5:ea:47:ad:47:e3:8b:bf:b5:
39:c6:bd:2e:0d:4b:3b:1c:d8:00:37:43:8f:11:32:60:2b:77:
6b:f0:2b:9b:f5:a8:1d:75:ba:eb:71:40:b5:ee:58:a6:1f:dc:
06:06:80:87:34:78:8d:05:ff:be:7c:09:7e:fd:87:1a:7b:dd:
83:03:7d:36:03:ed:8a:21:4d:b7:6b:61:32:70:ce:46:c2:4a:
fa:c6:20:c5:90:f9:3e:e3:29:3b:15:f0:fa:5b:06:6d:7f:93:
49:97:f8:fc:4d:f7:f0:ad:9a:34:17:57:6e:36:7c:71:0f:eb:
00:5c:34:a6:f1:7b:10:e8:cf:17:7b:67:ca:bb:a7:70:54:b6:
22:59:81:00:9e:1c:4c:c5:3b:5e:fc:51:5e:11:00:9f:89:4b:
37:27:23:19:ac:80:68:15:c7:99:d6:a6:5b:80:3f:d5:48:37:
d1:75:de:44:6d:9b:30:68:81:28:84:2f:7f:11:15:b2:1a:93:
4d:16:35:90:6e:4e:b2:57:5c:84:e4:d5:6d:b9:2a:e1:66:05:
97:a5:c2:51:b7:0e:b9:19:e5:68:05:32:6f:28:c3:8f:ca:91:
83:13:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org