Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b02bea7-829b-345a-a20c-c7cf5e0516c0.roa
File: 7b02bea7-829b-345a-a20c-c7cf5e0516c0.roa (raw, json)
Hash identifier: z1vGILrtx3lEN1BAJvZwF3kPOR9STdUpBwqtYtuU/Bk=
Subject key identifier: 75:5E:29:66:4E:51:A0:EB:7E:47:E8:BE:38:FF:A7:18:DD:7A:77:E3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A09A72E3F689F57CBF86B08
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b02bea7-829b-345a-a20c-c7cf5e0516c0.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:09:a7:2e:3f:68:9f:57:cb:f8:6b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=fd86f9ad-a1ed-41da-946c-b52b84b1f266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:15:93:a1:c5:63:3c:b5:7c:32:4b:49:1d:
0a:a5:2b:12:9b:8e:c6:04:d3:25:d5:c2:b0:f0:ab:
57:24:b5:85:f9:8d:96:bf:5e:93:14:50:c2:f2:75:
fc:21:ed:d1:73:d6:96:fc:4f:21:a2:52:1a:58:4a:
f0:0e:b5:14:8b:f9:48:d8:28:7a:d1:9d:df:bb:4d:
f7:55:05:27:48:30:84:ed:0d:99:d0:bf:bf:35:7d:
95:20:4d:2b:ad:07:1a:51:b6:f4:b2:9f:09:83:af:
67:37:c0:80:15:15:ba:b3:f3:fd:f9:50:3c:f7:a3:
6c:47:15:35:6b:c6:2d:68:25:dd:73:da:ce:57:58:
0f:51:20:b9:50:f7:74:b0:e6:b6:b8:25:40:4c:1d:
9e:19:0c:7b:bc:fd:04:ab:55:ef:f5:da:1e:06:6c:
4a:b6:ee:6a:69:f6:66:16:b9:80:87:b6:ca:69:30:
ee:91:b9:17:4c:93:7a:77:1a:2b:7d:aa:2a:9e:72:
b6:a7:34:e4:f9:e3:7a:2a:f0:c9:52:94:ea:28:a7:
95:5c:37:9f:2d:60:ea:27:44:00:57:fc:b6:72:91:
9b:16:47:e9:88:fe:22:e4:9a:cb:de:4c:59:22:43:
92:35:01:50:83:54:99:e4:d7:6b:c3:24:6c:5b:44:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5E:29:66:4E:51:A0:EB:7E:47:E8:BE:38:FF:A7:18:DD:7A:77:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7b02bea7-829b-345a-a20c-c7cf5e0516c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:14:76:2a:05:1d:56:48:00:f3:34:03:44:8d:17:46:47:39:
86:89:6a:08:62:f9:f7:0e:97:21:10:3e:19:5b:c8:55:18:91:
86:b1:a0:fc:87:5b:8e:0f:17:14:9a:85:07:a3:05:74:a9:41:
e1:0e:38:81:0a:0e:d9:f8:8f:63:74:80:fe:89:c8:2c:d9:14:
07:c8:07:3f:2b:be:9d:84:03:bc:8f:bb:c7:a0:6f:ef:78:0b:
27:04:63:e9:c6:41:ef:1b:3b:92:94:99:77:b7:ec:2e:a0:cc:
0b:d6:b2:3d:95:ed:fa:1b:5d:e7:16:6b:45:92:a5:2a:45:9f:
a9:9a:ca:09:81:25:e3:45:09:fd:f4:d2:73:e1:6a:7a:26:d0:
61:bc:1f:78:92:22:3a:55:a6:12:4c:87:df:9f:d9:ee:0d:77:
32:80:bb:36:e3:59:c0:11:68:d3:d2:41:f0:af:fd:17:69:b1:
bf:0f:07:c1:bc:d4:59:aa:ec:fc:eb:ac:4e:b1:72:c3:78:68:
54:ad:32:bc:f3:d3:df:b3:e8:fc:3f:09:58:ba:c8:4d:29:a1:
fc:e1:bd:4a:11:b7:27:3b:5e:c9:68:4b:82:ea:2a:7a:7c:03:
c7:29:37:86:ab:be:75:c1:ac:b3:86:75:1b:8a:77:9c:93:4d:
44:3e:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:39 2024 by rpki-client on console-ams.rpki-client.org