Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/80844b6c-bd83-3316-8861-4d0f0a2f021b.roa
File: 80844b6c-bd83-3316-8861-4d0f0a2f021b.roa (raw, json)
Hash identifier: CgOAD852niBSX+FqV8urmdfEAJcRhqEf3+vbRQFaRYI=
Subject key identifier: E5:4E:AC:48:D9:EF:14:64:02:61:7C:B3:01:AE:17:41:C2:FD:1B:39
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583F5FB8C5E9FC55C9BFF86CEC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/80844b6c-bd83-3316-8861-4d0f0a2f021b.roa
Signing time: Sun 25 Sep 2022 12:00:00 +0000
ROA not before: Sun 25 Sep 2022 12:00:00 +0000
ROA not after: Sat 28 Dec 2024 05:00:00 +0000
asID: 15169
IP address blocks: 142.251.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5f:b8:c5:e9:fc:55:c9:bf:f8:6c:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Sep 25 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2024 GMT
Subject: CN=c6282927-ed33-4bf8-94f6-662d4789741a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:03:2c:b9:c2:f6:db:c6:37:25:d2:f8:fe:
f9:9b:33:c8:35:5d:4f:63:ec:45:07:f9:52:2b:18:
71:e9:d0:ab:94:99:f6:dd:f9:23:9e:88:29:3a:a0:
0c:4e:41:ff:7e:3d:93:3d:22:21:e9:ba:03:62:32:
db:a8:d3:48:63:ac:35:4f:9b:e8:27:d8:9c:6d:cc:
67:54:2c:ac:8e:f1:cd:72:50:47:f6:5c:0a:c8:a1:
ec:e9:11:87:d2:d4:00:4d:c4:7d:80:41:45:18:30:
83:b7:4e:10:6b:a6:69:b0:37:d1:3b:40:51:fc:dc:
30:33:08:5d:bb:d4:4a:43:91:aa:3b:59:33:9a:aa:
a6:80:a9:e6:f5:34:5a:35:15:75:4d:b9:e4:19:a4:
07:24:47:13:1c:60:cf:17:be:c8:1f:d0:a9:e3:09:
b8:28:6a:be:87:d3:08:52:53:6d:35:ab:ca:bf:83:
2d:f7:ac:a9:2c:88:66:ed:5c:b0:64:a6:3c:45:4e:
57:1b:42:e5:8c:8d:22:9a:76:10:11:a2:18:5c:b5:
06:ff:56:95:4e:53:c1:a6:bf:be:af:d6:f8:5e:fd:
19:40:55:2f:9c:3f:39:4c:d6:3a:92:2f:f7:59:84:
6c:73:f5:79:4e:33:ca:3b:ee:d1:29:4c:f6:c7:b8:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:AC:48:D9:EF:14:64:02:61:7C:B3:01:AE:17:41:C2:FD:1B:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/80844b6c-bd83-3316-8861-4d0f0a2f021b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:c8:97:ac:16:61:25:02:14:f2:f3:a1:5e:bf:9f:96:95:dc:
8e:f2:ae:f1:42:a8:c8:b8:d2:43:03:30:9c:a8:21:1b:b4:74:
f9:c5:59:cb:c6:82:28:84:d3:87:3e:4c:65:fd:aa:fa:e9:e2:
b7:9b:6f:50:4e:bf:93:18:6e:6c:a0:49:35:b6:57:46:08:4e:
0d:ea:f7:24:a4:1c:55:1e:80:6d:4c:e0:1a:66:86:34:16:fb:
8a:b1:c7:63:21:6c:63:32:2a:f1:ef:6d:94:9e:0a:e3:fe:b0:
3b:eb:ae:77:fd:2a:1b:46:86:d7:67:26:d7:3b:d4:b5:40:d8:
52:84:47:6a:0b:84:c4:8f:2e:bb:5a:6d:ee:e9:0b:06:da:ba:
74:6e:50:27:ca:39:a7:82:9e:b1:53:1d:96:55:8b:0a:a9:d5:
c5:96:56:27:75:e2:56:f6:05:e5:9d:4a:04:53:82:41:a7:d4:
6c:c5:18:3e:f8:53:8e:80:fa:f7:b5:38:e4:d3:b1:a1:ea:60:
50:e7:eb:7a:92:1c:53:83:8e:93:87:41:b1:6f:3a:90:12:0b:
ef:1d:21:cd:03:50:19:cd:e7:09:21:a0:21:f6:8f:4c:2b:37:
dc:64:03:29:78:ea:d0:71:e0:56:f3:e5:d3:f6:5b:02:b3:b5:
60:92:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org