Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82f98770-2fec-3612-9492-8034c3d8a26a.roa
File: 82f98770-2fec-3612-9492-8034c3d8a26a.roa (raw, json)
Hash identifier: Z6WUFiUeVQb/Zy7JnZGE4G659hNSlpgJSsPcNnmoBtI=
Subject key identifier: E6:49:E8:9B:B2:62:A0:98:FB:3D:A7:05:16:85:AD:54:E6:4D:46:86
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A08EE01B364320C867229C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82f98770-2fec-3612-9492-8034c3d8a26a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:25:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:08:ee:01:b3:64:32:0c:86:72:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=a8927e66-60d2-4776-996b-3de78f97baef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:58:05:68:ba:c2:0a:03:a3:24:5f:0a:dc:79:
96:8b:fb:cb:1d:d4:24:e8:f7:59:11:2f:4e:a7:b9:
a5:70:53:11:18:f1:e3:c6:b8:dc:e6:7e:7a:45:dd:
d5:6e:5b:8e:86:9a:ab:a3:eb:1b:5c:e8:e9:da:04:
d8:98:c7:50:23:23:c5:88:76:1f:02:e5:32:7b:39:
47:88:40:2c:e8:c6:c1:d3:cb:94:ef:35:c4:fb:24:
08:94:40:4b:93:85:d1:a5:95:30:6e:39:30:af:d8:
9b:09:85:cc:c7:fa:81:2f:9d:0b:00:c2:3d:0e:ca:
74:75:43:87:7c:a9:c0:53:de:00:d1:03:b5:e6:cd:
ee:34:a5:0a:79:e8:89:5c:2f:91:a0:78:22:f9:42:
df:e4:f5:f1:81:f5:55:0f:3e:08:41:d1:bb:8d:b7:
13:18:f5:bc:6f:ea:58:9c:1b:c7:d3:6d:bd:44:a0:
4f:ea:76:42:2e:3c:65:62:cd:be:7b:c1:bc:15:3c:
54:4d:bc:ca:39:2d:69:a6:64:ad:d8:25:aa:08:2f:
92:8f:dd:4c:ee:ea:e0:e5:da:be:0a:b8:34:9b:c8:
d3:07:79:40:22:14:bb:5c:1c:02:dc:38:7b:6b:38:
56:7f:30:6a:c8:fd:88:a5:03:15:b0:7b:06:55:6e:
87:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:49:E8:9B:B2:62:A0:98:FB:3D:A7:05:16:85:AD:54:E6:4D:46:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/82f98770-2fec-3612-9492-8034c3d8a26a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:03:4e:2f:4a:f5:25:b4:d1:9d:fb:ca:cb:81:5d:29:c7:2e:
78:f8:18:9f:a1:7d:88:b8:85:0d:fc:47:03:f0:aa:9e:78:02:
21:c1:a1:2a:c7:01:95:02:f8:fa:eb:4e:fa:52:35:5e:a4:8f:
ec:e8:ef:9a:ef:75:e5:d8:72:f2:da:c7:d4:35:7e:ad:f8:bb:
87:cd:ac:80:16:6c:ab:9f:c3:d5:9a:5e:e8:4e:43:25:2e:b6:
25:32:6a:51:4b:22:e4:50:b2:15:ee:51:55:ed:84:68:8c:d5:
03:55:1d:e6:f9:cc:30:ff:3d:ee:cc:52:ff:b4:81:f2:04:c0:
17:c0:00:61:1b:88:e4:a3:10:84:12:73:1e:95:ad:3e:e0:36:
78:7c:24:f2:f9:92:82:5d:14:42:84:b9:47:2b:de:50:b3:da:
2d:c8:f8:7b:d7:bb:63:9d:4b:e8:dd:15:4b:cc:db:39:f6:b5:
17:39:0b:30:1f:5a:ca:4f:18:5b:18:7b:bd:89:75:f5:e3:12:
59:9d:f6:1f:07:ca:9e:d6:6d:ee:11:e2:bf:f4:29:e7:a7:34:
83:f3:3f:d3:8b:1d:39:bd:a2:b0:74:3c:4c:f3:7b:6e:74:f8:
68:b6:06:1b:06:ad:31:3c:47:c8:bf:cf:95:8e:fc:88:36:6a:
70:95:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:40 2024 by rpki-client on console-ams.rpki-client.org