Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8335d16a-21d6-306d-a326-cbba0c139212.roa
File: 8335d16a-21d6-306d-a326-cbba0c139212.roa (raw, json)
Hash identifier: k4KHYsMOWbYHogc/t6RZPw9YdCm9ydyskA4yxFBv3nk=
Subject key identifier: 4D:C0:63:AA:E4:D9:E5:32:EC:A3:43:C6:F7:71:8F:10:8C:50:F6:FD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FBA2A6C9895CB38B98BEC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8335d16a-21d6-306d-a326-cbba0c139212.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fb:a2:a6:c9:89:5c:b3:8b:98:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=bef12bf9-0481-4edf-b642-32eee7b8c676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:bb:b0:f2:74:0d:82:c1:96:f4:59:4d:51:
b7:aa:09:82:e6:24:2c:f1:d9:d1:65:09:3a:01:89:
04:e2:e3:1c:4c:6e:c7:94:ae:1d:ef:77:24:48:96:
c3:36:63:79:48:84:7b:21:bb:0d:f0:be:23:b6:c0:
16:ef:92:1e:77:7f:0b:93:9c:61:09:64:58:40:3e:
61:ad:b0:cc:81:de:48:4c:26:55:c9:e8:b5:99:f0:
b7:dd:3a:22:50:e2:c9:41:1f:d8:84:a5:4d:2d:80:
68:1d:4e:cc:cb:3c:7c:f1:7a:4e:be:00:74:d2:16:
15:7c:e6:21:d8:a5:c2:54:cd:14:bd:fe:6b:5f:37:
79:05:f7:a1:d6:e3:17:9a:72:30:e0:5e:09:ee:d6:
4c:3e:20:5d:58:14:c1:2c:b7:c0:84:0c:4b:1c:a3:
1c:01:d6:87:c1:d2:9d:ad:3a:9a:6f:f0:8b:e4:cb:
79:64:d6:42:b2:2f:06:b9:0a:3c:d4:c3:3d:d2:a6:
06:92:90:b7:f1:92:44:6a:9f:65:53:f2:88:50:29:
d4:50:10:20:a7:3c:80:61:2c:a0:53:08:24:d9:50:
9d:c9:86:07:2a:b8:33:76:f7:b3:ec:1b:6f:01:8c:
aa:c1:f9:a0:b3:31:ec:57:35:32:f9:d7:b7:0e:60:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C0:63:AA:E4:D9:E5:32:EC:A3:43:C6:F7:71:8F:10:8C:50:F6:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8335d16a-21d6-306d-a326-cbba0c139212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:08:26:05:1f:ca:87:de:8b:38:d9:0f:46:74:18:96:95:24:
b8:b5:91:f8:8a:b2:08:16:c4:2b:00:10:50:6f:98:1d:e3:62:
bc:52:ce:ea:ec:06:58:7a:f5:c5:68:4e:f0:ee:8d:19:f9:93:
e6:9c:c4:f4:15:79:02:26:f9:6f:8e:0a:73:99:c0:92:37:70:
1b:b5:ee:53:d7:d7:d4:13:01:56:6a:20:2b:fa:df:7d:e1:4a:
5c:42:fb:a8:21:77:0f:12:e4:38:50:1d:16:5c:45:2a:c4:e5:
4c:3f:32:b7:2b:d4:5e:54:41:1f:52:59:6d:8c:49:cc:1b:dd:
2b:72:0a:cc:94:84:96:7a:b4:ec:6c:7d:5b:e9:0f:fd:55:a5:
00:ca:ba:13:d5:f3:93:af:ea:29:1d:c3:31:5a:7a:40:67:c5:
ab:50:ca:7c:dd:4f:a2:dd:92:6f:05:1b:76:6b:79:5e:e1:61:
ef:1e:4f:c2:5d:e6:fa:6a:69:bf:aa:bc:aa:5b:d2:1c:e3:f4:
07:01:d8:1c:0d:45:15:e7:bb:a4:02:b5:26:6d:a3:38:25:1f:
a1:f6:c2:cc:0d:c7:7e:e6:53:c1:ac:ff:ac:b9:98:f3:b2:5b:
69:e9:1c:91:60:40:09:52:2c:06:9d:0f:f6:d6:7b:1b:0e:ed:
6d:31:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org