Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/870f7b15-315e-395b-a2ea-34d9195e2043.roa
File: 870f7b15-315e-395b-a2ea-34d9195e2043.roa (raw, json)
Hash identifier: vpNo0Xmm1YqXRSsJdQWVLezjq0YbVeFejPHHWGtpg5k=
Subject key identifier: 61:9E:39:C8:34:D7:26:7D:55:C5:24:61:26:7F:14:14:CA:AE:0D:D9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583FC4EC05AFFC358CB4C7015E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/870f7b15-315e-395b-a2ea-34d9195e2043.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Sun 02 Feb 2025 05:00:00 +0000
asID: 15169
IP address blocks: 142.250.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c4:ec:05:af:fc:35:8c:b4:c7:01:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2025 GMT
Subject: CN=725e05ae-3a3e-438c-b23d-d475cf1d63ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:92:ca:b4:80:d8:e2:8c:43:9d:be:e9:08:
13:14:2d:0f:ca:0b:f6:56:95:6a:0f:87:dc:f9:f3:
62:b4:c6:e7:82:b5:f5:82:79:7c:87:b8:bd:52:2d:
a5:71:0b:4b:5d:a3:23:6c:c9:70:17:46:fb:48:05:
33:bb:1d:eb:65:f0:52:b5:8e:96:da:f1:65:c9:8f:
9d:6b:f2:2a:fc:6f:a9:e9:a5:c7:7f:7c:41:c4:2b:
29:f4:ee:fa:89:53:e0:8c:74:93:d7:87:8c:0c:7f:
a3:a1:fe:08:cc:d6:6d:0f:6b:ec:6a:c4:58:f3:5d:
af:c5:31:9f:47:24:3e:2c:d5:06:9c:78:26:39:c0:
70:21:97:a2:67:28:04:d9:ad:25:05:34:bc:dc:2d:
b5:ab:b2:1f:b3:ef:d8:e6:fe:e8:2d:57:6d:df:03:
bc:51:19:49:d3:66:67:16:28:3e:ea:75:9d:32:9d:
c9:2a:5d:dc:0c:07:5a:1c:46:f1:bd:58:2c:99:42:
bb:f3:7a:58:42:9f:4f:9f:64:f8:08:07:e2:8e:09:
a5:38:87:b6:c5:21:64:f0:c1:cc:d5:7e:04:80:b4:
7f:89:cc:14:0f:56:57:0e:ce:3e:53:6e:d0:03:b4:
61:0a:a3:23:b3:ab:df:55:4a:34:29:98:ff:1b:98:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9E:39:C8:34:D7:26:7D:55:C5:24:61:26:7F:14:14:CA:AE:0D:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/870f7b15-315e-395b-a2ea-34d9195e2043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:46:3a:4e:44:1e:5a:17:5a:f1:b3:ea:b9:9f:6a:a5:2f:41:
dd:48:a9:67:d4:6f:70:4e:45:bc:83:cc:e6:c1:da:8f:09:0c:
e5:ed:0b:64:b6:af:37:7d:c2:87:40:da:ff:87:56:a3:e3:ac:
36:be:63:33:3b:18:55:fb:0a:10:03:e7:4d:53:52:45:3a:2a:
e8:e1:5c:52:97:93:ba:e6:6d:de:bd:17:15:f7:4f:1e:03:d0:
8c:9d:03:32:7e:47:61:66:68:ac:c7:9d:5d:52:83:0a:f2:18:
36:08:c0:e3:64:0c:92:98:09:be:7a:c7:76:0e:2f:c8:cc:00:
bc:2f:f1:99:65:e2:cb:d6:29:d4:36:39:98:92:b8:7b:db:86:
18:66:7b:95:b3:4f:28:05:53:c8:44:b2:00:f2:dd:7f:0c:50:
02:45:20:95:7b:9f:86:87:24:bf:4c:db:3d:c7:33:c9:73:9d:
da:5a:a7:51:e1:70:e1:e6:62:58:72:8c:9c:fa:14:04:17:03:
05:6f:cb:71:d6:05:51:76:1f:94:b1:2d:cd:72:a6:04:0a:6c:
5b:7f:8f:3c:78:c1:29:c9:25:7e:fe:eb:d4:51:73:3d:4d:48:
1d:38:43:b9:7c:4f:41:df:c2:e4:bc:94:3b:43:67:c2:0f:03:
80:78:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:40 2024 by rpki-client on console-ams.rpki-client.org