Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e8753e6-a2f5-3e12-a25f-ee54b8d119ed.roa
File: 8e8753e6-a2f5-3e12-a25f-ee54b8d119ed.roa (raw, json)
Hash identifier: d2INs0HG2GYxis+/oOkLSf344ScmkxDd8+2GySbl5ec=
Subject key identifier: 51:DE:64:CC:16:D1:E7:79:C8:54:AE:54:FA:5C:63:81:AB:1E:58:8A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A2527296ABAD3B2EFD53A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e8753e6-a2f5-3e12-a25f-ee54b8d119ed.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:25:27:29:6a:ba:d3:b2:ef:d5:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=90ab19c5-50fa-496d-b193-49c57d7f1078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:9a:47:21:ce:92:4c:9c:7b:f3:8c:cf:51:
a8:70:b8:99:d0:08:e9:ce:9b:d6:d3:fb:a1:0a:b2:
ba:55:77:85:15:71:2d:cb:f4:ec:3a:a5:3a:9d:29:
1c:2a:42:6c:90:0c:b6:a0:73:5e:7e:aa:2a:41:a7:
2b:a3:16:f1:0b:b7:4b:2c:e6:a6:67:25:6e:25:52:
bf:d5:b3:f5:32:9e:b6:37:15:ef:1b:28:5c:ad:86:
73:c5:64:26:09:3f:61:cb:1d:e8:09:c9:51:1c:84:
a6:1a:44:a7:d6:18:5c:bb:3e:ec:3e:d0:fa:62:72:
c3:9a:68:f2:6b:17:5b:e1:c5:29:f4:fb:6e:13:cc:
ff:8e:59:39:ec:16:2d:66:4b:1c:3e:65:5f:5a:08:
64:da:af:b6:90:8b:88:71:c3:62:e7:c6:65:c9:af:
ec:72:d4:56:38:66:c4:98:f8:79:0f:32:1a:57:d9:
5a:19:5e:bc:eb:af:a6:2a:09:21:08:04:61:06:2a:
68:7b:34:68:65:d4:b2:23:14:b8:36:fa:c4:fc:12:
df:4c:9b:ef:7e:24:e0:3c:45:23:4d:e7:92:5c:97:
7c:ea:d0:4c:b7:1f:5c:a9:87:40:50:0b:7d:29:79:
41:a8:e2:49:51:fc:29:9e:c0:01:c6:ed:8b:44:cb:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:64:CC:16:D1:E7:79:C8:54:AE:54:FA:5C:63:81:AB:1E:58:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e8753e6-a2f5-3e12-a25f-ee54b8d119ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:1d:b8:06:1a:0a:36:9c:17:80:37:3f:d7:59:b8:dc:f3:13:
97:3b:88:a4:ba:f0:2f:7f:75:95:17:a0:50:bb:b8:98:b5:69:
56:e9:89:7c:98:e7:b7:5f:2b:47:58:58:82:a4:74:78:89:80:
0c:14:83:cf:93:43:12:b1:1a:13:be:99:cd:96:5c:42:35:99:
97:c0:d7:91:7c:03:75:d8:22:6d:c6:ab:1d:ef:d3:15:6f:2e:
0d:14:ef:b2:51:97:bb:19:0b:da:b7:4c:ac:f3:5b:c1:5c:5e:
b3:25:1e:75:01:86:12:25:87:7a:18:42:66:90:2a:1d:76:1e:
00:84:0a:01:e9:6f:06:4d:f0:dc:50:bb:0e:f9:de:f8:dc:ac:
4f:1d:bf:28:82:30:bf:5e:0c:e2:23:7b:50:ee:6c:0c:cb:40:
3a:c1:a3:11:11:a2:8b:04:88:56:ec:21:4f:c9:cc:71:c1:21:
15:7a:fd:d9:d2:00:11:a4:53:c1:43:e4:17:79:8f:d9:85:2d:
5a:b8:cd:dc:bf:4e:a7:46:ed:c2:c9:49:0c:73:e3:71:8e:98:
77:09:6f:2c:d2:42:79:6e:54:cc:1d:f3:25:73:94:dc:b6:35:
fb:4a:5b:b6:a9:d7:fd:4d:ff:d5:60:e4:14:33:b9:cf:6a:c0:
8f:ae:20:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org