Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/933ba0a4-ef44-3a8c-a4e8-311026619d6e.roa
File: 933ba0a4-ef44-3a8c-a4e8-311026619d6e.roa (raw, json)
Hash identifier: TqqBImd6E1x2ifRXWP8PIYNZc74PIt0eJbVfIr9MIgw=
Subject key identifier: 01:73:5E:B3:92:93:E2:94:5B:DC:04:06:6F:6A:7F:29:27:5B:FF:F7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583C51745E5092F55B22DA1DBE80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/933ba0a4-ef44-3a8c-a4e8-311026619d6e.roa
Signing time: Mon 20 Dec 2021 05:00:00 +0000
ROA not before: Mon 20 Dec 2021 05:00:00 +0000
ROA not after: Sat 23 Mar 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:51:74:5e:50:92:f5:5b:22:da:1d:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 20 05:00:00 2021 GMT
Not After : Mar 23 04:00:00 2024 GMT
Subject: CN=6154f151-04eb-41e6-8bf0-67bc351241a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:43:3e:04:10:e2:f9:25:e4:7b:e6:00:8e:
5a:bc:9a:ac:d2:55:f5:99:7a:50:df:96:73:32:b6:
c3:d9:24:3d:7b:26:d8:4d:46:25:84:86:03:50:e3:
f6:38:64:5a:13:76:61:08:c0:d0:b5:09:02:2d:22:
47:e3:7b:d8:37:1f:68:b5:a7:f6:f1:b1:3f:d8:79:
9a:9c:6f:74:5f:c6:80:c4:c4:47:f8:4f:ca:2b:16:
94:7a:bd:98:a3:90:2f:1a:47:53:e7:f9:b8:39:ff:
55:b7:b5:f3:a7:6c:b3:6e:64:e8:a0:e4:e1:e3:29:
9c:59:09:6d:ff:d5:a5:f9:a8:53:6c:78:ba:06:5b:
71:05:a8:07:0d:d0:de:b1:5f:79:54:a0:34:3c:47:
41:48:36:2a:19:4c:32:2e:09:bd:9a:59:fb:b2:95:
e3:73:7a:c6:9a:75:9e:f0:28:f5:aa:f0:ad:6b:dd:
d2:c9:be:bd:e8:1f:58:49:d2:c3:ea:0d:45:4e:1b:
ea:d1:23:f9:da:98:50:65:16:45:bd:d7:ba:be:ad:
9f:f7:9b:89:05:11:34:ee:ab:22:b7:2b:d7:76:fb:
85:df:4d:16:b6:94:37:b7:ce:92:2d:f7:57:40:15:
54:c2:67:09:c5:43:04:97:77:a7:94:09:e2:0c:b1:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:5E:B3:92:93:E2:94:5B:DC:04:06:6F:6A:7F:29:27:5B:FF:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/933ba0a4-ef44-3a8c-a4e8-311026619d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:2c:02:0a:1b:5b:cb:b5:09:3a:22:fa:35:d5:9b:60:35:7a:
5d:96:25:3c:1a:f4:02:0a:4f:94:84:2f:54:50:8f:84:d7:de:
bc:b8:3f:aa:d5:2d:fc:b1:93:f7:56:3a:f3:65:fb:54:79:38:
9b:36:0c:61:ad:62:bb:ea:49:a6:d1:62:ab:45:f3:69:5d:42:
3e:43:b6:e5:68:f0:1f:32:aa:df:3c:eb:3a:e0:78:50:95:45:
29:9c:5f:66:27:80:f4:c3:c8:dd:6b:ab:f6:87:f1:2b:2e:3f:
40:a8:7b:05:f2:63:e7:d5:12:39:55:59:68:48:94:e9:76:3c:
c1:0d:a5:2f:c8:24:81:a3:de:c0:54:06:ac:04:a5:75:da:6b:
6d:3a:46:9a:5d:78:63:92:a8:10:c5:37:43:c4:4e:ed:c7:c9:
21:2b:c1:11:4d:91:4d:3f:07:95:48:4f:28:b1:de:c2:38:61:
01:26:a9:a5:ef:e0:27:6c:8f:18:76:6c:a2:80:1c:90:fa:87:
0f:59:35:44:36:2f:14:3a:45:05:74:83:ed:f5:ce:40:3a:17:
2a:c1:af:62:e3:7c:0e:ff:a6:0e:a2:64:a2:ca:94:cc:f0:fe:
e6:ac:b8:ce:d0:db:29:d6:5c:cc:84:05:e6:9f:47:7a:c0:d3:
94:5a:76:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:40 2024 by rpki-client on console-ams.rpki-client.org