Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a393a018-ee98-3f1a-a238-f8459abbd641.roa
File: a393a018-ee98-3f1a-a238-f8459abbd641.roa (raw, json)
Hash identifier: synWIp1Uudn+as05YyHBB51GtDHMVFrVSxgU+A08xNQ=
Subject key identifier: BA:DE:67:D4:2C:1A:7F:F3:6D:D3:17:60:9C:95:03:52:1F:1D:29:B0
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1F3C007DBDB8F19F508280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a393a018-ee98-3f1a-a238-f8459abbd641.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1f:3c:00:7d:bd:b8:f1:9f:50:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=6e8cfcb6-c945-4a5e-b662-a19d48eeec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:23:a5:ec:9a:f3:95:3c:13:7f:a0:0a:ae:
3a:f7:8d:9b:a6:3d:ae:d6:9d:77:a3:5f:b4:2d:67:
7b:f9:0c:ee:53:6f:57:23:38:0a:f2:c3:ff:05:3c:
4e:f7:bc:be:29:59:46:27:bb:7f:41:a1:11:c3:73:
68:ed:c5:2e:06:a5:77:c0:35:6d:f4:9a:1a:94:de:
a8:56:62:db:d8:b0:26:6d:c4:a2:2a:95:91:d8:be:
76:4a:ff:4d:0b:23:7a:8f:85:bc:28:c9:03:36:6b:
92:4c:7f:59:21:03:93:b2:57:c1:5b:c7:08:1d:b7:
30:2b:c5:90:73:fb:71:db:56:5c:07:d2:06:06:f0:
14:b6:c2:8f:b7:a4:99:34:11:cf:ad:1d:50:fc:6b:
a4:f9:c0:e1:60:ed:6f:bf:59:82:5e:27:81:d7:af:
dd:bf:fa:19:59:0c:3b:b3:f3:5f:3d:13:5e:13:b7:
49:5b:17:07:6a:cf:a7:3a:a7:59:90:ba:f0:2c:32:
87:15:9e:50:06:88:53:3a:e2:e5:8d:61:57:3c:6f:
55:af:7e:69:c7:c7:d7:97:77:54:54:0c:a7:5b:eb:
b0:1e:35:33:e1:6d:f8:bb:6c:44:d9:83:9b:c2:f1:
10:87:36:07:f8:1d:83:98:d3:b2:c7:2e:07:11:de:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DE:67:D4:2C:1A:7F:F3:6D:D3:17:60:9C:95:03:52:1F:1D:29:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a393a018-ee98-3f1a-a238-f8459abbd641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:93:00:fa:3a:8e:4e:5c:18:89:c8:bd:1a:4c:15:62:f8:fa:
bf:66:79:6a:7d:40:4f:5e:52:20:7b:8b:38:c0:ea:70:ff:27:
93:a6:da:0d:6e:21:37:bc:0c:ed:99:15:f0:97:77:72:c7:6f:
b0:81:18:32:c3:11:31:a2:4e:49:8f:8f:97:d2:dc:38:52:55:
c0:72:b2:85:0b:cf:44:13:d9:74:64:3d:85:91:49:e7:19:60:
19:ce:d0:96:0a:41:90:78:36:1e:5d:a2:7a:3a:0f:ad:5e:fe:
90:f3:2b:6b:b5:b0:60:4b:79:77:fb:e7:10:4b:27:e1:9e:63:
2d:75:0f:23:b2:37:03:16:d6:17:d8:27:b0:df:f3:0e:c3:6e:
cf:1c:38:ae:b5:f4:c2:7e:7a:c5:de:e8:ff:18:47:33:43:85:
9d:d5:64:ed:78:30:11:3e:86:c5:28:19:dd:9b:5e:83:60:83:
2a:b3:72:b1:e5:13:a5:b0:a7:e8:84:f3:42:19:da:06:73:79:
dc:d2:91:30:83:a6:97:42:cb:52:3a:6f:8b:62:36:c7:da:5d:
81:5b:6d:44:2e:a7:20:24:a5:11:bd:14:e8:37:c9:63:a0:6b:
52:0a:68:8d:29:2a:9a:dd:09:bf:63:6c:56:01:34:57:bd:42:
8d:7a:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org