Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa8f7aef-495f-3ed3-866e-1d8746cfa685.roa
File: aa8f7aef-495f-3ed3-866e-1d8746cfa685.roa (raw, json)
Hash identifier: hDDbmlLOgfyw0ODvvR4p8SoTQ9CBaVa/4ZCu8DShqBM=
Subject key identifier: 48:7C:30:30:5A:3F:59:41:38:07:C1:9B:77:ED:F1:24:CD:45:80:14
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F1C1BB185DD03D36E35570
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa8f7aef-495f-3ed3-866e-1d8746cfa685.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f1:c1:bb:18:5d:d0:3d:36:e3:55:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c68626b5-e143-4e33-80ca-4e384f2de1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:71:a0:a1:87:90:bd:1b:b4:93:10:68:ca:
5c:70:6a:b4:1e:18:8b:75:32:85:46:28:89:9a:a4:
95:b6:7a:ed:53:1f:f4:c3:13:fb:54:6b:2a:2c:35:
d9:a8:d7:69:d4:24:58:73:e7:bf:fb:33:a3:78:43:
b2:47:19:9d:b6:cf:5d:07:6f:ad:4c:6c:c8:8d:20:
7c:fe:be:ba:f5:06:89:c1:37:85:fa:52:83:e7:fe:
27:65:07:33:1e:09:cf:2f:a8:4e:e4:ab:12:e1:1f:
54:2e:33:49:05:3b:87:c6:20:70:9b:5c:1a:d9:13:
70:62:b4:32:3a:cd:b4:2f:8b:a8:5d:36:64:f8:5d:
1d:b2:d3:60:29:fa:bb:1d:79:8d:df:93:ee:dd:0e:
87:c2:12:94:b3:28:c7:7e:85:1a:ae:e4:cb:54:a4:
95:2d:5c:57:6f:1b:32:cd:84:23:79:2b:c0:6e:64:
16:62:6a:85:19:c3:42:38:ef:9c:09:e2:3c:2b:f7:
5d:79:22:2b:d0:8f:5f:f9:92:91:10:d0:1c:6e:be:
bf:05:e2:31:1c:94:7b:53:4e:5d:2a:43:c3:86:6c:
8d:68:56:63:58:47:60:85:be:1d:07:9e:94:62:e0:
01:9e:0b:f3:87:5e:e4:da:32:b3:22:d9:46:bb:1b:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7C:30:30:5A:3F:59:41:38:07:C1:9B:77:ED:F1:24:CD:45:80:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa8f7aef-495f-3ed3-866e-1d8746cfa685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:84:98:45:a1:a5:e6:00:f8:f3:66:47:cd:e1:a1:10:be:fe:
6c:65:5c:0e:79:c5:cd:fb:1a:e3:45:81:82:4f:5e:cd:96:79:
cf:dd:9f:87:62:ca:0f:d8:ca:eb:2d:31:16:5c:d8:5d:1f:78:
b1:1a:ad:cc:9d:fc:99:28:ec:2b:0a:ba:bf:e5:c3:18:70:ca:
a1:3a:2f:33:57:56:23:f0:94:bd:56:5e:13:82:12:0a:83:87:
04:57:41:8b:e3:58:c7:cd:5a:70:dc:cb:21:3d:ab:23:c5:fb:
6b:a9:67:fd:da:a8:88:32:20:d5:5f:d9:3c:cf:db:1e:c6:b6:
4c:74:6d:9f:37:2b:ff:14:ef:5d:bb:3d:dd:f8:2e:c4:89:de:
fb:51:91:03:8c:41:37:4d:90:fa:4a:be:4c:f9:60:9b:e5:d3:
7f:39:66:6a:dc:35:e4:0a:82:f8:c7:ea:4f:40:f8:77:76:94:
de:30:50:1f:da:83:ad:99:e7:23:d9:50:6a:15:02:d6:80:e8:
31:80:b3:08:08:85:a4:79:95:59:6d:aa:ed:7b:b5:ad:77:aa:
9c:e4:1d:83:d6:28:f0:fb:74:b1:5b:11:5d:eb:35:d2:5b:24:
f8:42:e6:d8:d7:f2:b3:19:d2:3a:b4:8a:bf:85:81:45:91:40:
e7:61:7e:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ8cG7GF3QPTbjVXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzY4NjI2YjUtZTE0My00ZTMzLTgwY2EtNGUzODRmMmRlMWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbVxoKGHkL0btJMQaMpccGq0HhiLdTKFRiiJ
mqSVtnrtUx/0wxP7VGsqLDXZqNdp1CRYc+e/+zOjeEOyRxmdts9dB2+tTGzIjSB8
/r669QaJwTeF+lKD5/4nZQczHgnPL6hO5KsS4R9ULjNJBTuHxiBwm1wa2RNwYrQy
Os20L4uoXTZk+F0dstNgKfq7HXmN35Pu3Q6HwhKUsyjHfoUaruTLVKSVLVxXbxsy
zYQjeSvAbmQWYmqFGcNCOO+cCeI8K/ddeSIr0I9f+ZKRENAcbr6/BeIxHJR7U05d
KkPDhmyNaFZjWEdghb4dB56UYuABngvzh17k2jKzItlGuxvbiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEh8MDBaP1lBOAfBm3ft8STNRYAUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE4ZjdhZWYtNDk1Zi0z
ZWQzLTg2NmUtMWQ4NzQ2Y2ZhNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIaEmEWhpeYA+PNmR83hoRC+/mxlXA55xc37GuNFgYJPXs2Wec/dn4di
yg/YyustMRZc2F0feLEarcyd/Jko7CsKur/lwxhwyqE6LzNXViPwlL1WXhOCEgqD
hwRXQYvjWMfNWnDcyyE9qyPF+2upZ/3aqIgyINVf2TzP2x7Gtkx0bZ83K/8U7127
Pd34LsSJ3vtRkQOMQTdNkPpKvkz5YJvl0385ZmrcNeQKgvjH6k9A+Hd2lN4wUB/a
g62Z5yPZUGoVAtaA6DGAswgIhaR5lVltqu17ta13qpzkHYPWKPD7dLFbEV3rNdJb
JPhC5tjX8rMZ0jq0ir+FgUWRQOdhfg8=
-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org