Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7a89245-a5c4-3bbb-9e24-2387e4a11f63.roa
File: b7a89245-a5c4-3bbb-9e24-2387e4a11f63.roa (raw, json)
Hash identifier: mVyZ/ROJTyevoxWYQMBB2GO6KbLt2j6HBbGp02L3IRE=
Subject key identifier: 2F:F6:04:37:E0:45:18:77:88:77:24:02:D4:CF:B8:F2:22:3C:8D:0E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0AAB81FF5E7518AE59A0C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7a89245-a5c4-3bbb-9e24-2387e4a11f63.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0a:ab:81:ff:5e:75:18:ae:59:a0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=97134b04-3421-48d5-86f5-c0fae0e64e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:c4:5e:03:d2:84:b7:8a:49:29:73:c2:20:
51:20:bb:00:82:d8:7f:c0:ec:02:b8:e6:3a:bd:c4:
40:01:11:65:b6:de:90:0a:48:c4:de:5a:c0:67:7e:
1f:6f:bb:43:9c:31:b1:f8:84:cc:fb:42:19:d4:ea:
8a:86:9c:c5:18:43:06:b7:28:d4:87:ec:37:4a:d6:
78:b6:f6:34:2d:4d:da:eb:40:23:f1:9b:c7:12:bc:
d5:29:39:77:fa:b7:88:7c:8e:63:d0:72:f3:fe:7c:
88:7b:12:a7:f8:0b:4b:6f:8e:3f:78:8a:06:42:52:
01:ca:dd:7b:6a:52:bc:85:5e:09:73:56:6a:77:b0:
e6:7d:b3:24:65:81:df:e9:4d:3b:69:6e:09:48:96:
0c:c9:44:40:90:72:00:2e:e9:2f:36:f4:77:90:a1:
65:12:f1:47:7f:f1:ac:1e:3f:d9:ba:c4:6d:43:61:
7c:0b:41:f2:bd:1e:50:46:ef:c5:bd:fb:0c:e5:e8:
c0:0e:e5:44:33:82:fc:a8:84:a1:b3:95:e0:5e:96:
aa:ff:05:63:3e:c5:ca:07:0a:7a:01:d3:fa:44:97:
93:48:88:06:cf:36:75:59:a2:b3:e9:c2:b3:c9:29:
8f:d1:9f:c4:89:93:d5:fb:90:c4:6f:e4:2f:9c:18:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F6:04:37:E0:45:18:77:88:77:24:02:D4:CF:B8:F2:22:3C:8D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7a89245-a5c4-3bbb-9e24-2387e4a11f63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:ec:2e:32:b2:58:59:81:a0:0a:f4:4e:d9:0a:90:81:22:6e:
af:a7:4b:e5:5e:45:be:fa:f5:76:75:c9:b5:77:43:02:fe:68:
a9:d2:71:71:db:54:55:05:ae:a5:90:7c:4b:0d:de:82:3c:c0:
db:89:2b:2f:3b:d6:8c:29:3b:1e:b7:eb:05:26:b6:b1:b2:d8:
c7:a2:56:ec:cc:c4:6e:a3:0f:bf:9e:b4:af:00:84:60:c6:98:
a1:ea:cb:85:af:de:28:f9:8d:09:97:19:13:a5:8d:17:0a:95:
97:54:91:7e:c2:45:79:2d:96:79:82:12:a0:a0:f2:ac:59:5c:
51:b2:37:3c:7d:db:e8:52:57:22:86:07:58:a9:d0:95:b3:00:
44:57:1a:68:f9:23:13:f6:f0:63:8f:cc:c3:fa:0a:54:f2:7c:
fc:3e:f2:9d:a1:66:fe:8a:23:0a:2a:dd:67:83:10:0d:33:ba:
a6:3b:f6:c7:9a:19:00:f0:e5:7b:02:d1:7b:05:f6:7f:d6:b1:
ee:e3:ce:1a:0f:23:b4:81:3f:ac:52:b8:3a:94:cb:16:c9:bf:
e2:ef:c2:42:82:32:71:31:2b:d6:60:97:a5:81:53:62:82:75:
7d:41:e6:8e:21:1c:64:6a:7d:66:c6:0e:93:b2:c6:fb:b4:cb:
c1:de:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:42 2024 by rpki-client on console-ams.rpki-client.org