Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2805dd0-25be-3de2-b6d7-1932ce9e73b5.roa
File: d2805dd0-25be-3de2-b6d7-1932ce9e73b5.roa (raw, json)
Hash identifier: sB5wMpZBBRnHKxpxIuEri/5teKWEjTkR5mvwGvhUkPw=
Subject key identifier: 99:64:3A:69:72:B6:64:28:47:24:3E:D7:93:B1:8A:2F:07:D1:E1:25
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EBF34919D51874096A2580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2805dd0-25be-3de2-b6d7-1932ce9e73b5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:eb:f3:49:19:d5:18:74:09:6a:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b8e2e359-c762-440c-9ed6-ea280ca7d45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:1e:5b:59:0e:3e:c2:aa:b5:03:b1:6d:4c:
19:25:9f:70:a9:ac:2a:f1:0d:23:4d:5f:f7:88:a6:
3d:96:52:6e:6f:04:53:89:ff:70:bf:a6:5a:00:51:
0a:5d:fd:a3:8c:75:22:11:b1:f3:3e:85:5c:b0:92:
8c:31:e8:cc:db:62:c6:ce:33:36:3c:c6:b8:f6:07:
dd:f7:f2:3e:d7:04:08:34:57:3b:ca:d0:72:cd:01:
0c:f2:d8:e5:53:57:d5:11:2e:1a:26:3b:d3:62:f2:
63:87:93:47:6b:f6:17:9c:d7:a2:68:86:7a:56:c9:
66:62:93:f0:4f:c0:f4:1b:9c:39:d6:1a:7e:11:d5:
12:da:13:a0:95:e0:73:27:f3:33:36:e9:43:13:97:
be:e1:d4:de:7e:05:bb:51:6b:38:3e:11:3a:0b:e9:
1a:de:77:aa:32:20:8f:9e:08:7d:fa:e6:a3:7f:bd:
cd:d4:ea:05:c8:20:16:c4:5d:6a:27:50:0b:6d:fa:
1e:0e:82:83:f6:ab:93:ac:71:4b:b1:66:9b:6d:02:
b9:22:7a:26:9d:4f:eb:54:3f:f3:f7:62:43:e5:4b:
4c:19:d1:46:6d:0f:6b:79:e2:37:f1:48:42:9a:ce:
e1:02:9e:15:f2:ae:8e:06:4f:e0:1e:86:df:43:f8:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:64:3A:69:72:B6:64:28:47:24:3E:D7:93:B1:8A:2F:07:D1:E1:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2805dd0-25be-3de2-b6d7-1932ce9e73b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7f:74:22:db:0e:01:e3:68:3e:41:16:af:4d:cb:df:98:14:
39:3f:40:84:3a:6b:a8:9c:08:09:a6:78:67:e2:1d:21:81:36:
f2:98:d1:86:87:61:ab:3f:f6:2e:b3:7c:40:36:b5:c9:e1:01:
3e:11:74:bd:5c:66:c0:a2:7c:cd:ff:29:73:d7:87:7e:db:59:
87:94:4d:f7:b7:3e:7b:89:e6:38:06:7c:5a:4f:56:6d:3f:eb:
4f:69:b0:0d:e0:7d:f9:b5:72:12:86:97:cf:38:39:7a:2d:a2:
4e:59:1d:69:31:89:76:bc:d3:24:b6:f3:25:d2:51:1f:43:75:
29:8e:e0:f5:b9:59:b8:57:33:68:dd:26:4a:1d:ca:76:bf:a2:
8e:75:33:26:02:ad:63:93:04:be:2b:cc:36:ce:37:0e:6d:97:
d4:ae:41:c3:ff:12:09:42:9f:52:f4:1b:27:f8:70:c5:06:7f:
4d:88:d1:77:a8:da:31:d1:be:7c:dd:0d:ee:ca:43:93:0c:f1:
9b:59:c6:3a:1d:8f:c6:c4:86:8f:b4:51:72:07:aa:e2:fa:7d:
94:eb:58:f6:7b:82:8e:b8:51:40:a7:4e:a1:e0:38:ad:f4:ce:
36:c0:66:66:88:cd:45:53:1c:91:aa:68:7b:1a:90:fb:bd:6b:
fa:1a:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:42 2024 by rpki-client on console-ams.rpki-client.org