Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d688a286-5d44-3689-8ad6-3e51f2929891.roa
File: d688a286-5d44-3689-8ad6-3e51f2929891.roa (raw, json)
Hash identifier: MyUf2XQuQLhfjKqoezMdnDeMhL8ZfWPAhG0VSHBg490=
Subject key identifier: C6:01:6E:D7:9E:73:04:83:82:88:3E:60:0C:07:F3:E1:B4:DF:99:97
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0B5FE573C63BA793E2B280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d688a286-5d44-3689-8ad6-3e51f2929891.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:5f:e5:73:c6:3b:a7:93:e2:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=189c0e22-d209-4655-85d2-46e55214ec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:de:3d:d3:5e:6a:0a:e3:8b:d5:b2:92:1d:
83:a3:e6:4d:20:ec:c2:30:e8:43:66:6a:6f:a3:61:
62:f0:75:33:54:52:c4:82:a4:06:c1:8b:a7:d4:fb:
d6:66:9f:fb:92:b2:d8:e3:dc:cb:8f:50:1a:dc:a8:
e2:a0:ef:d1:3c:ab:cf:ac:24:77:20:07:ae:1b:37:
29:fa:3e:0e:87:69:7d:58:5e:87:b9:cf:d4:ba:31:
62:d8:18:a9:82:e7:9f:75:25:46:5f:15:dc:45:bf:
f5:4f:ba:f7:d4:44:c3:37:20:5d:10:da:33:7b:eb:
f1:2c:40:6e:93:c8:cc:a5:94:da:d8:42:e3:1e:56:
a5:68:9e:be:4a:28:da:16:6e:9c:2f:1b:c5:3a:ba:
48:09:22:a5:67:0e:a1:8a:bc:cf:21:57:6e:c3:6d:
3a:55:e7:1a:68:d2:9d:fb:f8:a4:35:78:d3:83:b3:
73:19:33:a5:02:f5:3e:6d:29:08:50:85:2d:ae:ff:
b0:66:28:c6:ad:fd:35:61:46:64:84:20:f0:77:09:
e9:c8:58:c0:b8:e9:f4:8e:34:30:fe:07:6a:f0:8e:
a9:29:0e:70:ba:9c:76:33:ea:18:e6:86:51:cd:df:
a0:33:c4:09:cb:5a:17:e5:ec:af:39:13:58:09:27:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:01:6E:D7:9E:73:04:83:82:88:3E:60:0C:07:F3:E1:B4:DF:99:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d688a286-5d44-3689-8ad6-3e51f2929891.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:dd:c6:30:eb:0d:e6:5e:cd:d7:a0:f0:5a:e2:86:aa:d1:41:
80:9e:54:5a:60:53:3d:a9:33:e4:93:3b:51:44:c4:8d:d0:30:
94:07:11:43:11:19:91:fd:1a:25:cf:f5:bf:6c:c4:27:63:39:
c4:a9:7a:5d:a9:8e:f9:fd:f0:3c:65:ea:27:1d:7b:e0:6b:d6:
0c:c9:7b:62:be:d0:10:9c:43:63:2c:e5:9d:2a:35:eb:59:81:
fa:6a:8e:80:6b:10:35:b0:7f:87:ef:aa:8e:67:98:45:6e:22:
c6:28:a9:2d:8d:ac:f9:8d:ec:be:53:b0:a6:14:c0:ab:76:3b:
01:c2:fd:bd:d1:47:20:72:f5:c6:aa:7a:b6:59:da:91:57:b2:
67:82:62:3e:09:61:1e:11:5e:a2:dd:6c:d6:ba:37:82:07:55:
56:02:bc:e7:51:23:f0:a2:18:3b:34:e1:83:a1:4c:d1:39:e2:
b7:bc:c0:7f:d7:17:74:19:e3:6e:7a:53:6b:04:10:8f:d5:a1:
ac:12:44:3b:18:b8:a7:f1:f1:98:0b:2e:ae:d6:48:6c:2a:1e:
35:22:23:5f:1e:93:6a:f6:08:86:23:3f:da:84:11:48:8b:bf:
0d:ec:b9:8a:79:fa:38:88:c8:65:87:46:16:27:e6:43:b5:06:
d1:ed:4a:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKC1/lc8Y7p5PisoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTg5YzBlMjItZDIwOS00NjU1LTg1ZDItNDZlNTUyMTRlYzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCjePdNeagrji9Wykh2Do+ZNIOzCMOhDZmpv
o2Fi8HUzVFLEgqQGwYun1PvWZp/7krLY49zLj1Aa3KjioO/RPKvPrCR3IAeuGzcp
+j4Oh2l9WF6Huc/UujFi2BipguefdSVGXxXcRb/1T7r31ETDNyBdENoze+vxLEBu
k8jMpZTa2ELjHlalaJ6+SijaFm6cLxvFOrpICSKlZw6hirzPIVduw206VecaaNKd
+/ikNXjTg7NzGTOlAvU+bSkIUIUtrv+wZijGrf01YUZkhCDwdwnpyFjAuOn0jjQw
/gdq8I6pKQ5wupx2M+oY5oZRzd+gM8QJy1oX5eyvORNYCSc2kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYBbteecwSDgog+YAwH8+G035mXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDY4OGEyODYtNWQ0NC0z
Njg5LThhZDYtM2U1MWYyOTI5ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrdxjDrDeZezdeg8FrihqrRQYCeVFpgUz2pM+STO1FExI3QMJQHEUMR
GZH9GiXP9b9sxCdjOcSpel2pjvn98Dxl6icde+Br1gzJe2K+0BCcQ2Ms5Z0qNetZ
gfpqjoBrEDWwf4fvqo5nmEVuIsYoqS2NrPmN7L5TsKYUwKt2OwHC/b3RRyBy9caq
erZZ2pFXsmeCYj4JYR4RXqLdbNa6N4IHVVYCvOdRI/CiGDs04YOhTNE54re8wH/X
F3QZ4256U2sEEI/VoawSRDsYuKfx8ZgLLq7WSGwqHjUiI18ek2r2CIYjP9qEEUiL
vw3suYp5+jiIyGWHRhYn5kO1BtHtSnA=
-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org