Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d869ac6a-f832-3aa1-b425-a7796cb65860.roa
File: d869ac6a-f832-3aa1-b425-a7796cb65860.roa (raw, json)
Hash identifier: vvrhj8rrGc2+VWHh0mtwiXe+LEyHy07GR9TCMSCpZ1c=
Subject key identifier: 2D:C5:53:D4:AE:E4:50:90:65:1C:8E:BF:A1:41:BE:96:D5:CF:7B:08
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1A636DC92B670369896B20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d869ac6a-f832-3aa1-b425-a7796cb65860.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1a:63:6d:c9:2b:67:03:69:89:6b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=b1cfd3f8-5809-4618-8d9e-85a4a79cea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:f1:8b:e0:9f:48:e5:99:47:00:f9:12:c0:89:
0f:86:8e:45:af:fa:11:47:a3:dc:d4:94:99:21:11:
17:cd:f9:c7:e9:41:df:11:88:24:99:53:27:69:5f:
c9:15:2a:d5:36:7e:62:52:12:e3:62:d0:45:de:e5:
e3:68:ad:d3:13:2e:b5:46:4f:41:38:74:b2:8b:d0:
ed:f8:b4:6b:93:1a:ab:7a:d4:12:5a:5b:fe:1e:05:
30:46:bc:23:10:de:da:ba:54:89:6b:c7:b9:b9:86:
a5:46:1f:ed:8c:f6:6c:80:be:54:0f:3f:d3:38:e7:
32:8e:75:53:93:d8:67:f0:bc:53:1c:31:f5:c9:b1:
c6:8f:a7:a6:c1:27:d9:d6:1a:b0:3f:24:2b:dc:e4:
95:c9:f5:36:66:44:74:0d:5a:c7:0c:cf:aa:c4:01:
2b:81:c4:02:16:c7:66:40:40:a8:8e:f8:16:9b:c8:
9b:47:99:14:52:18:be:93:b4:94:6f:ac:48:85:ca:
58:c0:39:3f:c8:cf:53:fe:e8:6f:04:de:d4:80:ac:
6e:af:4a:d7:23:23:ef:ae:82:21:e7:a2:bb:75:2d:
e9:c0:58:ad:31:64:8a:92:90:e9:a8:c3:2f:8e:0c:
41:47:a9:d7:5d:56:a0:7f:58:1d:54:65:9d:2a:c2:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:53:D4:AE:E4:50:90:65:1C:8E:BF:A1:41:BE:96:D5:CF:7B:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d869ac6a-f832-3aa1-b425-a7796cb65860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:98:6c:de:07:e4:18:bc:03:7e:d7:66:a4:8c:02:ed:e1:8d:
97:f4:2a:d5:c4:48:80:65:38:dc:44:bd:e1:67:1a:73:37:49:
06:d8:62:d0:d2:fa:9c:3e:38:06:85:4e:9d:16:40:b6:c1:66:
a3:15:62:03:70:c4:3b:cc:a0:bc:d0:a1:66:08:a0:c3:82:c4:
08:13:ab:24:a4:c6:7d:0d:00:87:57:fa:c4:c3:85:20:3d:35:
aa:eb:59:7f:1e:4a:a8:75:30:a0:6e:e5:ee:2c:49:69:31:da:
d5:fb:bb:0e:62:fa:d9:f4:0f:bf:68:9b:bd:1a:1f:78:da:92:
ee:db:3a:a3:0c:b5:00:5e:f2:b3:ff:0c:51:1f:33:c3:d6:e0:
ed:e9:2d:96:ae:57:76:57:24:e2:bb:0b:01:ba:90:d9:db:dd:
77:6a:08:f9:f9:7c:bf:5c:14:eb:37:2b:bb:c1:3d:8c:a9:9e:
85:75:a7:cf:15:32:e7:b3:49:2f:52:97:94:ed:51:84:f2:31:
3b:2e:33:31:84:60:33:20:9e:fb:c6:6e:6c:a0:49:ef:d1:11:
6f:a4:fa:d3:f3:1b:72:49:36:ca:3d:55:de:3c:f7:e0:d5:c0:
f5:08:f9:f7:b5:e3:95:e3:b7:35:34:17:2e:81:2c:4b:7d:94:
7b:7f:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org