Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf56cc4-b392-3190-a134-7513e73809b2.roa
File: eaf56cc4-b392-3190-a134-7513e73809b2.roa (raw, json)
Hash identifier: 1ugGeDqkR2gnuhIxWg5UtrgCDroZokKnyHLAG8eDPH8=
Subject key identifier: 98:9E:0B:35:1E:42:DF:4E:7C:D6:0E:FE:5C:62:8F:47:F6:C3:64:11
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0B8603CC3AEDBB62B2EBC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf56cc4-b392-3190-a134-7513e73809b2.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:86:03:cc:3a:ed:bb:62:b2:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=5c375aa3-b739-47c1-bef1-6dc800a0be47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:2a:d7:cb:07:c3:7a:27:90:4d:18:d4:6e:
e5:99:3a:10:f9:2a:10:db:c9:84:c8:04:90:08:60:
f1:25:9c:29:71:26:2b:b3:2d:24:c1:e5:06:98:f5:
9c:3f:32:ad:3b:7c:61:de:70:64:da:22:11:91:d6:
76:c3:23:53:4b:c3:b1:17:1c:83:ae:35:61:8f:d0:
24:ff:97:70:7c:19:d5:77:09:69:4a:5a:ef:c1:af:
d2:dd:3a:02:f7:6d:ba:5f:ed:f0:90:59:af:5e:76:
28:51:a2:be:bf:b9:98:07:1c:8e:af:d2:63:76:df:
a4:37:a7:e0:ce:fe:4b:71:d7:a3:a3:73:5b:1c:af:
19:35:cf:28:62:26:0e:ac:16:7c:15:e7:34:3c:dc:
ed:d8:68:da:83:c5:2e:81:75:d7:18:82:b4:06:d4:
cc:03:af:95:15:3a:57:1e:33:f5:92:19:29:e5:b3:
9c:04:e1:b0:06:15:5c:26:97:63:17:ff:a0:81:1e:
6d:dd:00:06:59:42:02:96:dd:2c:16:69:d5:61:b0:
e9:69:d6:fe:44:b1:44:70:b3:b9:a7:8f:e1:af:7f:
44:f0:93:80:c3:ec:95:63:7e:42:e8:34:c2:f8:9c:
86:a5:9b:d0:1f:7e:23:fd:18:52:3b:88:b1:30:c0:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:0B:35:1E:42:DF:4E:7C:D6:0E:FE:5C:62:8F:47:F6:C3:64:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eaf56cc4-b392-3190-a134-7513e73809b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:e7:f6:8b:30:ac:87:d6:55:f4:23:56:44:b2:07:dd:d9:f0:
b9:15:4f:96:0e:27:a1:91:cd:82:1e:94:9c:d3:31:09:24:db:
6c:17:a1:72:0c:cf:e2:c5:27:ec:71:80:f0:f7:a0:bc:81:b8:
8f:1e:22:c9:c0:c4:ce:43:8c:95:ee:7c:d8:37:b9:0d:c5:10:
77:26:57:8f:d8:92:25:ad:08:e6:e5:fa:27:45:45:2c:71:27:
b2:08:6f:1e:d1:6a:fa:41:e1:df:10:b5:75:77:d0:00:12:14:
68:16:0b:d2:e1:53:94:3d:81:22:64:d7:6a:eb:8a:11:68:cf:
d0:9f:1a:39:a3:96:6e:01:07:a1:5f:0a:38:60:a5:e8:3a:e7:
43:1f:fc:8e:ea:f6:09:e7:2d:81:67:db:66:9a:45:7f:ff:8b:
73:d3:03:8a:c4:33:69:5f:24:6d:d9:7a:6a:61:23:67:95:48:
f0:69:c4:26:fa:ff:b8:64:ca:9c:32:c5:d9:37:d0:c0:db:c6:
3f:76:f9:b2:a2:4f:84:8a:c2:ba:f5:40:a0:33:35:50:7f:18:
f5:f6:47:02:ce:7b:ea:10:fc:6c:63:90:fe:e2:d6:69:58:89:
30:42:56:30:89:2c:40:1b:ce:96:61:a7:a7:88:bf:d2:1d:19:
bc:a8:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:43 2024 by rpki-client on console-ams.rpki-client.org