Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f1c65129-a1c7-375f-b988-2264ef14e9b0.roa
File: f1c65129-a1c7-375f-b988-2264ef14e9b0.roa (raw, json)
Hash identifier: IpOMGuOQxSt6JtjDch45De66qXGZ9PP+7dZ3EYM2XyY=
Subject key identifier: AD:4A:D0:8A:A5:A6:AC:13:83:D2:72:32:A2:90:6D:64:67:4C:72:3A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583F8FE1F7A7EDD4B72569AAC120
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f1c65129-a1c7-375f-b988-2264ef14e9b0.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Tue 14 Jan 2025 05:00:00 +0000
asID: 15169
IP address blocks: 142.250.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8f:e1:f7:a7:ed:d4:b7:25:69:aa:c1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Jan 14 05:00:00 2025 GMT
Subject: CN=db2d8c85-25fd-4eb0-b5a6-dcc46410cf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:79:60:72:49:38:64:e7:42:a2:1a:4c:ad:
5b:72:a0:dd:91:6a:7e:69:7d:ff:b1:f6:1a:47:f7:
ff:cf:41:46:23:03:e9:e6:cc:02:f3:de:e2:00:55:
2a:7b:5a:d2:11:81:72:44:d5:c3:f3:35:27:fe:37:
a2:56:ad:4e:3d:b3:54:20:2e:fa:43:39:bb:97:8d:
ed:83:16:43:5a:d0:53:24:6c:4f:98:8d:2e:57:3e:
40:b1:32:7c:3c:d6:4f:30:9d:97:f9:a4:27:57:7d:
21:8c:dd:5e:fc:e7:79:d4:c4:01:00:09:a4:e7:9f:
09:aa:bb:8f:f9:30:24:0a:2d:1c:4f:d1:09:9d:57:
28:80:15:b4:cc:2c:d2:ad:c6:ae:fe:b1:95:62:7f:
01:66:87:a5:70:8d:7a:88:9c:66:6d:e8:7a:f7:ba:
38:6a:b3:a5:ce:87:c6:0e:6a:0d:4c:f6:dc:f0:cd:
85:6a:71:a3:c8:f0:cc:a2:91:bd:6a:20:c8:50:62:
e5:50:d7:60:dc:1d:cc:42:0b:5e:01:56:81:25:6e:
6e:13:a9:88:5b:f1:e6:48:78:f5:b0:eb:41:33:f0:
b8:28:f5:3a:d0:e3:c8:85:78:a8:be:a9:8e:5c:8d:
ec:f3:4c:43:39:0c:23:bc:5f:7e:d5:70:70:4a:2d:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4A:D0:8A:A5:A6:AC:13:83:D2:72:32:A2:90:6D:64:67:4C:72:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f1c65129-a1c7-375f-b988-2264ef14e9b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:8c:cc:23:db:3f:1e:45:74:5f:65:76:40:c0:2e:0d:d2:c3:
e2:f7:5e:2c:d1:97:e9:5a:0a:99:e2:c3:8e:e9:0a:e8:98:9b:
da:8a:e2:51:04:2f:ee:f0:bf:21:a3:e4:98:81:2f:d1:8b:1c:
70:fd:4d:b5:22:17:fb:54:16:0a:73:a1:25:44:57:3c:2e:69:
1b:78:d8:0a:ea:d1:68:48:cd:b0:40:e1:ea:41:8d:aa:3b:a9:
f2:86:1b:15:99:b3:14:65:05:40:e5:8e:b4:c5:1f:d1:9a:33:
e8:d7:73:c9:51:f5:6e:f0:a7:d2:14:a5:fe:9f:fb:8b:55:88:
36:50:5b:ec:4a:d7:bd:47:cf:2f:0b:f9:0e:85:00:ad:63:13:
ca:e1:1d:bd:19:6e:e3:bd:99:c3:22:8e:5e:dd:71:ab:13:00:
ba:7e:43:7f:d0:13:2c:73:f4:f5:99:94:b1:6f:85:f0:ae:bb:
41:4a:bf:30:98:f6:e8:76:30:5b:c1:70:15:d0:cf:0b:40:94:
b5:65:6a:f5:c1:a6:bd:b3:c7:bb:21:4d:7f:fd:e7:00:54:a6:
56:9e:66:8c:a8:fa:1a:0e:0d:6f:3c:67:37:38:fa:7f:92:4d:
b2:a9:19:34:75:2b:ac:ed:04:66:af:71:47:f4:35:90:12:ec:
c5:d3:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:43 2024 by rpki-client on console-ams.rpki-client.org