Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d43ee0e-470f-3221-9db8-abd8a1570ca1.roa
File: 1d43ee0e-470f-3221-9db8-abd8a1570ca1.roa (raw, json)
Hash identifier: LzDmJTZ2XL76K5R0k791CJi4w8clISOHmlUV6xsJ/2o=
Subject key identifier: B2:FF:B7:30:40:49:7B:68:1C:81:40:B6:39:D9:03:8B:46:7D:65:AA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1D8D1DBC01769D238CCF00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d43ee0e-470f-3221-9db8-abd8a1570ca1.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1d:8d:1d:bc:01:76:9d:23:8c:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e24d509a-9dca-4f6a-8002-60e969176836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:2e:05:1b:cf:c0:c4:4f:c6:4a:72:76:81:
64:d6:cc:68:1f:dd:4b:07:50:83:64:da:c0:26:e6:
6b:25:32:be:2d:02:46:7a:a7:99:a3:c8:4f:54:f9:
35:14:25:b6:40:7b:cd:7c:46:b0:18:f4:fb:db:a5:
a8:b5:27:40:15:2c:14:32:70:1a:8c:65:91:2e:51:
15:9c:69:06:c8:b4:50:2f:af:a5:3a:3b:59:90:2f:
fe:f2:23:5a:db:04:db:b5:b4:24:ba:0f:ee:09:30:
73:f0:40:e1:41:4a:05:cc:d6:87:cd:f7:67:ad:ae:
eb:f8:da:d5:17:5e:e5:b1:09:fb:36:84:35:b3:39:
c2:35:26:86:ae:7b:a4:87:7a:8d:b4:e7:02:13:1a:
3b:45:f3:d7:ad:82:fa:55:6d:ad:79:57:ac:3c:c0:
62:75:ba:4a:b3:f5:27:a4:55:9a:ac:fe:b6:58:1d:
54:60:2a:79:7a:6d:3b:a7:38:d5:9f:85:0e:4e:b6:
b9:64:8a:86:9a:cc:cf:eb:4e:b8:a1:6e:a7:82:2e:
50:16:ea:99:0c:d3:5f:a6:7a:f9:84:ab:1e:61:7b:
c4:85:72:7c:fe:73:33:52:e4:74:14:5d:72:d6:29:
59:8c:67:62:25:3e:d2:c0:ed:20:8c:a5:9c:58:6b:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:B7:30:40:49:7B:68:1C:81:40:B6:39:D9:03:8B:46:7D:65:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d43ee0e-470f-3221-9db8-abd8a1570ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:e1:81:60:d6:26:d7:47:44:ac:6e:36:81:8d:11:df:5e:ac:
8b:d8:ed:a1:92:12:87:94:d8:69:38:4b:82:22:02:f0:ba:ad:
ae:25:3f:73:17:10:ab:91:53:f3:20:18:af:09:d1:ad:0c:f3:
72:e2:4a:43:99:03:67:01:b0:15:ec:f6:01:3d:2f:7f:1f:fa:
73:f3:be:2a:9f:b7:6e:cd:cc:85:86:53:39:4a:16:08:9d:40:
41:0d:36:80:c0:46:5d:6c:c1:2a:4b:64:af:c9:82:cc:b7:33:
f6:56:d0:48:8d:c0:0d:d0:d6:25:35:85:bb:a1:27:fd:4e:56:
de:8f:f1:d6:5f:24:7c:a1:f9:a4:3d:c4:8c:2e:e2:69:87:6d:
3b:0f:37:22:49:de:e4:94:aa:57:65:1d:12:5b:1c:2e:2b:d8:
14:9b:e5:d8:bf:c6:9f:92:a9:2d:45:28:d1:90:b9:66:be:1a:
15:7a:8f:57:88:54:5f:e0:0b:49:c3:63:58:28:94:12:13:d8:
19:77:4c:25:a6:b0:9f:33:ba:aa:2a:a3:e7:d3:27:17:ce:eb:
87:89:38:ae:ee:3a:fb:84:79:03:a5:45:64:30:8a:34:a3:ca:
66:93:41:2e:d1:9d:a1:d7:34:95:04:b0:9b:97:87:6d:ce:e9:
9d:13:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org