Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237ccfe7-9612-3c85-8094-c3a21989b32b.roa
File: 237ccfe7-9612-3c85-8094-c3a21989b32b.roa (raw, json)
Hash identifier: eY/xQzgWXRmjfTO3gG2KFtstw/mcYYQRB8Az2KwBYLU=
Subject key identifier: 68:5D:32:B8:43:C5:E0:00:C7:53:9F:D5:10:DC:24:10:2E:FB:9A:89
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F49CC70B0CE49AA83D5D40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237ccfe7-9612-3c85-8094-c3a21989b32b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f4:9c:c7:0b:0c:e4:9a:a8:3d:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=98351715-f729-4e8f-ab1c-d81a9017184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:bf:42:f8:21:50:d4:07:f7:a8:1e:82:e4:
12:a5:a7:bf:75:8f:08:f5:70:fe:24:83:94:2a:47:
0a:21:6e:d5:20:e8:3b:2c:26:70:9c:24:fa:bb:e4:
fa:60:9f:4c:b0:cc:43:8f:d5:e3:16:2d:eb:8a:1b:
76:6b:19:87:c9:8d:97:fe:dd:39:9a:fd:95:bb:be:
ac:2a:47:42:b9:de:a5:07:aa:f1:c2:a8:54:9d:21:
8d:1e:e0:97:e4:77:c7:dc:d3:80:61:c5:49:31:fb:
55:f4:de:05:c6:d5:da:fe:ec:d2:e9:b2:e1:6d:9f:
b2:a0:c8:05:ce:30:c0:13:64:c2:fe:49:bb:cb:ad:
f0:77:de:af:6d:b7:e4:d7:13:39:00:14:b7:73:82:
4b:7d:49:b4:3a:77:a9:73:0a:8c:03:03:1b:7a:93:
c5:34:ea:aa:46:34:9c:ca:ce:3c:4d:67:66:4c:e0:
15:16:9b:b0:4c:7d:33:f1:f8:ce:12:b8:3d:e7:aa:
68:07:92:a5:ac:91:7c:e9:a8:3e:e6:61:9b:fe:f1:
f0:16:94:b8:36:d4:0a:f4:fb:79:f3:83:db:4b:a9:
33:a7:ac:92:ec:d3:20:69:2d:76:ef:1b:d8:ed:73:
f4:bf:fb:53:77:ba:c0:50:38:2b:65:66:39:14:4a:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:32:B8:43:C5:E0:00:C7:53:9F:D5:10:DC:24:10:2E:FB:9A:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/237ccfe7-9612-3c85-8094-c3a21989b32b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:7e:26:84:84:1b:19:2e:ed:63:3b:6b:42:9e:44:15:3d:6c:
a2:40:e5:85:67:89:e1:c1:41:59:47:be:ab:23:fb:09:40:07:
25:2c:9b:73:31:56:32:70:79:4c:58:b1:67:9d:03:d9:89:34:
64:bf:db:cb:49:35:d1:52:96:23:5b:03:7b:81:b3:51:87:bf:
ed:bc:9a:fd:53:3b:b1:aa:8d:a2:c5:04:23:72:3c:4d:f4:e0:
9f:31:cc:3f:f8:54:a7:6c:90:ef:80:61:5a:ad:c9:14:c5:52:
c8:d3:ad:51:e8:fb:bc:d3:c8:f3:06:b8:fe:d0:f1:3f:ae:29:
12:fc:b9:dc:b5:af:e5:7f:76:86:b0:55:ee:d4:52:9e:a6:d9:
de:50:6a:7b:32:df:84:d4:19:45:4a:0a:39:8c:43:6a:ac:3b:
b8:45:65:ef:10:9d:b6:a4:0e:7d:03:e0:f9:6c:28:88:7c:53:
f5:e9:f0:ed:6d:1b:12:ef:81:87:dc:a8:aa:17:34:04:94:5a:
1d:3f:ef:12:36:3e:81:fa:0d:f1:47:d0:72:fe:46:8f:66:1e:
ae:07:bb:1d:f4:37:7b:4b:8e:33:aa:20:60:2c:0d:90:10:cc:
b1:40:59:75:3b:e3:3e:ef:40:7b:73:f9:36:eb:c7:03:30:77:
8f:98:e0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org