Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c62d40-272c-3977-91b9-c3f59d2aefa2.roa
File: 28c62d40-272c-3977-91b9-c3f59d2aefa2.roa (raw, json)
Hash identifier: MJ1kPPIfT1yLyw4sVitw/veZrYs/aifVnXQWy/o1xTk=
Subject key identifier: FE:E1:3D:AF:D2:97:70:AA:AC:EB:A3:C1:5C:D8:2A:47:2A:F2:BA:DA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584075A0A632EBA597F19E365700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c62d40-272c-3977-91b9-c3f59d2aefa2.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Mon 07 Apr 2025 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:a0:a6:32:eb:a5:97:f1:9e:36:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Apr 7 04:00:00 2025 GMT
Subject: CN=e4bbb858-600a-4970-9922-0b0944311887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:45:b3:a3:34:a9:a2:fe:7b:9e:4c:9f:2d:
60:f8:0a:ea:43:0b:67:0a:85:e2:f2:9d:a4:78:f1:
20:fe:31:d2:af:92:ae:94:34:d0:c0:cf:04:67:c0:
a7:17:6f:70:64:11:08:41:1c:2e:08:5f:0b:50:73:
bb:74:5d:96:10:9a:51:a6:31:b3:35:4b:eb:f4:ab:
09:ae:68:b3:60:b0:89:a6:a6:c9:a4:23:05:3e:94:
51:4d:73:13:2d:ea:df:fb:09:21:e8:ee:e0:5c:a3:
2b:5f:60:48:f0:2f:bd:89:1e:0d:02:7e:c6:cf:44:
e1:43:20:60:4e:5d:10:10:e2:d3:8a:6f:12:5c:87:
e7:43:8c:dc:da:11:98:35:45:18:6e:dd:a6:86:b9:
3e:96:0d:f7:8f:5b:29:b7:56:9a:57:f2:e5:bc:66:
82:60:ec:fc:51:4e:ea:17:7b:6c:34:78:b2:94:ae:
7a:a3:e3:94:f6:36:5a:b6:10:9e:f8:15:fd:c0:89:
60:ef:12:9b:dc:04:cb:af:49:6d:83:4d:00:0c:6d:
6b:21:65:84:fb:68:7a:03:42:f2:08:1d:6b:32:e7:
e5:a4:f9:84:3b:d1:d4:1d:6e:42:ca:24:10:58:51:
6c:85:a8:b2:cd:06:25:2f:57:a4:37:0e:72:29:ea:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E1:3D:AF:D2:97:70:AA:AC:EB:A3:C1:5C:D8:2A:47:2A:F2:BA:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/28c62d40-272c-3977-91b9-c3f59d2aefa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:d9:38:44:9c:cc:71:05:f6:b6:9c:69:23:95:2b:4e:4e:41:
21:e9:56:6c:eb:1e:2f:7c:17:d6:d9:8b:5c:16:3b:32:40:75:
29:53:0f:62:63:24:e9:bf:a6:65:f4:82:d1:3b:c0:91:ab:d8:
b8:41:a7:ac:9e:b8:f3:f9:99:3a:0d:c2:88:33:d2:1d:fc:dd:
77:c0:9b:64:12:0f:3b:c1:63:4f:dd:48:41:32:10:b3:70:57:
92:3b:a8:8f:8c:4c:13:4f:c9:55:af:ca:ee:67:d1:8b:b9:0f:
7f:0f:61:31:66:50:22:21:48:04:bf:88:47:07:c6:12:a4:88:
e8:a3:58:13:3a:47:7d:ff:0b:96:d4:1b:10:86:c3:ce:7c:a8:
2e:5e:6a:79:53:05:3e:8f:26:8e:33:f2:7c:a8:88:3b:de:7c:
2a:39:5e:6e:72:74:a9:b0:73:ea:0a:11:75:78:03:0e:9b:03:
bc:3b:16:36:ff:fd:7c:11:ea:2e:c5:58:4b:ca:f6:fe:b5:cd:
d2:b5:b3:9b:3f:a4:0c:99:44:9a:12:de:a6:ed:ed:63:64:27:
df:ca:0f:ff:e5:2e:95:ac:08:34:2e:81:a7:34:a8:b6:a2:3f:
ec:73:26:36:70:d6:b5:5b:8b:95:9c:d4:08:c3:bf:04:f2:de:
9b:c7:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:43 2024 by rpki-client on console-fra.rpki-client.org