Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4486f891-b055-3e1e-b89a-e1ee6f2f176e.roa
File: 4486f891-b055-3e1e-b89a-e1ee6f2f176e.roa (raw, json)
Hash identifier: rCAOjVKltHkz9/SBxjw4Rm15dYLZ1Cpr0RCZtIjNvIY=
Subject key identifier: C9:70:DC:AC:F3:EF:34:42:8F:BF:03:60:5F:12:6F:7D:9F:60:52:41
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DDAC4727765F53208E6300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4486f891-b055-3e1e-b89a-e1ee6f2f176e.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:ac:47:27:76:5f:53:20:8e:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=545c903d-fee6-4b53-8aba-68f7b9a973fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:ea:57:ca:67:19:91:d5:63:58:8a:c5:52:
87:7b:9b:25:13:2b:c0:7e:80:d3:15:87:6e:62:d8:
d9:cd:1b:d6:0c:1c:5c:42:a2:69:d8:5b:be:13:ea:
e9:84:3d:1d:84:d3:3b:bf:55:e9:13:9e:6a:1a:5b:
c4:cb:4c:a6:00:b2:c2:a5:af:6c:d7:b1:fc:93:fd:
d6:12:e4:9f:45:0e:19:95:04:c9:74:bb:be:32:e0:
84:8b:7e:3a:7a:d5:76:79:04:e8:dc:43:51:d1:c4:
ae:2a:3f:38:f4:87:5f:cc:5e:c2:08:5a:7d:8f:b7:
9d:43:fa:99:26:8a:c0:24:13:9e:35:0c:23:23:6d:
f2:1e:4e:e0:1c:81:34:28:0c:2f:10:a2:b9:20:24:
dc:f0:0f:ad:17:58:fc:83:54:22:1a:21:62:f3:e6:
f2:c4:d0:26:04:92:1c:20:34:06:3f:06:ab:2b:8e:
83:fe:47:fa:04:f4:06:f6:6f:b8:de:4c:a2:ac:67:
67:c7:50:24:8d:7a:3d:f4:c1:58:a6:d7:2c:f5:dd:
41:9c:c4:bf:6f:41:55:7f:60:87:cb:65:3b:65:5e:
9c:93:e3:8b:06:53:3f:ca:f0:73:22:2d:55:12:d9:
53:55:7d:67:c4:ae:79:01:1c:15:92:42:df:b2:3c:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:DC:AC:F3:EF:34:42:8F:BF:03:60:5F:12:6F:7D:9F:60:52:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4486f891-b055-3e1e-b89a-e1ee6f2f176e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:b0:4f:16:7a:c0:0c:a0:c7:b9:8c:2e:8c:a4:2c:e8:6d:23:
d6:5a:60:a0:e8:83:bb:5d:a6:fa:31:24:d7:01:d0:da:6d:06:
29:dc:6d:04:4e:b5:a0:b9:a8:29:f2:6f:49:49:b3:13:e0:8f:
83:a6:ab:28:4b:95:33:48:c1:49:e7:49:ae:fb:a3:e1:39:37:
50:cd:a7:87:3c:68:43:1a:fa:33:a4:42:68:e9:91:c6:d2:e3:
75:df:79:06:29:44:f9:2b:b9:9c:32:bf:4f:f8:22:1c:c6:ce:
43:19:b3:18:37:50:4f:17:27:80:42:10:46:72:5e:c7:48:09:
d7:bb:37:86:7b:db:b5:13:4f:64:18:6b:86:42:9a:99:6c:14:
71:70:da:01:f4:51:b4:db:ee:27:0f:0b:f4:98:42:1e:6b:0e:
be:08:70:fa:c4:6d:ba:35:6b:ea:ad:51:c8:5f:4b:23:aa:49:
0d:cd:0a:e6:9e:87:94:83:2a:22:9a:bc:95:ba:77:9a:40:b0:
a4:d9:06:15:e1:c0:c1:b7:7c:85:08:db:3a:0e:20:4b:85:cd:
22:5d:36:b6:c1:66:35:da:45:58:c9:de:cf:9b:d4:9a:aa:a6:
cb:a8:26:8e:47:df:a6:3f:18:5f:79:9e:b6:61:8f:6e:e6:ac:
00:42:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org