Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4eb28356-1519-3bbd-b20e-c59c27a2fb00.roa
File: 4eb28356-1519-3bbd-b20e-c59c27a2fb00.roa (raw, json)
Hash identifier: kHQTouuvmOzchUVtPHsVv2QC7bVd/3XWbsx5vIDABPg=
Subject key identifier: 16:EA:BD:6A:61:18:1B:9E:3D:1E:65:98:CE:AA:DB:2E:67:E3:93:16
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583FC4EBD9422823CC23B9D9D5C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4eb28356-1519-3bbd-b20e-c59c27a2fb00.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Sun 02 Feb 2025 05:00:00 +0000
asID: 15169
IP address blocks: 142.250.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c4:eb:d9:42:28:23:cc:23:b9:d9:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2025 GMT
Subject: CN=458b8da5-9434-4063-a97c-536b9d673381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:37:ec:21:cf:39:71:ae:16:2c:21:62:7b:
2c:19:3f:50:df:5f:6b:52:dd:84:94:c8:bb:ae:17:
2b:f5:39:86:e0:22:c1:00:fd:0a:a9:64:c0:6e:0e:
2c:6f:ab:1c:95:03:cd:9e:49:9f:e6:b8:24:f0:79:
09:6f:ce:df:f8:b8:d2:59:0a:ce:fc:1a:7c:cb:07:
2b:50:85:2c:0f:5b:46:25:8f:2f:82:57:51:02:da:
26:45:b2:e0:c8:13:b9:cc:33:89:cf:95:17:4b:4f:
aa:2e:96:26:f8:3c:22:d2:6d:73:3a:ed:7b:dd:75:
e3:4c:c7:9e:33:6c:d1:11:1b:dc:3d:f6:5c:c0:78:
c3:39:36:4c:6e:91:cc:ce:83:a0:90:eb:e9:9c:a4:
d1:38:2d:57:02:fd:5f:e4:ee:5f:48:2c:ea:fe:a2:
70:d6:ed:7a:6e:16:8a:98:da:a8:6a:52:be:bb:1c:
09:61:c4:10:b1:1a:8a:be:65:f9:bc:55:30:c4:ee:
01:f2:b7:3c:3f:c7:da:e1:3c:3e:9c:03:70:67:89:
ff:21:33:05:15:e7:5a:f4:cf:cc:f4:55:9c:df:3d:
34:ee:ef:de:2f:22:52:c6:20:08:4d:7c:44:66:5f:
42:6e:e0:68:b9:45:45:b5:53:39:de:b2:9a:d9:5c:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:BD:6A:61:18:1B:9E:3D:1E:65:98:CE:AA:DB:2E:67:E3:93:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4eb28356-1519-3bbd-b20e-c59c27a2fb00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:80:50:02:2b:46:03:45:88:55:85:69:a2:49:d0:45:39:6e:
ae:c2:2b:48:b2:26:d7:0d:02:25:9a:f6:5a:6c:28:f5:ab:0e:
71:24:5a:3b:32:a7:40:b4:8a:69:1e:b2:c9:37:cf:34:f8:4a:
d1:5e:c8:5f:6d:f9:a3:bb:3e:65:08:9a:d0:a4:ad:de:5f:3f:
65:35:30:c7:c3:66:b0:fd:d1:90:dc:a8:5e:96:c3:61:cf:b5:
f4:ce:0a:22:6f:eb:1f:0c:c5:1f:05:28:61:0d:06:aa:7c:f6:
db:eb:d7:b6:37:21:d3:a2:4f:21:b5:af:43:d1:81:7a:44:2e:
3b:cf:7e:55:72:31:15:6f:5d:8e:42:3a:66:9a:13:b8:04:97:
bd:76:08:ac:42:b6:bd:00:d7:c1:e8:e7:44:11:0d:c1:96:a8:
74:4a:ab:69:bf:ac:6e:41:8b:d9:98:72:ea:51:41:0b:02:26:
54:36:17:e9:dc:30:be:a1:cb:34:36:17:d8:dc:59:00:04:c4:
2b:e1:51:5b:33:46:42:6a:05:0f:57:0c:3e:9c:9a:92:ae:99:
10:09:c5:ef:7a:cc:6d:9c:56:82:6e:e6:1d:b3:3d:32:60:52:
12:79:12:96:e8:9f:fe:c9:bb:f0:70:35:f5:c8:da:ef:1a:02:
fe:fb:db:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:38 2024 by rpki-client on console-ams.rpki-client.org