Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52d7082a-e465-3e56-9532-adb2a302b8e5.roa
File: 52d7082a-e465-3e56-9532-adb2a302b8e5.roa (raw, json)
Hash identifier: G42B6aZbuU5ycJUqCF2nbjtz1BsjJrknXKPMJy4eVUw=
Subject key identifier: E5:AD:03:3E:2E:F1:80:07:2B:9B:AC:0E:8D:84:DB:18:96:1C:DF:1E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FEF594B0C90BB5217A9900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52d7082a-e465-3e56-9532-adb2a302b8e5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fe:f5:94:b0:c9:0b:b5:21:7a:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=0c02bb71-f924-403e-868d-ee4444b01872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:f2:5c:5c:3d:00:d9:c7:6b:10:22:18:3a:
60:ca:a9:65:3b:9b:cc:bd:eb:ff:e7:8d:ba:4f:40:
58:cd:bf:f1:ec:46:14:27:0d:1e:88:96:42:30:de:
2b:6f:e8:00:e4:86:08:9c:a7:a9:a0:63:0c:b4:2b:
38:28:78:26:39:04:68:df:c9:81:f9:cd:aa:a8:92:
25:ad:c9:3f:ed:fc:28:f5:33:8e:87:35:be:3d:2f:
ee:d1:9a:45:09:a0:0b:55:34:de:5e:b0:13:c6:3a:
13:90:83:8e:6a:32:72:ae:38:02:37:ac:11:78:57:
6b:2e:59:8c:28:ca:6b:75:0c:ef:23:df:2d:a5:6e:
44:b5:8a:fd:e2:e7:95:b7:60:91:25:3e:40:2f:31:
81:35:e6:41:bc:59:e8:c3:85:4a:d5:dc:d3:11:a3:
0a:ed:98:50:3a:21:ed:bb:99:c8:66:9d:98:da:1f:
6f:76:69:61:37:7f:20:fe:de:23:32:49:e3:83:45:
d6:bb:2c:5c:30:b9:37:73:a5:a0:f5:15:09:c3:14:
dd:92:4a:02:ae:00:ff:82:2b:3b:7c:d7:9e:18:7a:
d3:39:f9:b6:a2:41:07:01:41:ab:2c:fb:4a:87:d2:
d7:d9:90:5c:72:64:0e:50:9e:a0:b7:a5:04:8b:6a:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:03:3E:2E:F1:80:07:2B:9B:AC:0E:8D:84:DB:18:96:1C:DF:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52d7082a-e465-3e56-9532-adb2a302b8e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f1:0b:fe:2f:d0:eb:e9:4e:45:60:4b:6a:ab:8b:ff:c0:4b:
91:f7:b5:03:e3:e8:3c:f6:23:c5:99:96:ff:14:5b:8d:d8:fc:
4d:34:65:f8:9a:92:9a:67:02:c7:57:4d:dc:2a:8b:e1:de:8d:
41:a0:8b:dd:99:ba:1d:d7:06:a6:25:5b:fd:62:47:58:41:20:
83:f0:09:02:44:9e:66:ed:6b:6c:0a:0d:02:a1:cf:eb:9d:e9:
53:13:70:13:0b:10:2d:5e:71:da:56:a7:59:ad:0e:fd:fb:38:
fc:17:8d:f1:b3:db:11:96:67:13:76:53:90:8a:bd:ac:e3:c2:
de:38:08:e7:49:20:e7:fe:0c:62:90:42:19:82:d0:ed:51:42:
ca:6b:0f:de:b2:14:dc:f7:84:25:61:bd:0f:c8:c5:53:33:ef:
7a:33:0e:90:e3:c6:7f:36:92:5a:16:a0:2e:c9:41:65:44:a5:
47:0d:fe:d1:31:44:87:f8:ed:6b:da:63:ea:27:3e:b1:67:90:
8b:dd:d4:b8:34:b5:93:54:2c:ce:24:15:9c:f3:6e:80:1c:04:
b4:54:21:a7:92:dc:fd:a0:4f:eb:78:d4:b9:95:4f:31:fa:65:
18:e2:0c:b6:e9:d4:e3:74:f2:0e:a5:22:64:18:46:40:e2:07:
cb:fd:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org