Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5908e9af-b6a8-358b-bb4d-6dbfb69c831c.roa
File: 5908e9af-b6a8-358b-bb4d-6dbfb69c831c.roa (raw, json)
Hash identifier: fy7CT8rxPoE1h8tmqyLE8xk6WX8MB9BXw7o9TumHTIY=
Subject key identifier: EA:94:94:D3:FE:7B:10:CF:48:31:FE:10:63:40:B2:52:13:50:CB:DC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309F630B93238FABA410E3600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5908e9af-b6a8-358b-bb4d-6dbfb69c831c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:30:b9:32:38:fa:ba:41:0e:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=078b7335-a290-4edb-83ee-8bb43c35319e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:e0:23:74:2d:9c:e5:ed:e5:36:9d:5e:77:
64:33:b4:58:0a:be:4f:0d:6f:78:c8:b6:c3:04:40:
21:b2:f0:af:fc:de:59:82:c7:15:94:4f:41:7d:c3:
46:e1:7b:58:92:57:f9:ff:8f:e5:84:0d:99:28:6a:
cf:bf:e8:fb:23:c3:9b:8d:5b:0b:cf:f9:ed:65:f8:
98:2d:ac:63:4c:e0:de:cb:ff:5a:57:6b:c6:b8:bb:
d5:5f:89:a4:21:46:05:c7:41:90:e3:45:f9:ec:06:
4e:84:4c:e7:03:a0:11:83:98:4a:f7:39:88:17:68:
51:4d:72:c7:c3:f3:9e:4b:30:7a:49:cb:d1:96:3c:
f3:05:ae:b1:f1:19:99:62:ee:f8:6a:09:4a:53:fb:
a2:db:c7:2f:19:f5:11:21:42:1e:10:13:93:36:0f:
a6:aa:1f:5d:99:d3:fb:2c:d7:21:b0:7d:0d:85:b4:
19:5f:88:f0:8f:72:f7:56:0b:51:87:3a:6a:f4:29:
03:c8:b0:be:c9:f5:95:08:60:be:a2:ac:4f:cd:96:
a2:2b:75:63:c8:15:31:33:c3:09:f2:67:93:f1:de:
79:dc:de:cf:39:4d:7e:20:19:d8:38:65:70:73:fb:
a6:2b:2d:06:9f:cc:bd:02:78:62:72:7d:97:19:11:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:94:94:D3:FE:7B:10:CF:48:31:FE:10:63:40:B2:52:13:50:CB:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5908e9af-b6a8-358b-bb4d-6dbfb69c831c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:60:b4:da:74:db:3f:25:c0:a2:51:78:f6:f1:75:b6:81:0e:
f3:90:3c:6f:f7:80:cd:74:ac:4b:28:45:6e:97:fd:28:02:7e:
6d:ce:45:99:7d:9a:91:41:90:5a:82:95:f1:92:35:a1:36:a1:
1e:70:7b:53:a5:80:69:69:cb:b0:9c:09:94:de:08:de:f7:4f:
90:0d:09:94:7a:60:2d:f2:36:5f:9e:31:8f:2a:9c:7c:ec:ed:
7c:b6:44:df:d1:ba:ae:17:f0:4d:99:38:64:56:05:39:c6:87:
bd:e5:28:1c:bb:2c:6a:af:23:2e:d5:9b:da:5f:5f:58:0b:c3:
8a:94:cc:b5:61:31:f1:88:df:6b:24:52:dd:6a:07:c3:0e:d9:
90:49:96:bc:59:65:18:0a:b9:aa:aa:71:17:3b:67:86:16:3b:
ed:9a:ff:99:74:8f:4e:4f:36:60:2d:e2:e7:52:a3:ec:75:5a:
55:9d:55:17:07:57:5e:c8:bc:3d:85:e4:08:fb:bf:e5:25:b0:
9d:29:4f:dc:0b:14:6b:7f:a4:7b:e2:b9:c2:51:be:52:36:87:
de:16:78:ba:09:37:60:17:5d:e2:ab:10:a1:2c:a7:9a:81:89:
cc:1b:16:62:ae:9b:23:db:2a:1e:81:c6:1e:17:fa:2a:80:04:
8e:68:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org